last executing test programs: 1m4.1728971s ago: executing program 0 (id=53): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x20, 0xc6cdb91b1c448aed, 0xb, "2c33bb55b5878989fe6d97"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1f, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0x5980]}}) fallocate(r5, 0x11, 0x0, 0x5345) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 1m1.622331248s ago: executing program 0 (id=75): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xfffffffffffffd69}, {0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "c9de22fd1c7801fa79c4b35d81ec9588cb86d905932f6d5d852da309730ddbc2a02261c84916929dfa7554ff8de31f9b65edefd9042c77b44e8019213019acdb6b057c24ba647920a386d32ba6e57692e34277dbd852a24274561890924faebb3665b8287c0bb59e05dfcd3207b6cd4a1ca7f5d0f4e990df3d252a715bc6a5ddbb76a526174f583e0f5570ed6e6401fcceaec923958dda3341adeb7ae01ab743ba7b859162635ed46f3414e270dd9396512ee81709f80e4d9b3b41b33d47cc3f0a0a6e2e8f0b889dd5b708393c3f45b524f3447421b33027090515e8186021c08a7f7b592aa7185077d40f8dce156ed8274e75599e5f4f3e"}}}, 0x102) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000200)={0x1, 0x2, 0x1, 0x5, 0x8, 0x4}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000380)={{0x0, 0x38d4c005, 0x6, 0x3, 0x3, 0x1, 0x5, 0x3, 0x10000, 0xc2704d0, 0x9, 0x100000001, 0x2, 0x3, 0x8000000000000000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001380)={{r4, 0xfffffffffffffffb, 0x0, 0x5, 0x4, 0x65a66af3, 0x10001, 0x14, 0x7ff, 0x0, 0x3, 0x8, 0x401, 0x8, 0x200}}) r5 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) write$tun(r7, &(0x7f00000015c0)=ANY=[@ANYRESDEC=r6], 0xa2) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r3, 0x0, 0x9, 0x10, 0x80, 0xfffffff9, {0x4, 0x3, 0x0, 0x800, 0x1000, 0xf1af, 0x0, 0xffff, 0x4d, 0x89, 0x6, 0x400, 0x6, 0xe, "4a370679b67f08004e4ee7795bc54006545bbd8b738e9c39578765df6d00"}}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000040605040000000000000000bf432366f6504bea077b130b71cd73adfca7697048208730000000050001000701008005000100070000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x4, 0xc9, 0xe6, 0xc, "c7c78706333a9b4b"}}}, 0x10) 1m1.112602027s ago: executing program 0 (id=88): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = syz_io_uring_setup(0x3765, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x6}, &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) (rerun: 64) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 1m1.03148205s ago: executing program 0 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x57, 0x6, "eef0587ad526845e2e6f3ef88cee1d7b17b0314921ea85f7e8f6255eb1d9cf48fb90874d2d3902e1f646618bd5941e1c18d72b8ce97cd62f8c3a06a7eba45419f9915502456f47d2921f114d5ac53fb2f2d14e"}]}, @NFT_MSG_NEWSETELEM={0xe0, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb4, 0x3, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x53}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x14}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x174}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m0.962811579s ago: executing program 0 (id=91): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @any, 0x40}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0xe) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4800, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x5, @any, 0x5, 0x2}, 0xe) write(0xca, &(0x7f0000000100)="04fff430", 0x4) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xe}, {0x8, 0xffe0}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x108, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xffff, 0x7ff8}, {0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xffffff22}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\x02\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_emit_ethernet(0x42, &(0x7f0000001640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800480000340000000000059078ac1414bb0a0101008907ccac1414bb83034a000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3ca6945af0ee2caedb9e8ec81ed3c9de7c96e972a9b62332822b6d34"], 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12b4}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x8, [0x1, 0x125c, 0x0, 0xa, 0x9, 0x0, 0x1, 0xfffe]}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001580)={r3, 0x8}, &(0x7f00000015c0)=0x8) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xec}}, 0x20000000) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x5}, {0x1ffe3, 0xd}, {0xa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffaf) 1m0.90251006s ago: executing program 0 (id=94): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r7 = socket(0x2d, 0x2, 0x0) connect$netlink(r7, &(0x7f0000000140)=@unspec={0x2d, 0x0, 0xa00}, 0xc) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000200)={0xc, 0x1, 0x10, "6a75fe34d357a19377b578017800", 0x3631564e}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x58, r10, 0xb496be12fe179219, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000580)=0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@remote, 0x4e22, 0x7, 0x4e22, 0x8, 0x2, 0x80, 0x30, 0x0, r12, r13}, {0x1, 0x6, 0x8000000000000000, 0x6, 0xf, 0x2, 0x36a7, 0x2}, {0x8, 0x6, 0x0, 0xadd2}, 0x36e, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d6, 0x32}, 0x2, @in=@remote, 0x0, 0x5, 0x2, 0x1, 0xe6d5, 0xfe3, 0x7}}, 0xe8) r15 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xf6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000340)={0x1, 0x3, 0x1, {0x1, @pix={0x2, 0xa0af, 0x50313459, 0x4, 0x5e8, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}}, 0x6}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x4, @local, 0x7fffffff}}, [0x1, 0x0, 0x696, 0x5, 0x8, 0x8, 0x100000001, 0x7, 0x3, 0xffffffffffffffd6, 0x13c5f21c00, 0x80000001, 0xcc, 0x8, 0x3]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0xffff, 0x1ff, 0x8, 0x2, 0x1, 0x3ff, 0x7, 0x2, r16}, &(0x7f0000000440)=0x20) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x7, 0x3631564e, 0x3, 0x5, [{0x80, 0x5}, {0x1, 0x400}, {0x4, 0xb}, {0x4, 0x6}, {0xb, 0xfffffffe}, {0x522e, 0xf3}, {0x101, 0x3}, {0x6, 0x2000}], 0x80, 0x5, 0x697641ce78320d4c, 0x2}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r15, 0x84, 0x9, &(0x7f0000000480)={r16, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x9}}, 0x318093fd, 0xc, 0x51, 0x0, 0x8, 0xc90, 0xd}, &(0x7f0000000540)=0x9c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) 45.930634001s ago: executing program 32 (id=94): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000005bc0), 0x12) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r7 = socket(0x2d, 0x2, 0x0) connect$netlink(r7, &(0x7f0000000140)=@unspec={0x2d, 0x0, 0xa00}, 0xc) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000200)={0xc, 0x1, 0x10, "6a75fe34d357a19377b578017800", 0x3631564e}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x58, r10, 0xb496be12fe179219, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r12}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000580)=0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@remote, 0x4e22, 0x7, 0x4e22, 0x8, 0x2, 0x80, 0x30, 0x0, r12, r13}, {0x1, 0x6, 0x8000000000000000, 0x6, 0xf, 0x2, 0x36a7, 0x2}, {0x8, 0x6, 0x0, 0xadd2}, 0x36e, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d6, 0x32}, 0x2, @in=@remote, 0x0, 0x5, 0x2, 0x1, 0xe6d5, 0xfe3, 0x7}}, 0xe8) r15 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xf6) ioctl$vim2m_VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000340)={0x1, 0x3, 0x1, {0x1, @pix={0x2, 0xa0af, 0x50313459, 0x4, 0x5e8, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}}, 0x6}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x4, @local, 0x7fffffff}}, [0x1, 0x0, 0x696, 0x5, 0x8, 0x8, 0x100000001, 0x7, 0x3, 0xffffffffffffffd6, 0x13c5f21c00, 0x80000001, 0xcc, 0x8, 0x3]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000400)={0xffff, 0x1ff, 0x8, 0x2, 0x1, 0x3ff, 0x7, 0x2, r16}, &(0x7f0000000440)=0x20) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x7, 0x3631564e, 0x3, 0x5, [{0x80, 0x5}, {0x1, 0x400}, {0x4, 0xb}, {0x4, 0x6}, {0xb, 0xfffffffe}, {0x522e, 0xf3}, {0x101, 0x3}, {0x6, 0x2000}], 0x80, 0x5, 0x697641ce78320d4c, 0x2}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r15, 0x84, 0x9, &(0x7f0000000480)={r16, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x9}}, 0x318093fd, 0xc, 0x51, 0x0, 0x8, 0xc90, 0xd}, &(0x7f0000000540)=0x9c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) 14.861858141s ago: executing program 4 (id=743): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount$bind(&(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100), 0x10, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x1, 0x0) write(r0, &(0x7f0000000940)='1', 0x1) 14.861513556s ago: executing program 4 (id=744): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000000040)='./bus\x00', 0x40100, 0xa2) 14.762427479s ago: executing program 4 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ef) r0 = socket(0x2, 0x80805, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x330, {0x1000, 0x6000, {}, 0x1, 0xffffffffffffffff}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb00"}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x6a0a65d351a03541}, 0x9c) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x1b, 0x0) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4) 14.392132127s ago: executing program 4 (id=746): mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) syz_clone(0x9080200, &(0x7f0000000140)="25fc650e9bbd8389a30f5959e1bf9474896bc836521860e3588337178f5b6dbeec6c902767099bab18bf62c9fb1f69cd31ace4e9755e1b814b6c403f1717f694a88ebef46cef3ac11e1cccbaeff089e5728b8fa90efb1c445873efe84181372c433f131e14bf9d334a55b1cf10340ec52bae4c62891bb4623d8df2376692cf821806faa8959ed43039e2d88f8f8c23b946cfb013e60549430c939643946a63233e43b9b4b9", 0xa5, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300)="6ec7f6faacd2a3df959ba2ccfedfa91b45e4d7a1115b85cb1f278a204d84aa807951997d61ddead885e641f296a698717527e26bc3a04ac19eda7ab6654ea5a010d567b3703068cb955d6026b79e0b755e085f762f05905b666d1f299daeefce3236a6a1559c34798b8b40065f402c16298fddc87b9ccc2233ddcf4c7d0d67c5017d8d9ee0a098b19550a8c489f7b1e11096f18b9a547785fa0f799512f4b22c0037fa03d7ed715647f985a13790fbb26216ea421c8bb848fb8ccdb228fb755c8bdbaaaa719437af843bd9be8f97e89afa9f4c87dd18f7aeee92c566d4ebf2f22f") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x6) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80201) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1], 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x100) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r3, 0x200000) pwrite64(r3, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r3, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r3, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000400)) mkdir(&(0x7f0000000000)='./dev\x00', 0x1fe) (async) syz_clone(0x9080200, &(0x7f0000000140)="25fc650e9bbd8389a30f5959e1bf9474896bc836521860e3588337178f5b6dbeec6c902767099bab18bf62c9fb1f69cd31ace4e9755e1b814b6c403f1717f694a88ebef46cef3ac11e1cccbaeff089e5728b8fa90efb1c445873efe84181372c433f131e14bf9d334a55b1cf10340ec52bae4c62891bb4623d8df2376692cf821806faa8959ed43039e2d88f8f8c23b946cfb013e60549430c939643946a63233e43b9b4b9", 0xa5, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000300)="6ec7f6faacd2a3df959ba2ccfedfa91b45e4d7a1115b85cb1f278a204d84aa807951997d61ddead885e641f296a698717527e26bc3a04ac19eda7ab6654ea5a010d567b3703068cb955d6026b79e0b755e085f762f05905b666d1f299daeefce3236a6a1559c34798b8b40065f402c16298fddc87b9ccc2233ddcf4c7d0d67c5017d8d9ee0a098b19550a8c489f7b1e11096f18b9a547785fa0f799512f4b22c0037fa03d7ed715647f985a13790fbb26216ea421c8bb848fb8ccdb228fb755c8bdbaaaa719437af843bd9be8f97e89afa9f4c87dd18f7aeee92c566d4ebf2f22f") (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x6) (async) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80201) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r1], 0x1}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0x100) (async) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) (async) ftruncate(r3, 0x200000) (async) pwrite64(r3, &(0x7f0000000100)="0000010042", 0x5, 0x1be) (async) pwrite64(r3, &(0x7f0000000100)="55aa", 0x2, 0x1fe) (async) pwrite64(r3, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) (async) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) (async) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', '\x00', '\x00', [0x0, 0x3]}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000400)) (async) 14.190818319s ago: executing program 4 (id=747): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x8000003, 0x3}, 0x10) (async) bind$tipc(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1700000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) (async) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket(0x1, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd780000f8ffffff000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 13.790320314s ago: executing program 4 (id=749): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(0x0, 0x2, 0x48842) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) 13.760608437s ago: executing program 33 (id=749): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(0x0, 0x2, 0x48842) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) 2.590600866s ago: executing program 1 (id=869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0xed, 0x0, 0x5}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0xffff, 0x23}, 0x66) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) 2.590388205s ago: executing program 1 (id=870): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x6b5, @loopback, 0x7}, 0x20) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000100000000000006000000", @ANYRES32=r0, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}, 0x1, 0x0, 0x0, 0x8058}, 0x20008841) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x8201, 0x4) 2.118386883s ago: executing program 2 (id=883): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x90) r1 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xfb0, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0x7, 0xa, 0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0x8]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x7, 0x21f8124a, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0xffffffff, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0xa}, 'syz1\x00', 0x45}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x90) (async) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xfb0, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0x7, 0xa, 0x101, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0x8]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x7, 0x21f8124a, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x3, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0xffffffff, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0xa}, 'syz1\x00', 0x45}) (async) 2.118117877s ago: executing program 2 (id=884): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x38}, {0x0}], 0x2}, 0x32}], 0x4000000000000be, 0x122, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x40000}, 0x20000081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.951237229s ago: executing program 2 (id=887): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 'id1\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, r1}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x4, 0xdddd0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) vmsplice(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="11a5cb3e1aaee74113aea5a90c1a90275d6963a706c62c804b3824ac1edc867aebb06eaa0a12bb45d2a92666031abcacb0dffa9db53ff5b4312858f6e42134cc6d8d9be21c2616944dfa901a229b1ee624d80d668e88ff6f435a88a266f5b6f076070e47f677a211bc89036d591ef31209d5082939aa563685e6968532b2b32c997f728c02a0a1166ffe38eafa8bf4413d4510ee26eeb5a6927b8df7d842f5595dfbe011ef8c54b281af62c401a01940e5930381c176c5c2c4f484", 0xbb}, {&(0x7f0000000340)="2cd80d4113486b48d1a3ac8b98a8d74b37abf730f982a729226e747f331a6205f893fd59fa08314dd478c747240d3e0650a319d295c4496939c1", 0x3a}, {&(0x7f0000000380)="1a999d36435678ec7ac4ecb2b8716c017cff9bf3a4ba4241f96d7642e684cbf629fb00cea240989cd796173beba51e03e390926113ad314440cf28b02c32c6d0950f935b4dc92b4ec048021eb08a4615d8f893b2337ed4c57a16b7b711e1b50b0cf34addfa8d9417dc5287fda4012ff449605269304d8e917db49e512885514c81bb7f5a13", 0x85}], 0x3, 0xe) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000480), 0x2) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r2, 0x3ba0, &(0x7f00000004c0)={0x48, 0x9, 0x0, 0x0, 0xb}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101800, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$P9_RSTATFS(r2, &(0x7f00000005c0)={0x43, 0x9, 0x1, {0x0, 0x8ea5, 0xaa00000, 0x1, 0x0, 0x7f, 0x8071, 0x9, 0x5}}, 0x43) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000640)={0x28, 0x0, r1, r1, 0x7fffffffffffffff, 0xffffffffffffffff, 0x31a7}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000680)=0x9) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000006c0)={0x8, 'veth0_vlan\x00', {'nr0\x00'}, 0x9}) syz_open_pts(r0, 0x10841) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, &(0x7f0000000740)={0x1, 0x0, {0x8, 0x3, 0xa7ce, 0x6}}) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xec, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xb423}, [@NFTA_OBJ_USERDATA={0x16, 0x8, "04b2ab24992d6d542110c814fea5c0bedc4f"}, @NFTA_OBJ_USERDATA={0xc0, 0x8, "1eebae0648ea1eb9f7b4e5673bc459ba2c316ee0ab6006dbbb0eb50d3badd99ad0872bbb4397f9e1c6315504344b6426e58c8f64b93a395cfd8ad26d2ce027c3aebd79a157d969146cc353acaadd443f22ab0ce218d85950592105dabc4fd8cb8b76d71731cadca53f47bcbfca1f0f197b4977e5183b36d4ec32eef8acbccaa26503b2c6a125dca6d4ea5ba62ea11c5609061a4380566be47d96b6b05a18f425b2d300c8d135de6aad67e0086ba587fa7a8725fc09c5409c17e9a240"}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004050}, 0x40040c1) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'batadv_slave_0\x00', 0x0}) sendmsg$inet(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000940)="a89b08a3311fd68904f8a655adc76720cd1a34b8ac557bd84df1b5f6533970af19037f5b088d7f4616760877b884207d4fa09b804ec325e252c1d247c44fda16792382c6368c1c01f204a46543525832baf8a5cc5f04bd8790b107060f6593ff2803c31ffa611fc2ea038c1223cd319d15307e344d01ec786f836fbefec2641735cae1bc600e5d977e79660ab02008a55e413b59b173cc22a3fb94f2985e4608beee435f12e51462d8bcedb3c2cc97696977c97a633b0db63df1019092a61102c1d37dd0feac", 0xc6}, {&(0x7f0000000a40)="f4f9c8e207fedc9b55f7f91d323f04f5fcc1d426f2818c411379e4906dfbb96f3b00559f4d8b1e8ea758dff1e47a3cbc047e51afa1d78de1b3d4505a8cfc203ab180ff8038d20183e13798121543a734bc4842ced9d3591927219367671a61", 0x5f}, {&(0x7f0000000ac0)="ca0919f923eaf53876c75c7ed965505ac6a51b67c04dd99e511f616a9d728bdae6383e68e3a168b550743b3fc8268c3211b964632047b99d658a3c532748a90bee511f847fad2f4bae3eb359d4a7513f516bddfa620bf5dbdf3a29bc", 0x5c}, {&(0x7f0000000b40)="bf1c979893ec42f00e78b641d48eed83adb16fd6059534c2fb75930e7156f41128741a5c0c048160451dc82652d7b58567cbf802ef42764b90a2d4b3942ebb17ae50695e3188d9d80547aca3ec26bd1ebf19d8fc824754816d3230f11f71f2eda87e9fc858853e08b49fc03741e614166aa271f6579238d128ae4bd5", 0x7c}, {&(0x7f0000000bc0)="6c5e9746d553ab8daa850a2fc43a6401431c25877ab2592780ebfdd9af2c2c4975832d3995ce099ad4c92a11c7ad275c582f5b924e5e8d9aa0e82425449124408f7c8962ce0cdf77fab4230463753f0a4b2446635905107ea90ce6704bc443c1cce1dfd92184303a7b714aba0615a118fda05f27c2ce9e822c8a543cbdfa6f4bb0c9f7d58c5a4903a6762aa25f0c0ebd00c4846b72af0c0fc4b74505d343c69391e8f104c709c08dda8f5b7950950108fb1737daad5b3507457f3f7fe8e83cdb41978a98299f0472f57fdda3c12b03b22ad5ac13cd756753bb9466560a3b6a9f24296f39e1a2e0898fdb1fa6fc13c36d87e041", 0xf3}, {&(0x7f0000000cc0)="16738267c785d4991aa202c92c6e095fc10a024c8be9588b9e02f4fcf13e58d8147f0b7a83b70ec69a58fa0bff2c85574eaf1e7a083018b321290b4aaa1fbb21101d14b859970d801d635dadcfa91e6cec35f27fd909a0814d28bee12c2a3a5bed934c4b0fb00183b0f18a4ba47e365a88f2b6411ffcb3f3f900090eb0b9ac7a9e575b0fd9b2d56741e475c8a97821e5b993bba351b0ba975fc0a5776e123d4da723a1f8958c0cfd7f9998e6fcc2d4555074c5152c80459b6a53c6a3a15567e7517a2b401998cd77ddab13ea69575f2c", 0xd0}, {&(0x7f0000000dc0)="f3bef2d8bd908e1a930367928cabfa4ed4ba075fbd598072466d44a6b9b85862344aa72a9928ee4dd699463f76d7a384056e2d175208d495fcfa9de8ea5277b9a030edd7ac4ea00acdc22e5e4cd60c9aa4203f", 0x53}, {&(0x7f0000000e40)="b6b045655070e1b2ed85522726a33484b91713e3fcaecdaccf1c50aafa4f8aa60ed289ea7378406019d2b47890d9f39533cdff1fc501b1a5be5ea1cbae6bb174b9875628027d", 0x46}, {&(0x7f0000000ec0)="18567bd4ea6584f30eafd21f30908108ddb41ace28e03d6f8437484588b61572218621a05ffdc39a13d15bf8d7af805a7cdfc89641dfd7ef3c2eda3c1e1dc5a2d8c4fdf8014c08cabdde4a55c7e4d4f980ab857745895c3634a57cc2da9722cceb75fa1fad6f90db4b72122c25fdaf35eea7307bec48084157126990c2dc8f527079761a136d7a5944f6b2dff4b3c87d0fa73a1debf12d", 0x97}, {&(0x7f0000000f80)="da6050ff04b133e07ebec3185b04eccdd7a7f81df297f7f91f19d6148890379466ebce63bfcb8c7847e26b8139718b5c5833c5d7346d81eba831620ed4a9", 0x3e}], 0xa, &(0x7f00000010c0)=[@ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @remote}}}], 0x90}, 0x8000010) readahead(r0, 0x0, 0x200) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001200)=0x0) sendmsg$AUDIT_SET(r2, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x3c, 0x3e9, 0x228, 0x70bd2b, 0x25dfdbfc, {0x40, 0x0, 0x0, r7, 0x8, 0x8, 0x2, 0xcb7, 0x0, 0xffffffff, 0xfffffff8}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x30}, 0x40000) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) 1.890911506s ago: executing program 2 (id=889): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newnexthop={0x38, 0x5e, 0x103, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x20, 0x8, 0x0, 0x1, @LWT_BPF_IN={0x1c, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x16, 0x2, '+}*-${[)/,},]$$&{\x00'}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c481}, 0x20008010) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$tun(r3, &(0x7f0000000040)=ANY=[], 0x103) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="0000008d") ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) close(0x3) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x4) 1.890603051s ago: executing program 3 (id=890): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x1ff, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e000000"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000110001000000000000000000000000000000000000000000000000000e00030076736f636b6d6f6e30000000"], 0x30}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x36, &(0x7f0000000080)=0x10000, 0x4) 1.819317566s ago: executing program 2 (id=892): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100), 0x4400, 0x0) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1.762520318s ago: executing program 3 (id=893): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, '.\x00'}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r2, 0x1) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x2, @local, 0x5, 0x3}, 0x20) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000100)={0x0, 0x7568, 0x800, 0x2, 0x188, 0x0, r0}, &(0x7f0000000180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe31, 0x2000, 0x1, 0x179}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x51f6, 0x4, 0x3, 0x113, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcb34, 0x8000, 0x0, 0x39d, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5f57, 0x1000, 0x0, 0x174, 0x0, r2}, 0xffffffffffffffff}], 0x4, &(0x7f0000001400)={0x2e, 0x11, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xe2e3}, 0x0, 0x0, '\x00', {0x4, 0xfc0, 0x0, &(0x7f0000000400)=@buf_1k="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"}}, &(0x7f0000001480)) syz_ublk_setup_io_uring(0x25ce, &(0x7f00000014c0)={0x0, 0x4e9c, 0x40, 0x2, 0x304, 0x0, r3}, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)) r6 = ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece) bind$l2tp6(r6, &(0x7f0000001600)={0xa, 0x0, 0x4, @loopback, 0x1a4, 0x3}, 0x20) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001640)={r2, r2, 0x2e, 0x0, @void}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001680)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0/file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r10, 0x1, 0x3b, &(0x7f0000001700)=""/116, &(0x7f0000001780)=0x74) r11 = syz_io_uring_setup(0x2082, &(0x7f00000017c0)={0x0, 0xd1be, 0x4000, 0x1, 0x3c7, 0x0, r6}, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)) r12 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r12, &(0x7f0000001900)={0xa, 0x0, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x3}, 0x20) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000001940)={{r11}, "21aaefcbbde7970c5fdc65de76524fd3807d521d50fb805fcb653a748035f931c5b05dcb4b4ed0ed0f90b333ddf294e24564ed7f785116e359218be1c55d2c813a9a968ced6652b75c5cc206a7c435dcde866b3b973647e77d72f137e78bc1199b1979579236df8b4441602d647571a0740f5ab75780c70032bec692b1fdcebda04cf3fe8c31041a6e9306bd9e0219fda815e57daeb23427e6ef3149ed9ccf08adc2b79b6da8252716001d3b85856493554f8b0a4018dab2002ac08952362e91bf89fe90a787d3a7c460b381e954227a05402bf67d4e72ed239dab2b0ffab5914727dd88da34d5916bfd875a35d04a085f74251a8e3bb17b3ff3f9542189a87ce3e38e9b56e3ac527fd78885b26255d308bddb5cfaf7f3d48ac188233cdb2c7166b7ba34b869a6ca86a73dd165b6584cf4a19188ba14d5b7cfcd2babfe2afefe96e688f21be9076c81e93c6b72c78a6313f291f456300a3766072299748b9866a5d9aea69a50f3bdc4e25b58a2e579361a98829c860dbdd05527128da8200041abaa4db7e5848df20562029759250414dbe85f1cb6208dd8de8e955b318987f2554b531eb616a1f022bd24c7ec9dbd4f8282404b240deaa210cdfaba969386b909355147d3014334cc146fe8f9fdaac41962e474ba35996b3f0d4ae6a2e4d090b7d57da1695f93a5b77edb01a0e4ada8fc8a7d20b99e9fd6f869fa1ec25846a99ff3ecbbecd72eed846627ca1102783b4ef340221420b1ba12dab6580a53fa1213204282641c21a4a0a9084a96d8235d6ec0ca43e01d530de53c68dda29e76c6c8adf75e3db8d2e477af439d21fa8f7d93dc07e2bb0633c553bfb155d0750dab0e03bd4edbee3d6914cbe699ecc35f18e4f7f7ffa11aafbe23fe56db8e9c173fe77863ceea57facc60095bef803c0346a69929c508fb68e7139143c7f585a63eae71744d8308d8ea35a1953c2067656579c087eb55fefe1f6213f40c53aeb65868fcdad28203982ee471fb5e300733fbc964eca9c89a0176f293a621e6c8ba4a100d6170a5bf4f08ff46cae9e8bce179a69d532b539d877995e8c7c89e70ed5a6bb425ebc9dfc5b6d615a480a327ec9bf82bfe2cd4c78a2f1744ef7900409337c54c84e8a9e8c7761bc65b9fac2dce00523e16c0d0d70944414bd417454b696b854c48a578b5aebe0a6d979eadeda7d53bedc78699ee3411d870036427c976726122785ec56858b39ddc4463b825481569e960b745cfc2c72b9cef22741834c6d09f2cb06847e5366660d0bc92e6e90be078001de2bf0eca998bb559197e3a992c2f8b45af1068e9d050fcb68f7fe8ba303f65ca7d8d403ef2583b09c8b8cd0b3f2866223b48bcc201bd6c97f1cce5d1f0ea9860e03fd3ee55f6ffa37f3148dfa5161bd12e558d07d9f52bff46eadc9632702a179133982e9794a1fc7370ae36c5f9bc0a42f58eaa37bab0b3655cbf6fddabff4af8b382d684d1d03a142ae0f6d04972d12d18fc5643872de976ab04ad99a9c03e1d4353078466acfd837dbe85d6cfe07f20637dc1c31c4d75fbf2f466f5026c0243188ca627058b59f6f39647c828a9b45dc8dbb878ff3a15669f05c465a1448d7e77236b8d53344fb7b3385c36ac6bc4d36673637033e785fb9875a3869be30ccdbb54cb72cf3d725a08adb1b8d7d73dd6b5a48679dc29d653a8fcce763411474be3d6bca981a6cd2b9d2bf7beed8d41b8baf75409d8f127cc27d0b2033627083deb07dfc15798fa34080ccc4954b982b7db0b34f7b1e67fe08378ef78cfdc23cd963ca1981cbd2085ed298a07a7bdad20691ecdcf2cd0c163d9d527f74ce411084114f0bd2bc603621cb4276bb77e814e90e16647803000414725a95abdf33a6c2f8feeeaeaa813b131f515bbfb1a66fd6d4c524d4f4f95ba65f6642229fb331da8dd12a98ae5ece5e84d5f1a1bee35e108cf63bccc852f80e28f8e72c6547d7ce7f7f3fd67783b55fad7ca11ea89ed7546ed3e31e8f3e17c85b38a9b4d6d3b9cddabb5ae454a2cd16403fbefce405cc27c7a5f38096deb6002dde99f805d702c0ac77cf67d4050a0ca1b5ef1ef92d7afa4977398ede55ef374b394e01ea5d3107b8222f1f9fb664001eda1512fe68f5022216e3f92142ae01d14ec454a729b42c6a6a4bfac0a00fe1b1ca41f03148c34367f0cf194d24da06ea85ac96d713b3a60a710260b35997930e4144f5e6f2059c40316ad29c3b7d047eda51204185fc1217e375d4724b0328a26cbc0758f218ff93668e415eaeffe8ec72885e512ac9a959be3e6ef4bc305689cbc5ede333e29ab5214cc593e4a48a5582b0a1a65e6e964df54348c06995961d860d8e4988295783e3b7a2a51efe75aa87074d129a731c94d71a5dee6775f3a0b8a5a7bcd8d9f1a9e6fd1fcbb461fc5cbf8fd5cd083744e23a264c46363def649a6114834bb3807c23f7b3193a7f0a58f81ff357d104ed20f24c6cd3c9c112bd0ea404be3793a83def255d87ef6feb5a4733c343cb44ba5ee943d7d056e338ecfccc41c884850e64c1f80e9835ea9fbea93d9304a60700af2288e9862feebcb65664757ae2af531b5b1e8183202c04ae3e84b7666ac0b61a3c56e4624f7c0dd1437facb86d03acc5676e844c60433aa7a9f9a9d995db8cc9acf85a2366fdc2718cfcf43933316b8636a10b7b0ae9cdb90930842ef3c7f3d9c1040925da066fccdc4e2899cb376cbcb26d4658d48e17f0b331ecc1f04b124672825223d0320dd6f636b8f3827147d1b9bc0f573a1dc559e2eb456afeb367c2c47f9b7e8a02f6c24e514eb92b28c44b1e06eeaf3e3466e85bb6d65c6b0a230fac0a6f46ce8a1c76fa06b8923f2573b11410dbaaeb922c5b56c37ad877f56e6388d38a0054f5b01b094427c90fe30c504269eaa68657110786e4c228db4531763439dc13a2329c459db836b07fa04077d8b1673f655729e604584ed2abea57754a6aae47e7203aeeb34183106b7ce2dcfe35882710514d4c959826c67c896e0701623f344c520504f99a2af29ce9337d98c6457efd6dd8581e23c417ecd94bec98a7546502adf81f0dff27862490083534a3a034a2ee854a2dfc8fbe85dd5f502296df816bfd3084bcba9adeeaffde88d4b3e10113b91e805f5497e3bd2bdaf60028a0cb879097811fc0de894d9978891f9a13801314687972fff7ad27b166b98e66c75844d441fce5da005e75c28e16c74eaf8e354434938e472943054bba4adb71ff4310ef32d5010e8043b269af5550a89f3e7241526faaef013ff054d546869eb010e475cbab789b781ddc6bc1656de7430682ac8b8455811007c55cd142b4459531008804288a09067666542846aaa7f29da7d28a821276854e5515cbdc10d605df1a493e4a08e760ab5b8afe300f1ffa652eec00ae428caed0f99d886606724c655daa142ebc939ea6c74ff496fb2a2a8481175c26a3b5658246eaba448c2915efa0a0bfc8c9cab4fcb22292b6beb6d34fd49694da7e568420ba67b98b812ed747fee63aab7d538dcb1528a201a70ba3bba54549a0c1a3ffd2413163398d18bffd9682e134c7ab89c2d4946e1926d4bf9bd65cc4f53ec2ac00999818f0a929727fb0331b3ada473aabb44d1d7406eac93950d63915b056698f071a2c63d4fc1729416913a0b0f9a83c68c49ff34d753dee555b5e17624ef7e3280f6b6d6fdd3e11909f13859b1e234f2d391df5539fe080c32cd36aec04e18e7bd4b7b11a34a8479367fd93d64a4f953161761e45fb8c8c262b50b53edb103bf08d012269eb339c97bb219e66794d2e714a1561276da1b1bc879018870b664a912ec53f01a96211b4cbf60f6826c5c0ff39b7b87a04402630fded5560e09131862039a418fdfb2f91e9ab8e74a9492109fdd54241c6add4a5c74e48cf317b7aa461053ab90b60b6699d64479fe92a24625966a7ed2d4d52ec1bcd0f31475a0f9033e490a006662b8916e171bfc9a186f07820edb48a2a9638ceb36a8f622af7c78f332dacb7a640c9f86758e68edfb7187fa34bfdf87c3a3da9e29690b896dfedcf7e2e5a04cd72b2a75843f1729d7da5b61622bc0f5b6355d532a1dcc461288ae783f96752e3016ff601e4697c58a3e81b2a0859b9632a88e5c7a882d77a3fea16a7fcacf61c6101f1d6c950b6f8fc97b1f26f19bce1b649234f872f7671128b428cd9b6cc9eb239c0a01a218d71dc9eb9656fd6f43719f43f5e1885fd752ae6cb05d88e8fe35a7f7f37f64cc19becbc745048c413531a0b9297ee0b137a42ce9253dbc49e3c0b7ec9f5faec5de832ba98f80054d38ff1cdb5c4080d057b711f1cadf2c0f31cfdf39be496d9f6341c3232faa35783464ab21de15fd843fa5beeb9f3a20c8bd2198c636a30ce1d3d40107990da2940634b960399390ce65120e87bb92054bde602bd1eeeaa322a8b7b645be8a4f319a0a3df87ac87169d732715bea6bf5c3e8f1ba661000ce907601565a85b9ad4208c33e7a91bb23ad2fb5fbe148efef470d2a4839c8688922b13d3048a09f571dad461cc60093908589a10fc032f524c47ce82556cb8eaa542b5ae4b9937e069974d61df1d2b9c2f131bfdb1466a8f948f3bda71e1c32452c582b68c5cd94bc40b1c1975d03466d15cfd9c79bda6ca23f7bfead53d30fe574831eb8cd3f38b49664ff8830ee27cf6529879517fd7f9a9c6f534cdb3c53c2ec2d67aaac6c5280711294dfbe0e145876b27ca3c7be7139142b2e8245dac56092164f449b40c4578ba5087e0cabc39624987e1a115b449d599f6dce8fa5b3922371ac38a5f23965da210c22e8a1e1ff19c3a1baf58fc98ab693539bac1095c40b814739f36ac6b4976d4c7da69db9f7f13ff37a498c5f8427a71463c4f0202411a8a03cf51508ce760bb005e7623274128fb01a282a853fa3f5d970914a3fabba5d64fc71235eb61a7bb1457880e85af067b4085df829f434ca8ad57d0f1950877b6f408db4ec43907a9b4b0498a460bdd056ccd34598631e07c1e0b4ca9851dca49955e6c2cb08715bdf91e24c46064d85abd2e19adaa47e82889b93329140a782f3732c6efbefde0d0e9741bdc5b29a3fdbd35a09f53b7ea6b98bd23d72e071347d43e9cb4ab36f46cbe8abc4ba77973642396ad9fc0d3a4b5df41e6c5a8874a8c427aa926192d659bc482bcf2584e9da829e03841f4896a90146e1310e80635a87c5ea9fc442bf1a3f747ac10d1903b13f32d92e8b8f71b90513b449a99acbc541fa14572ff48b5c61759c5881ee8a23b727f7881a53add73682f3d206551cc946f5d9b27ab7daae33d1ea5abca882eccec0e7dd18219f0b361855794f78d0f2bd0e8e16a66cfcf80805673933c7803c7650887da43451bbc3d5146c22c711fb019f6c729cb611642387e0485b1edb7db35987dce790845981365c70f69b32a86a65665fa07419549f796e4df48271665e07d9d46844e29bb52cb47303f10ac5a8a1a1efc635ec3f3e178e19aa88b04bfc191d566e8a2e6ef31fbcbaaa2ffab5ee0f78a38e937139d38ee3453bbfb2fc3ddb252a2cfd012aa598857e9212b151852e0b5504905a2b88bf55f5898432dffe4e835cd9d86ded9c854e40219f3053f6db739d851635793712bf77e0ce3349e0535658f58894f82bf01a50eaa460375c5c1a30edf475bafa1f24d5d12018be843b84a23c304a2d49dfe1801ec729c926c22aad92af8fec89dcb50f7040b8c36c079bee9bce14115bcdf5875e447020796c66914c1b4001c0ab3847e13457c11529c9f2b240ab"}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r6) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000029c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x3c, r13, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x8, 0x6a}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "14b65bfdc8d5fbb9b023e719cd0f491e"}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) write$selinux_load(r0, &(0x7f0000002ac0)={0xf97cff8c, 0x8, 'SE Linux', "d65fe13979849e7600db513255357b9f836edb48e4fb4b8aa2c4a1ef9a227969fcfff0b53c036894ff3e265fa93b06fabe805fcae3262b7587f8257675e967284870f581e4f9f37784b47d3e9cfdfd9db7efdb44a98ceedfbbbf0f8ec875024aff60029407330d424ef57306bd9ad9bff63fdf04fc50cd47a99157bc4f1eb874322f6960fb68b38254fb26e720e5bbc300feee83ef63496135003b3c464604e0a227bfc27ae23966445b45629df49f1f0bee2f4ac86060b57343b4b4f6f849a0ad493eb265fba6c03c765a583c3bf2f92dc7cefe367dc2742b4575a8508646b5c940"}, 0xf2) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r15, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x687a2a14f2b20ad2) write$FUSE_BMAP(r2, &(0x7f0000002cc0)={0x18, 0xfffffffffffffff5}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000002d00)={{0x1, 0x1, 0x18, r12, {0xd}}, './file0\x00'}) ioctl$USBDEVFS_RESET(r2, 0x5514) mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x9, 0x100010, r0, 0x82444cfd) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000002d40)) ioctl$XFS_IOC_FSGEOMETRY_V1(r11, 0x80705864, &(0x7f0000002e40)) 1.670880878s ago: executing program 3 (id=894): r0 = socket(0x1e, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x100, 0x6, 0x2, 0x9, 0x7f, 0x7], 0x1, 0x0, 0x0, [{}]}, 0x88) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x8001, {0x0, 0x1}, {0x46, 0xffff}, @period={0x5b, 0x7, 0x2, 0x6, 0x3ff, {0xf29e, 0x9, 0x3, 0x1}, 0x0, 0x0}}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x12d8) openat$ttynull(0xffffffffffffff9c, 0x0, 0x88002, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000014, 0x1, 0x0, 0x9, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20008) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 1.670590767s ago: executing program 2 (id=895): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3dd9d7c4) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000280)={0x7, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000100)=""/221, 0xdd}], &(0x7f0000000240)=[0x7fffffff, 0x7fff, 0xe00000000000000], 0x4}, 0x20) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000002c0)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000300), 0xe01, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000340)={0x165a, r0, 0x4, {0xe2ee}, 0x83}, 0x1) r2 = syz_open_dev$radio(&(0x7f0000000380), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000003c0)={0x0, 0x80000001, 0x3001, 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000440)={0x6}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000480)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000004c0)=0x28) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0xc) r5 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write(r5, &(0x7f00000005c0)="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", 0x1000) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f00000015c0)=[0x200, 0x5]) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000001600)={0xe, 0x54683fff, [{0x0, 0x0, 0xa}, {0x7, 0x0, 0x9}, {0xb, 0x0, 0xfffffffffffffeff}, {0x81, 0x0, 0x8}, {0x3, 0x0, 0x2}, {0x1}, {0x5, 0x0, 0x5}, {0x3, 0x0, 0x7}, {0xb4, 0x0, 0xfffffffffffffffd}, {0x40, 0x0, 0x5}, {0x7016}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x8000000000000001}, {0x6, 0x0, 0xffffffffffffffff}, {0x9, 0x0, 0x7}, {0xf, 0x0, 0x101}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000017c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001bc0)={r6, 0xd, 0x1, [0x6, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xa, 0x845], [0x7fffffff, 0x8, 0xffffffffffff32d4, 0x9, 0x9, 0x400, 0xb, 0x7, 0xffffffff, 0x7, 0x9, 0xffffffff, 0x81, 0x3ff, 0xd05, 0x3ff, 0x8, 0x4df4, 0x9, 0x345, 0xffffffffffffffff, 0x3b35, 0x100000001, 0x2, 0xc, 0x1, 0x10, 0x0, 0x8, 0x7fff, 0x83ba, 0x1, 0x4, 0xf, 0x81, 0x2, 0xffffffffffff0000, 0xa0, 0x100000001, 0x9, 0x5, 0x4, 0x100, 0xf561, 0x5, 0x3, 0x4, 0x7fff, 0x1ff, 0x0, 0x8, 0x84, 0x5, 0xffffffffffffafc7, 0x4, 0x769, 0x10001, 0xe, 0x8c9, 0x119, 0x3, 0x6, 0xa20d, 0xfffffffffffffffe, 0xffffffff, 0x8, 0xc, 0x2, 0x1, 0x5, 0xecb6, 0x100000001, 0x80000000, 0x2, 0x1143, 0x0, 0x6, 0x74, 0x7, 0x1, 0x7, 0x3, 0x8, 0x2, 0x99, 0x3, 0xfffffffffffffff8, 0x10000, 0xa, 0x0, 0x380000000, 0x530, 0x9, 0x401, 0x3, 0x5, 0xcb8, 0x1000, 0xe32d, 0xc, 0x0, 0x9, 0x4c, 0x9, 0x4, 0x6, 0xfffffffffffffffc, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x37, 0x800, 0xffffffffffffffff, 0x40, 0x7fff, 0x4, 0xf, 0x7f, 0xf8e, 0x1000]}) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000002000)={'wg2\x00', {0x2, 0x4e22, @multicast1}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000020c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000002380)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f0000002100)={0x230, r7, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TESTDATA={0xd2, 0x45, "378e3bb8e721f49ba85d567d3ac8ef22024e9b4c405e532efcc3c15c535c2f98f1204c67b317de4dd65ea5061257a4ba90dddd1df837c5796de8f2537ad9bee619329fcbd77cfbaa4f39007deda4ee0ff239beca34c477262f41c26ee6a1894c235f201b52019ca1044fcaa9e9214a7d007da0d9686003fd5a3badf408fc3f22966cedc83008bb64da444b16d5f32a51cdfd7b5a0401fe6b68c49380b7b7ec617ba964ce4b039b30df55124c7aab385a01803885ab1932d4a4e088462bd825ac3f661e95cdccb8a1d8f7fc913bf0"}, @NL80211_ATTR_TESTDATA={0xd9, 0x45, "37802cdba871aac407f4502329f0c820173fe1acc3b32054efca4ada6def5fed902ed142877308a3215ec0ad448309f6b4568f365513d972df50bba155c58c42620f16ca77a36269af8d42059e8a7e7f1e79c13ed0abbf87a142776907da63da5f9932ec5b1746a57167d26271379f300b99b5083ba0cf47f7a6a5d70a5711c7ca5994f8ad14d9084020ebec90b78adc024a1e7d85686ce2f255010c39474cb951299b0ef6712f14e12574cd91ea49ae8d2f845b69f6153fadf5543ee26a84518a966b4b422f0c3b93530f2f7b5e3b7b414e412db6"}, @NL80211_ATTR_TESTDATA={0x61, 0x45, "50fddb480dd7b369b43c25a0e604566f9bf19d1308e1c2ada45e8d4647cdaec69648c731f90418b80bfd5158725dde1f04077010c6d231a00ef3dc10bc2fe4d2aab54d0b539d362655d3ccd93a8fd7337e29ca8911f7ba68c48d835200"}]}, 0x230}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f00000023c0), &(0x7f0000002400)=0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000002440)={0x8, 0x5, 0x44fa, 0xffffebb8, 0x5, 0xffffff6e, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002480)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000024c0)={@dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x34}, r10}, 0xc) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000002500)={'some', 0x20, 0x800, 0x20, 0x7}, 0x2f) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000002540)={0x0, 0x2}, 0x8) 1.670367509s ago: executing program 1 (id=896): syz_emit_ethernet(0x36, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)=@newpolicy={0x198, 0x13, 0x300, 0x70bd28, 0x25dfdbfe, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x8, 0x4e22, 0x3, 0x2, 0x20, 0xa0, 0x5c, r1, r2}, {0x9, 0x8001, 0x2c5, 0x9bd, 0x0, 0x3db, 0x1, 0x8}, {0x1, 0x3, 0x8000000007, 0x51}, 0xe04, 0x6e6bbb, 0x1, 0x1, 0x2}, [@iptfs_drop_time={0x8, 0x24, 0x9000000}, @algo_auth_trunc={0x85, 0x14, {{'sha224-avx2\x00'}, 0x1c8, 0x40, "3d8055999493cc1bdb7ed75960adafc302edc423d3fbb1cd81098dba02c44a013a02f1531a44dca67d2334fdf9d0af9f028a103bae2fcd451d"}}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd26, 0x70bd25, 0x70bd2c, 0x70bd2c, 0x8, [0x1, 0x3, 0x10001, 0x9, 0x7f, 0x0, 0x0]}}, @proto={0x5, 0x19, 0x33}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd27, 0x2}}]}, 0x198}, 0x1, 0x0, 0x0, 0x10}, 0x8088) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25940121", 0xfffffffffffffe19}, {&(0x7f0000000280)="e26248", 0x3}], 0x2, 0x0, 0x0, 0xa1}, 0x40850) 1.59224093s ago: executing program 1 (id=898): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300b68c530300000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c00014000"], 0xa4}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}]}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r4 = memfd_create(&(0x7f0000000a00)='\xcdT\xea\x1fd\x1a6\x13\xeb\xce(}\x91Q\x02\x00E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000840)=[{&(0x7f0000000240)="0a22a398d6734038ab6e5be8bd2805c9cce919f522c1fe5e6acea9239d63c7ef722c7632d66a6bf8d4ca61061532253b283bbbd53dc34d967e1872f7f9f864512ad118c3b567fa1906f463d97fd8f776d0f99ed4b0e5d6cdda32d9af438bdc373aad908ffc60a6b924c42e5cb392252ad479f521f1e728e5ec6a36d52f21831447b64c36d556754f7cbc10999f137e92a38fee6c0d1f41edf92029a2405ef8bb0c82b5c8b46999dae765beeaed5df7ac76a4f7e42c1681b9399b35096aca49e1a33c577b39c67b738a61b39017999fb3d9c6896208891b9178c2ac6ee5e64ebb7e1a2d314ccfc2c13bfb67cdf2bfb6d9a25ba1d21d", 0xf5}, {&(0x7f0000000340)="158bb2e73dd6815375655c105be2d3007cae5f67d744e111aa8218fd5deae093c82606f191537d9881af733fdf5e3311e5571441427e68f6585bb5cd1e0923c40433975fe6094ec0bab80bf27deaba279bc74ab2cae41e389d1a065667f2058a31afcd5eed09ba6702c134b1cd960707e7a27a49f0df4880aec2926f61a0df15", 0x80}, {&(0x7f00000003c0)="85e3805391f1c10910d1f8a35606aed754a6fafab5b2a12bae1106c242bb9d2dbe68861c7a08198917301ccf8555892994f4a8ab0c7593c785de53adcf8ed2f8b85c22b3f679d35d7419fda605c6a4a62212ae02201c2f9018c5b9891057bd2edaf1c6fdd7e3c712ad1ebe1bb26eaff91f286ec118667801fc74b4", 0x7b}, {&(0x7f0000000440)="14fc3e78a4e356fa73fe3c639cd7da1fde69ef998f7e20f431cf6b957575405b67509476bbc645f1a986f54363017db152fdd2721b416fa7becde153afd7e64d67328bcabf30eb69ac00f9f7f875b2c4da6e04", 0x53}, {&(0x7f0000000600)="81cac09880265003bd73c787640c7fda285a40b2dccaa82bb0f88d978a87f2d386511cb65772cbf472d591c618acb8cebaad24f569dacd99b4e0d53190b809bc7ccdac9747d31e8f226e79a5d14d0b4c2587cb65e0166161a1200a13de1d869aca5b0c500c1fc9361f77ad9660fded74a6ed3afc07e9aab72f396d20d1e0e6ba0523c3e6840dd194bd2eab4a824c876f6ef44e5c42e2936ffc79d64396c24ad66865656f3a0905cc6756cdee7058a167d23420cd60ac14d29851397d2029cd9a1b41b6650e8eb3a111ffe9", 0xcb}, {&(0x7f0000000700)="e370215d4cac093210e9ffa10ef7682d166fa00b7a0b8e7e5ef479405ec1e3b8c1d6bf8ad5f01ab0157112e1b435244a8199d3470b7f1e27f2788a3e76c2abdbcb6841e626d0f463f9507f6bd32f5fa9ed0100ab733e10c6aa3bf3d7fe7f28de058b5536c55c96b5a5dcdac9e9d3099615ae271663f11372fd919ee87734189906c97635d89e14328d452ae9b92c70b66b43ea3f8d22cdd21b965178037e64b750c700aea958bad0040ed14c3278294d68528ea94c748564c59a", 0xba}, {&(0x7f00000007c0)="42122c9e143d49797fc547ff98e942", 0xf}, {&(0x7f0000000800)="d13d4b74eb0116776c327dc5a2f926bf540aeb60baf0e9643c9de5029efc2c", 0x1f}], 0x8, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4688ac05ff0a0000000000ff000200060009000000b98c861646b0e3ba4000000000000000310300000000000002000000000838851a926c5beba2350fe38200010003000700ffff020000000600000003000000000000000500000000000000060000000000000001000000010000000900000000000000ffffff7f00000000"], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r5, &(0x7f0000000340)='na', 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000008c0)={[0x9, 0x0, 0x2, 0x3, 0x5, 0x6, 0x674, 0xb, 0x9, 0x7, 0xe, 0x1ff, 0x80000000, 0x1, 0x7, 0x100000001], 0x41000, 0x21005}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) sendfile(r0, r4, 0x0, 0x8000fb00) 1.532268713s ago: executing program 3 (id=899): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x3, 0x6, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/llc/core\x00') read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000140)='9p\x00', 0x1000820, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x105042, 0x0) ioctl(r4, 0x80140912, &(0x7f0000000440)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004801}, 0x20048054) 1.432082757s ago: executing program 1 (id=901): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) writev(r3, &(0x7f0000006380)=[{&(0x7f0000007480)="7acdbbb4699c10f9cafdaed25b32377c0d9142738aab77d74115d365720fae1d12c74f559d0e175d7ee841d67ff660316585ca589918219dd36a3569d335ff1d899feedf793213c2da825fee53c72271b58d6824b2b1e7a8ecc19189361a7f11ed14cee45c50cf5b32e72a2fc71d19a357625f0f24fe3041f39237cc032058a6db962877166323a082fd1cd9d4203da1c167cef6ae9d3cef00c57ad0324d51ad6c3ca390ec1b8646ea3cba039e18f5d636ea833369a6c838fea8032bd03e627bb484449fa311d981a47723d6826e5475670198d093077779e2870e4b73a512ad747c49a58788ff5c75e983ab29e688977c67dab7983e430cb8eb80020f7d888483818a90dcb6a80c5990a377a5c464fa2d220ab549f8b80577d875f5a6623a6cae914514fa65dc694248c18b6be1ef5eaf56497cc8a5c45c78ae647fd511840a0fcbf214fcad7c4bdf49488c83bbdefa3b467ef27b49c3d38eaba1ff1a8905aa1c3d4d6b712584b1b0ff686439a921eb4061fc2a8cf88c6c7a9a927e604582dcf53dfdc55b3e6d65a7da4c0e8d68bb8f63bbfc60c6db27b075f9c5db7e2bdba4b16dfecdb74cc3c4e7fbd758970385b3ae87dfe61be958f3f0cbd2e8888280690b0227846aab9e3380653d3a33e02fd2439c5fdfcd3c699065547f5ef3d72eede98a1d713921b4cb1863b1a11a8f3751908de175529b60d60cc0ee1d53faf82b0f5ad509d8003342251a86ccd5a3751e60b82a18d7d8d2002fed3947a48c706008b9daa3ea346c76f3f5fbd2a08ed5c83e11183084cf9841c01845c8ab28430f5dd2b25101a39f32e67150b5616597891c5b0c539b7c5d728cd9259c22bfa258c8f7fbe78f8b428ed03c7efc315106123b5eb0d817e9fdc5c78364da73e7c734b28fb69a38a3550a54bb711174c176e862c09697dd7cdb40cfdc4420448d86452f519a7592d99d0133d4e818a3a09d90321992b17f9ff5b08579850e72171472c77c6c3b36ea448bdb1bfb9a06a125d7cb6a124b839bec91c6b732415b8c870b696b147543f1ddeb8d812d547f3178ef54b781cc0e7611b5919333e3ee6c3ca38e331dce91d8e24b12c6c38c3549d02e15938d3eafa03831eb2846570a381e29a2a458cd29b059767852c4bbb6f802d862a1896daa62ae4efd01406f78b23b4a4487b6a0b9832c0d2a43c36eaf33bfc07637894b8f45af581d67745f33eaea1b0ba7ebe90a4489b6022f51ca6187b9cf7ad2ac45e04891ba674531245f6bbdb4a38173ab3df352400d890fcfbc6345768bfb0c7f40fd00ceb9b93a4623f9cc86b454d4924559c7bb8a1868c8dc2388c28cae4315bf56ad2cacd4d402a2a84bb9cd7f8503d60351a5afeeddbeb7940255d3c4a7f834c257be266d995ce0897e1b14c9306d8af000936c13c6c0aa161ceac665ccda516aa252e5525cac805ad5295d53843818d13bf9b169ebcbe7731feb2a6e1a39b7eaccd216e5af4c0fb5b2dc313d17f8ea4dd4b89729627a373a0a61c60184250a9240bfcbf8b1b792e4e6eb637f12c38f5f2dc6b1afa25afeaf04cbd726fd083c195a39cd19611768a75fcf1a4c40624bc388d473a4334a02a8084ad335bfc2c2dc44b9a43b77f557d1e7c288557596794cbe85af6218d2b33533fbc5bcb2f87bd53412585251baf7ff72a3483d4d0e22df2fe740096f9bacbb83e8e1c0a8700fa2cc5394afb48b877e7b50b98796d3a102e47e692ad10554a8ba87187e579decd4c9182913c951a67ec8b5e58a5fdf9c89cdac7a977e0e1d5671e0dbaa600de96631cf70b1330a4e305b4c3b61db5fb4ee6cd526cd6bff4d1deb0743ef0504d70d81c07236775ee2fbe6e76797a95024fc75a7ed127fb6ed348c7e4743899b93d6df9a70ca6bbd07be4674cdda77c816e77ece40f94c31e80ad43aa2e44b213aa114bf59e59291c63b5292fff4f48fe11e646dff90a5966139d67462a88bf00384f574fdbafb3d8220d2aaef2b03e9731c53bc0c69f72ded59a94a6312c320f8289abc87f0d29184ee7f78837c5d6b7ca7e25f561cc001edb7c0e9dad289dd54d2384d4eb469a28596d78e8fcdaab2b49859ce83e67a1512414df62265cc761c33bc4bc49b4f3071115d5e088c2994913f14d7a138e285b4ecf553b0f1099fdc9d588665b4dda207eadd2534b03ca567b121bce8d879102ed6f2e7fb7f779bb5611b18a9fbd00ea898d7b987c9f2db0829b330af50f52ff3e451baac0f90dd127bbb9b14876e", 0x63b}], 0x1) listen(r1, 0x61b) 1.38188858s ago: executing program 3 (id=903): ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x119b) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r1, 0x934, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9462, 0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) write$cgroup_type(r0, &(0x7f0000000240), 0x9) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x60000, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x9, 0x80, 0x8, 0x2, 0x2, 0x3, 0x81, 0xd6, 0x40, 0x1a1, 0x4, 0x1f5, 0x38, 0x4, 0x400, 0x3, 0x8}, [{0x70000000, 0x8, 0x1, 0x218, 0x1, 0x2, 0x9, 0x5}, {0x6, 0x5e, 0x7, 0x981, 0x4, 0xc, 0x0, 0x599}, {0x60000000, 0x7, 0x1, 0xfffffffffffffc01, 0x3, 0xc, 0x3, 0x7fffffff}, {0x60000000, 0x2, 0x401, 0xffffffffffff6bc3, 0x53b, 0x5, 0xfffffffffffffe01, 0x1}], "cd4a8e379a8730f41ccdd06956b491ff16cb5642b4fc7bcd6deb1613e3a983738b014dc3ffc08097db9bb604b08e5791b00cec151622540833cd4de9729ec75193671e7998e9847926ed05c6f66e46f76d03cd189207e08f42f9910d465d83e9adb74d25c783ae3d2569df8d08e9e5a97fb87c0f39163e48b078a312b6a8d7290a728e59bbe34ffcd43dfffefd46e069bd85dd74e0b774e1413d696f2929765e4c30196dcf919335ce4a7f38315e6e867f04b7ff5300a4c85022ad23ccc09a864f94b3cc4b8a901e7f758592291573bc307e5a9d899bc262b5982ce094ca4f42dfb1b514c65ea0b75e68bc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x90b) r3 = syz_open_dev$evdev(&(0x7f0000000c00), 0x2, 0x40000) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000c40)=""/158) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000d00)="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", 0x1000) connect$vsock_stream(r2, &(0x7f0000001d00)={0x28, 0x0, 0xffffffff, @local}, 0x10) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000001d40), &(0x7f0000001d80)=0x10) ioctl$DVB_DEMUX_DMX_QUERYBUF(r2, 0xc0186f3d, &(0x7f0000001dc0)={0x80, 0x7ff, 0x1, 0xf92, 0x1e, 0x7fffffff}) r4 = syz_open_pts(r2, 0x105800) fcntl$setstatus(r4, 0x4, 0x40c00) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000001e00)={0x1, 0x2, 0xd, 0x50d1, 0x1d, 0xe, "dfa25a7adeb4c7fec9a9725d9aabf2e9", 0x6, 0x66, 0xc4, 0x9, 0x1, 0xe, 0x60}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r2}, &(0x7f0000001e40), &(0x7f0000001e80)=r2}, 0x20) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000001f00), 0x18000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001f40)={0x0, 0x0, "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", "2efc437fec74cea96e0fd977019f5ac017cedc2195e0329e772304a472dcb92daccfa3cfb553bd55b63a06dffd4f519a1e166c84c7ca2008460f9a46575ca6a3d0f180b844e29bec47c9944bbf8edb34ee0813c0e766e5f7251da7e223b74a7bf0d9d942f6126ad1261b4e95bde4b9287b6dcf9885af43d60f9511996816850c4a9a0fa0be902c538c10a017477c27dff29fdb7a34ba007fb89e36fb10ecf1186e23520f820bcbee999584eb70cb46db15e55667beaca8bc2475a625ff4a8b9b08df3301b424b61362224c6be2d0571d80d735530dd13111794aaeab9f47c346505f38f07c000b3b472788ce5191b415db0f7f14c9bf11519a61150f43d6a5d52a91aeb45747987bf49683fdc928af2c6f94041b85e48b84348b1a9c711334e0d97d8d4eecfea93f3e9b0038a52bbd10c87b7f52b3a2a8f395c6ab7b81fd2e8073ff7c9ad076a9ccb8a0a7f75045c2064c409d19d68f04ee82b804505edd362ab54e0401ba6a6c104fdda9cdaad982829750bce4d97c7ea3058addd67af24281b0be5a84327c11770d3dff4f793bf795b7415e8801e3470a288af86d2116d713c68372f6344267fad317a1ab594a297036f65baf9b07ca1b993de86c5f5e719b8710b2d7521eccaed43c4af21c83b91852c4e9454de08a7cb44c04af292d0ecdde86eb7704f027ce297dc9d89f3890ebdbdd280aebb8696dd8aaa2a76d07d800b590562f9ed4283be8343e3d56df9b9f6aa5f0f4e4ebc84b547e4d9f75444d0d830edad783edea78973437796d085b5ea05e874cb186ff765045f345c1f8565e923a7599c6f3f5ca2673fc796e522e1f202219be856a2b78806d2b1b165516f0038fbf898da43973fe5b2f06f0b89e4ef891709ae1ed08e33354821ba964062e513a20713797d135dd0c6adb26cc8c61971c42224e52845886a88356ab20dfc78637f9a26a9dd08fd3bdd6b8fcfc4bc51cd944595c19398d187af9c463a4c51a4a103951c105d9f037e8d2a6511887ed0856a8388796f5dc43e5d6b309a19004b36264a7d57a34168c55634b2c510c016cba0020310570df6c6078d9c59151fe0f2dedab15b6a703025c951273b4e3ede50cf714dc46914cb18f593e88e27aa37f9da6a5199bff2a6ea1e92f6fcc62cde5b862e7a9b4fe63c346e0d7c0314facbed94f034dbcc2469ed81345d7750d326e114f3f59d745902b3c83404f142858b0ced671051de6200e046af444c682858507aa456e18286efe19f7a11a259978cb86e05c988a2c477f348c27476774cfa9d08cd314e08a67fb8987ecd8554c006113b71398f81f3df82e9fd49c6d272b072451cf326f8b5247d80d34963326001420dbfec4c829896ac148a49ee5265d6b06f512cd40a9de7b14bf4d98939a38ab63dbdbb5990e031943354fee0037474511eb668b1d845ca085c284610365d284deb0356299ff44f70e0bd223ee0188f56bdd88b2dfd24040ebc9f471e54f6afd98e34a33a8f46689fc8176c142fbcd6868e3f485a317b4767250135c7e994153d03067d8d08228e18c1e800f511d2a89e6e33abbb72a9af04080804daf75c3c2c441ed1481132ec46a79da1feab392fea1c3bb5dce693a9e5ca4e03992d3059460df2e325991c0a2369265aa75833ad652d391e297007d8c73794d209dc507091f6a52c70aaab0daf803f63e06746c227bd23c7dc470a0ab244ab629b35e2abac7addf746be289ad77defeed35811f9285babcecccac5dddecdcf109a41377978b782daa9f7587eae6f0e51925f53155ed85292d39f195ac9d9ae070cdc8bd7f3fb455035bac5819763ebf81adc981acc9380d4f9b2618bef1d26f76e9094c982ebc9f8e8bd00a2913911a0df8d258c1a6d06be02884384c5faf8b185146af30cd10b96fb9b9a409d9be7c65697f06fb54f0616c48b0ef885966e311604f2c587791f8f163ba2cf78653f435309c5bcfb9d91e34a5cec4bd1ea802bc998e3330a546dc575cf8d8db888c13ad9b5fb8bef74888e231bd5406820d5397f92241132556204ea5dd9e56a0b850c22ed03418595fc42a0c9ad6ed5e38520a665f243bf9ecd85a63e47fa416188e7dac38e431650d1cf89dd9e1a2a518f92387ad4ca672e1524718142b91691324587d73bd48245e8c0d3406701172d2c83a652656450c011e214d77eac34b71364e97f8cfe1d00fe7c58fadf43027abd5f2a7addda287c8fcd5792590d9079671549c4674528d418adf386a4b1fe8602aaea7307dbb9c818504ef2c9e7b81af9e8b4f998cc11b349bd6f315592acc5e1f7fca3c04e5ac8a52fa6c8ca7fd942b8ad213e94597360044d7c4a4fa18c17bc4d9859a9af3b2040cc7290c58c13f946a44b767f79c1399cc7f6e116f4b2c9ce99246dcb389ee5e205865599ee125021da4b424ac27f76012d7783fcedfd721050038f192f85a4673463d3b5e406638573dbef95dc6feb549a6c49e83dc48f6522050b1cd4411933f75895d7c18350bc26fa6c1839f7903c4ea4896a09f0bb733c21e857dddb3772696b7e5e169146910ceafd249d118487ee292ed220e0d029be9adc1b2978faf8352a8185b6b0f25990a73c740635d44b4c982d6027db6f89f156814deffcabaeb2a54bf55310fce794fa3d9856b41c5afbff684d83b15621f6b530d18cb757137f7824c2fd0698bdfcd494ce8ce1eb9d9ee20844b98d003a274dc5f817354d58ed0a8cecd0da9db88bcabdd5c41c41ee5354b6158b770caadbb8a6797c5adcc088538131a4909a80152124dd8087950cb690855e2f84709147ef4e17c23b9f0527591a5375532cb56369d94c04cd1787a191502f87de869f4f1ccf229020dda0ca69f9c790b685ca3ed800970c58c99767033dd63fe2688a2bb91e7d5a9f699526ac8e7ec41575c7a6292529dd63c78a233318ed23fa16774772ed30d42bef0a2e2c6119239279b7f472291f318a5aca7202c8abb0184094820b7c06db344b08cccdeae686c90da511d89255d035e57c72031c4d1c804d709df76f91e916c60e7fc37e04724ac4cb1b76423efe8db5d36c6a5767d567b3e7d877b27ee70961a8f5213b15d522e41583eba50b20eb5dfb4c63af3edb66ed48a2fec2999f8c24a22d461eaddd9670e55fc551628b2f948a3fc9b923ee6a72928cb8e17328492cc4a37f5b0527723d2dc28673979b323fec817198cbdf8d0f6a5dbd137887350de3fa4256dc3371153adac59c38e3d9cd95a7bb70ee8a6a751efeaca34935f24adf1dbcad1bf8901442c56df3d0fcd0a0870caaa97c6c4625d5cb353244bf81db0bee06e8fce3977f9a532708b9a0cf80797678049eeda2f79bcd0f9f0d604abe422317ea8a3f00c4678eee23b60e6b7099ad5637e4d7424c49c70a20602117b84ed7f06132ee53115a6b8b1bfcb37daeb4279ea59ef542647365e7817bb7f985fafdfdf00e28c7b1449f14ebb8a4cb54ae41129162e144bce57c05399507dc9a10a08869025fd85e8232d097295dabe720a19583a25f33c877aa90a6de29e2330402548ca63a87186f6711877e5503d6cbb6bbb4149237bc546b888e8adce88b2ce70e5e79a66d458b250b82d794c9135138b057d253401bf0f3813f0883b09a55f938ed157f24fa9a40138a23c0cafef16fa30adc9079216c220385c61c9bd5d7e026fe1ecf98fb894f94813711d7098c9d4e2660db7a26ceb71259a8ea7e604ae3603fa555636d3673dda69b5629d2155550fe2a7ca79ae020ad6b8e55680097362bc4fc0a5d09e262fc33fdd3f891db71f0dd852d04da58cd58cbf0289277dce098b7c9317f0a58e59ef6b2f602b4080dc6a9b026696c33500b2bc6fcffc4117c2c09282bfef9debe0e5b19dafd491c13ccd575829d58fc799272703023aa66f41f99f5ed140ed3edecdf956bdfb5af7e59cc521dfe6ef0e719906e77c6bcdbfcf1d19937864d30401093af762ae3c790864d39d083b5e889f7a52263c97b3097575e3578d4357bb644f3ba38184ada1fa26cdb8ff1c777532196a26cfd9fa260cab8324edd96f3e2959b10f85c78674978e2cdabcef34946531d086c1fbaf3cee41a69e1e0a50194435b4d72a81417f6545eca0fda826be31716dc9da108ffd2027ce6ba90ea505e248e585f05ff0d31df9831322032d527a540e38faef48fe26aedc12cacaf2d8fd6027cbfa91bee44e537957c290ad75884ac570da454d71fe840d8c0ead0eb2173b12a326d897167a410d06a6848b0d8de6e8c21833c211c84ffb3d893f7b487959f35fdeed7d20599be9f48419764bb7f68878ee1cab3ad6e67e529cf42fe15c2d23539cc750dee8e54b2ddf46bb93589a5ab7c104b845ff9889d023f05e8c91110f2ce4aea1cc62b09ad69314bd01c6d131d9c7b2c4d2eac589752a8513e98daaffbb643b9465e24df4a6a0b32027c6120780983795f65a7e2893ae15a2854d92aa1d17f70f3b416b66daa0de19882d34beefe1d0e0d40e379ddfefa64c28f6d3ae7a78c9268a2ecdf1d5febfd0c63d3fa9af434dddf343ffe67ca3da97279a8dc52ca892b81ce18cbc94b537b564fd98efcfb2fe3ff5e849a8d08e96f7ea4ff100280dfc9aa380e02cd705bdb01888d0216923304cfad3ca01b3d745abbbd1cdc4284b36ebe11fa1a1cc8a2fcb51d5385b7c865bbc86acd62e00e42aa8d03b2325e8a42e9c87a472e8e5e860293093199cf24fdede129f7a680b1c7c319c790937098b52c6f41256f0b3a6b2b8f8b3b91511678b1de2c6020e6c1680539ccebf27efd521a9aa6eb0e6685c1993848294917b2731fa6382fbe16c0b73b72131010a6a2ed4b09e5a2d1c30ce0d9d42009fb8e7b4cb0185b024c2f41df7997dd869d83f748e71dbfadbef9cfb671c7f4161f97d5372f03335b1f2deae6dfefa20ef4f2f76c9c275816fd9a26cd76ffc596a14872858cfa75e872bdb9e0550f999b1701a50f37da53ad4eaa678b454295cbdbbda389df9baca4e4cd5e5abc292616e5511c914046af456de23b60497250fe005be1894341190fbb36c967c07c9b1fc04550e453f0ad9262df19192a0301b0193002ef2a09b0cb2fef692f712416ca6bcc3cbe7f45954ad810f90a88abe8262cb503d4d638e430e937af222fb3151a718f3ffe5ab777eb0f693868dcc0b935638160c805b8090ed03835c8cfbf0b2a5e72e427710e349ce29c1b3c7070fbc8bb8cb6ee71aaf37e4fe3f212d992f540fcc9d95569863354bfb5609dbf8604f0a439ff239615ca184511a220e51a929411d5db9e8d8d28129589292ce95c40c2770e7660bc01cf3a90388b70f5dbc8f03882b7e37931012c562cbb9b88e7e2e57a151ea31c88cddd8b3da4dc4dc4bfc0a3733a45f272888bc244a94b67100d20a1d995ea707476adad381fe4d2c31b3d40cad"}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000002f40)={r6, 0x90000}) rt_sigtimedwait(&(0x7f0000003f40)={[0x31a2]}, &(0x7f0000003f80), &(0x7f0000004000)={0x77359400}, 0x8) landlock_restrict_self(r0, 0xa) r7 = signalfd(r4, &(0x7f0000004040)={[0x6]}, 0x8) r8 = accept4$bt_l2cap(r2, &(0x7f0000004080)={0x1f, 0x0, @fixed}, &(0x7f00000040c0)=0xe, 0x800) connect$bt_l2cap(r8, &(0x7f0000004100)={0x1f, 0xd0f9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x2}, 0xe) fcntl$addseals(r4, 0x409, 0x0) write$binfmt_elf64(r7, &(0x7f0000004140)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xf9, 0xc, 0x4, 0xa3, 0x2, 0x1, 0x1, 0x5b, 0x40, 0x319, 0x54b, 0x81, 0x38, 0x2, 0x6, 0x0, 0x614e}, [{0x4, 0x5, 0xd, 0x7, 0x9, 0x80000000, 0x6bd, 0xb}, {0x70000000, 0x4, 0x0, 0x0, 0x3, 0x1, 0x8, 0xa8d4}], "06a2acbb3abf7ee352719ab18824cd6f0232e48ec6457d7b9d416d5e5e7909c2b96dcfe54414b2f06e64e3f6c72834c612631e027ade5cdfc06aeec8a3e6e3e544d29282c3203b99a28bc7ed0b77f4015d2119d42ab70f5bd83e9fa4680b1d588c06991d1b73bd0f0b493a2fa6457a25ea00bc9e989529f724492b0d59ac527ee20086d6c7e100494ffcfe3084a66d27e5", ['\x00', '\x00']}, 0x341) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f00000044c0)={r5, 0x3, 0x8, 0x4}, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000004500)=0x7036, 0x4) 1.209224298s ago: executing program 5 (id=905): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x4000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r4, &(0x7f0000000280)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfffffff8, @private1, 0x13, 0xffffffff}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002b40)="f7", 0x33}], 0x1}}], 0x1, 0x40408c1) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000001340)=[{&(0x7f0000004940)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000ec000", 0x48}], 0x1) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='1', 0x1) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0x200e5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x1, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xc, 0x5, 0x401, 0x6d, 0x405, 0xa7, 0x81, 0x9, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1d, 0x7, 0x1, 0xfffffffa, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18a, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf781, 0x80000001, 0x5, 0x2, 0x489, 0x10000, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x6, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x2007f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x7fff, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10010, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x2, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) 1.06862524s ago: executing program 5 (id=906): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x20048040) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f00000000c0)=0x8e, 0x180000504) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000340)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d0403048708487b05beb72666696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669630000000000000008666963617428a2e0861e1ae90d412073656c662d74657374696e67206b657930b8ece1852be1042deb5eeeabba59301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301683142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c000000005de9705cb4022073b7c77a5adb670a964219cf4f674f356aee29ef25f24fc810149d79691c7ad7", 0x1db, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg2\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 522.588093ms ago: executing program 3 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') preadv(r0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000100)='+p', 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x455d37cdd48576cf, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) sendfile(r1, r1, 0x0, 0x6fecb1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') (async) preadv(r0, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) write(r2, &(0x7f0000000100)='+p', 0x2) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c00)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x80000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x455d37cdd48576cf, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) (async) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) (async) sendfile(r1, r1, 0x0, 0x6fecb1) (async) 71.731999ms ago: executing program 5 (id=908): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x2a, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x8) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x641, 0x800002e, r2, 0x0) fcntl$notify(r2, 0x402, 0x1a) 70.02184ms ago: executing program 1 (id=909): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0xfffffffe}) waitid(0x2, 0x0, &(0x7f00000000c0), 0x20000000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r4) write(0xffffffffffffffff, &(0x7f0000000014)="050001", 0x3) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) syz_io_uring_setup(0x1f4b, &(0x7f0000001e80)={0x0, 0x220f, 0x800, 0x3, 0x2bb}, &(0x7f00000002c0)=0x0, &(0x7f0000001f00), &(0x7f0000001e40)) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfbc0, 0x40000, 0xffffffff, 0x800000c3}, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAKE={0x34, 0x40, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r9, 0x0, &(0x7f0000003340)=@IORING_OP_RECVMSG={0xa, 0x0, 0x11, r6, 0x0, &(0x7f0000003300)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000000280)=""/15, 0xf}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/178, 0xb2}, {&(0x7f0000001cc0)=""/133, 0x85}, {&(0x7f0000001d80)=""/58, 0x3a}, {&(0x7f0000001dc0)=""/89, 0x59}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/110, 0x6e}], 0x8, &(0x7f0000003280)=""/95, 0x5f}, 0x0, 0x0, 0x1, {0x0, r11}}) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x320, 0x0, 0x3f0, 0x0, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff], 'vxcan1\x00', 'veth1\x00', {0xff}, {0xff}, 0x3a, 0x6, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@ipv6={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffffff, 0x7f, 0xff000000, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], 'veth1_to_batadv\x00', 'bond_slave_1\x00', {}, {}, 0x11, 0x0, 0x1, 0x5b}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x7, {0x6}}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x10}}}, {{@ipv6={@mcast2, @private2, [0xff000000, 0xffffff00, 0x0, 0xff0000ff], [0xff, 0xffffff00, 0xff000000], 'gre0\x00', 'ip6tnl0\x00', {}, {}, 0x2c, 0xca, 0x3, 0x2e}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) connect$inet6(r6, &(0x7f0000002140)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) 69.717278ms ago: executing program 5 (id=910): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0x3, 0x3}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x14014) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) 933.926µs ago: executing program 5 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0x4}, {0x0, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08001a"], 0x18c0}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="08001a"], 0x18c0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010681000c002b8008000300060000001400030076657468305f766c616dfffff60000000a000100aaaaaaaaaaaa00006cbb27b86ac52dca51"], 0x4c}}, 0x48000) (async) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010681000c002b8008000300060000001400030076657468305f766c616dfffff60000000a000100aaaaaaaaaaaa00006cbb27b86ac52dca51"], 0x4c}}, 0x48000) 0s ago: executing program 5 (id=912): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r2, &(0x7f0000001f00)={0x2020}, 0x2020) (async) write$P9_RLERROR(r2, &(0x7f00000000c0)={0xe, 0x7, 0x1, {0x5, '.[-/\''}}, 0xe) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000000)="b20e2a849314455f51e2ebd725b97b6bd01ca658fa421e3f66494cae9936f91a5a91184d3583048085779766d30eaa6857712a66d99e018757558deaebe69b103a8f547a3fddcc5e9c4c060de262df0efc1535a745cc8433bed5064a", &(0x7f0000000300)=""/172, &(0x7f00000003c0)="08223b1d72f268c2eec4df6494c865f6668e8a49f98168593079295120bb5a8db668b209e0a8998d32c90bbc3a58ad9608571d1d1bd923c80b1353f6151782f079456dc485f1017d97a997291e5186a7b70f7f6a7c399da894", &(0x7f0000000580)="595464dfa8778effc865b062cb0af684242eda5b9b7088221314ee8eefba07e4da0e04343ceff4aee35f530b64646457216d0c45d198560a85528982bac2371de72d6cae679e0c91a45d3f4435b7", 0x6, r2}, 0x38) (async) clock_adjtime(0x0, &(0x7f0000000480)={0x7ffffffff7ffffff, 0x200000000, 0x10000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xfffffffffffffffd}) (async, rerun: 64) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000140)=0x7) (rerun: 64) kernel console output (not intermixed with test programs): .027871][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.027886][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.027904][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.034588][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.034608][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.034625][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.034766][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.034782][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.034800][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.034921][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.034951][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.034969][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.035078][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.035093][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.035110][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.035293][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.035309][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.035326][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.035439][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.035454][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.035471][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.035580][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.035595][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.035612][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.035727][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.035742][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.035759][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.035883][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.035899][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.035916][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.036024][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.036039][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.036056][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.036162][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.036178][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.036195][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.036302][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.036380][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.036412][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.036550][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.036566][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.036582][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.036691][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.036707][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.036723][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.036826][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.036847][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.036864][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.036988][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.037003][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.037020][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.037197][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.037213][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.037229][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.039350][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.039369][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.039387][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.039519][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.039534][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.039551][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.039901][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.039918][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.039938][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.040160][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.040176][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.040192][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.040791][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.040809][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.040826][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.040952][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.041042][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.041060][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.041329][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.041345][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.041362][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.042530][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.042546][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.042563][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.042855][ T6417] sd 0:0:0:0: PR command failed: 1026 [ 61.042871][ T6417] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 61.042889][ T6417] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 61.116714][ T6429] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.548668][ T6452] binder: 6451:6452 ioctl c0306201 200000000080 returned -14 [ 61.618428][ T6454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.630589][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.632383][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.678784][ T6456] Illegal XDP return value 65535 on prog (id 14) dev N/A, expect packet loss! [ 62.027780][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 62.636905][ T6477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6477 comm=syz.1.171 [ 62.639217][ T43] kauditd_printk_skb: 55 callbacks suppressed [ 62.639271][ T43] audit: type=1400 audit(1790525627.365:455): avc: denied { setopt } for pid=6476 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.645526][ T43] audit: type=1400 audit(1790525627.375:456): avc: denied { write } for pid=6476 comm="syz.1.171" path="socket:[12885]" dev="sockfs" ino=12885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.652489][ T43] audit: type=1400 audit(1790525627.375:457): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.655951][ T43] audit: type=1400 audit(1790525627.385:458): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.695506][ T43] audit: type=1400 audit(1790525627.425:459): avc: denied { unlink } for pid=6480 comm="syz.1.173" name="#11" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.719426][ T6484] jffs2: notice: (6484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 62.720905][ T5087] Bluetooth: hci1: unexpected cc 0x2002 length: 1 < 4 [ 62.734000][ T6484] /dev/sg0: Can't lookup blockdev [ 62.736083][ T43] audit: type=1400 audit(1790525627.465:460): avc: denied { listen } for pid=6483 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.737254][ T43] audit: type=1400 audit(1790525627.465:461): avc: denied { write } for pid=6483 comm="syz.2.174" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.737513][ T43] audit: type=1400 audit(1790525627.465:462): avc: denied { add_name } for pid=6483 comm="syz.2.174" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.737682][ T43] audit: type=1400 audit(1790525627.465:463): avc: denied { create } for pid=6483 comm="syz.2.174" name="fillfile" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.742832][ T43] audit: type=1400 audit(1790525627.475:464): avc: denied { read write open } for pid=6483 comm="syz.2.174" path="/50/mnt/fillfile" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.641080][ T5874] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 63.694332][ T6505] jffs2: notice: (6505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 63.771067][ T6514] FAULT_INJECTION: forcing a failure. [ 63.771067][ T6514] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.771098][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz.1.183 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.771121][ T6514] Tainted: [L]=SOFTLOCKUP [ 63.771127][ T6514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.771136][ T6514] Call Trace: [ 63.771143][ T6514] [ 63.771149][ T6514] dump_stack_lvl+0x100/0x190 [ 63.771180][ T6514] should_fail_ex.cold+0x5/0xa [ 63.771205][ T6514] _copy_from_user+0x2e/0xd0 [ 63.771225][ T6514] copy_mount_options+0x76/0x190 [ 63.771253][ T6514] __x64_sys_mount+0x1ab/0x310 [ 63.771280][ T6514] ? __pfx___x64_sys_mount+0x10/0x10 [ 63.771311][ T6514] do_syscall_64+0x123/0x790 [ 63.771331][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.771348][ T6514] RIP: 0033:0x7fc48679e159 [ 63.771364][ T6514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.771381][ T6514] RSP: 002b:00007fc4875bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.771401][ T6514] RAX: ffffffffffffffda RBX: 00007fc486a25fa0 RCX: 00007fc48679e159 [ 63.771412][ T6514] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.771422][ T6514] RBP: 00007fc48683506b R08: 00002000000008c0 R09: 0000000000000000 [ 63.771433][ T6514] R10: 000000000010001c R11: 0000000000000246 R12: 0000000000000000 [ 63.771443][ T6514] R13: 00007fc486a26038 R14: 00007fc486a25fa0 R15: 00007ffeae49eee8 [ 63.771465][ T6514] [ 63.791845][ T5874] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 63.792907][ T5874] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 63.792924][ T5874] usb 7-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 63.792938][ T5874] usb 7-1: config 1 has no interface number 0 [ 63.795219][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.795232][ T5874] usb 7-1: Product: syz [ 63.795240][ T5874] usb 7-1: Manufacturer: syz [ 63.795247][ T5874] usb 7-1: SerialNumber: syz [ 63.829123][ T6516] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 63.839256][ T6516] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.877576][ T6520] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 63.877589][ T6520] netlink: 'syz.1.185': attribute type 2 has an invalid length. [ 64.010355][ T6501] ubi0: attaching mtd0 [ 64.015007][ T6501] ubi0: scanning is finished [ 64.015048][ T6501] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 64.113408][ T6535] : renamed from bridge_slave_0 (while UP) [ 64.130266][ T6501] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 64.138426][ T5874] usb 7-1: unknown interface protocol 0x2, assuming v1 [ 64.138440][ T5874] usb 7-1: cannot find UAC_HEADER [ 64.153476][ T6537] fuse: Bad value for 'rootmode' [ 64.177357][ T5874] snd-usb-audio 7-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 64.181746][ T5874] usb 7-1: USB disconnect, device number 6 [ 64.190297][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.221313][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 64.221706][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 64.592223][ T6552] netlink: 80 bytes leftover after parsing attributes in process `syz.1.197'. [ 64.686717][ T6559] netlink: 'syz.2.199': attribute type 1 has an invalid length. [ 64.779888][ T6562] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 64.840669][ T6565] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 65.456033][ T6570] binder: 6569:6570 ioctl 8010500d 200000001200 returned -22 [ 65.456992][ T6570] 9p: Bad value for 'wfdno' [ 65.488274][ T6574] vivid-000: disconnect [ 65.490104][ T6574] vivid-000: reconnect [ 65.608349][ T6576] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6576 comm=syz.2.203 [ 65.642777][ T6578] overlay: Unknown parameter 'obj_role' [ 65.741127][ T30] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.758423][ T6584] FAULT_INJECTION: forcing a failure. [ 65.758423][ T6584] name failslab, interval 1, probability 0, space 0, times 0 [ 65.758445][ T6584] CPU: 2 UID: 0 PID: 6584 Comm: syz.2.206 Tainted: G L syzkaller #0 PREEMPT(full) [ 65.758480][ T6584] Tainted: [L]=SOFTLOCKUP [ 65.758484][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.758491][ T6584] Call Trace: [ 65.758495][ T6584] [ 65.758499][ T6584] dump_stack_lvl+0x100/0x190 [ 65.758520][ T6584] should_fail_ex.cold+0x5/0xa [ 65.758536][ T6584] should_failslab+0xc2/0x120 [ 65.758551][ T6584] __kmalloc_noprof+0xfc/0x840 [ 65.758563][ T6584] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 65.758584][ T6584] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 65.758603][ T6584] genl_family_rcv_msg_doit+0xc7/0x300 [ 65.758619][ T6584] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 65.758640][ T6584] ? bpf_lsm_capable+0x9/0x10 [ 65.758656][ T6584] ? security_capable+0x80/0x260 [ 65.758676][ T6584] genl_rcv_msg+0x560/0x800 [ 65.758693][ T6584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 65.758707][ T6584] ? __lock_acquire+0x5c0/0x1f40 [ 65.758719][ T6584] ? __pfx_devlink_nl_pre_doit_port+0x10/0x10 [ 65.758735][ T6584] ? __pfx_devlink_nl_sb_port_pool_set_doit+0x10/0x10 [ 65.758750][ T6584] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 65.758770][ T6584] netlink_rcv_skb+0x159/0x420 [ 65.758783][ T6584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 65.758805][ T6584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 65.758824][ T6584] ? netlink_deliver_tap+0x1ae/0xcc0 [ 65.758838][ T6584] genl_rcv+0x28/0x40 [ 65.758852][ T6584] netlink_unicast+0x585/0x850 [ 65.758867][ T6584] ? __pfx_netlink_unicast+0x10/0x10 [ 65.758884][ T6584] netlink_sendmsg+0x8b0/0xda0 [ 65.758900][ T6584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.758917][ T6584] ? selinux_socket_sendmsg+0x198/0x2f0 [ 65.758932][ T6584] ____sys_sendmsg+0xa4d/0xbe0 [ 65.758942][ T6584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.758956][ T6584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.758973][ T6584] ___sys_sendmsg+0x190/0x1e0 [ 65.758984][ T6584] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.758996][ T6584] ? futex_wait+0x11e/0x370 [ 65.759011][ T6584] ? find_held_lock+0x2b/0x80 [ 65.759036][ T6584] __sys_sendmsg+0x160/0x210 [ 65.759051][ T6584] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.759073][ T6584] do_syscall_64+0x123/0x790 [ 65.759085][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.759096][ T6584] RIP: 0033:0x7f8b4e59e159 [ 65.759105][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.759115][ T6584] RSP: 002b:00007f8b4f3dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.759127][ T6584] RAX: ffffffffffffffda RBX: 00007f8b4e825fa0 RCX: 00007f8b4e59e159 [ 65.759133][ T6584] RDX: 0000000000010844 RSI: 00002000000003c0 RDI: 0000000000000006 [ 65.759140][ T6584] RBP: 00007f8b4e63506b R08: 0000000000000000 R09: 0000000000000000 [ 65.759146][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.759152][ T6584] R13: 00007f8b4e826038 R14: 00007f8b4e825fa0 R15: 00007fff1dd104e8 [ 65.759166][ T6584] [ 65.901129][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 65.901903][ T30] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 65.903621][ T30] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.903636][ T30] usb 6-1: config 179 has no interface number 0 [ 65.903653][ T30] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 65.903666][ T30] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 65.903679][ T30] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.903691][ T30] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 65.903703][ T30] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.903722][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.905402][ T6574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 66.114286][ T30] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input7 [ 66.379581][ T30] usb 6-1: USB disconnect, device number 3 [ 66.379692][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 66.379713][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 66.444741][ T6605] support for the xor transformation has been removed. [ 66.445824][ T6605] netlink: 340 bytes leftover after parsing attributes in process `syz.1.208'. [ 66.611143][ T853] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 66.621697][ T6619] overlayfs: failed to resolve './file0': -2 [ 66.741168][ T853] usb 7-1: device descriptor read/64, error -71 [ 66.991127][ T853] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 67.121295][ T853] usb 7-1: device descriptor read/64, error -71 [ 67.219471][ T6671] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 67.241202][ T853] usb usb7-port1: attempt power cycle [ 67.557321][ T6693] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 67.601301][ T853] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 67.632435][ T853] usb 7-1: device descriptor read/8, error -71 [ 67.688793][ T6695] ftl_cs: FTL header not found. [ 67.753637][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 67.753649][ T43] audit: type=1400 audit(1790525632.485:503): avc: denied { append } for pid=6705 comm="syz.3.221" name="sda" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.754963][ T43] audit: type=1400 audit(1790525632.485:504): avc: denied { write } for pid=6703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.804999][ T6711] overlay: Unknown parameter 'fsuuid' [ 67.806064][ T43] audit: type=1400 audit(1790525632.535:505): avc: denied { write } for pid=6709 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.818215][ T6695] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 67.895020][ T853] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 67.911532][ T853] usb 7-1: device descriptor read/8, error -71 [ 67.944152][ T6718] trusted_key: encrypted_key: insufficient parameters specified [ 68.017678][ T43] audit: type=1400 audit(1790525632.745:506): avc: denied { write } for pid=6721 comm="syz.3.225" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 68.022673][ T853] usb usb7-port1: unable to enumerate USB device [ 68.810549][ T6735] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 68.816906][ T6737] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 68.880785][ T6744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.230'. [ 68.956177][ T43] audit: type=1400 audit(1790525633.685:507): avc: denied { create } for pid=6745 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 68.969142][ T43] audit: type=1400 audit(1790525633.695:508): avc: denied { sys_admin } for pid=6745 comm="syz.3.231" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 69.041197][ T6750] overlayfs: failed to clone upperpath [ 69.481929][ T43] audit: type=1400 audit(1790525634.215:509): avc: denied { create } for pid=6754 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 69.482057][ T43] audit: type=1400 audit(1790525634.215:510): avc: denied { setopt } for pid=6754 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 69.540346][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 69.997891][ T6767] netlink: 64 bytes leftover after parsing attributes in process `syz.3.238'. [ 70.065053][ T6760] syzkaller1: entered promiscuous mode [ 70.065067][ T6760] syzkaller1: entered allmulticast mode [ 70.075780][ T43] audit: type=1400 audit(1790525634.805:511): avc: denied { bind } for pid=6759 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.191125][ T5817] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 70.341107][ T5817] usb 6-1: Using ep0 maxpacket: 8 [ 70.341594][ T5817] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.342421][ T5817] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 70.342434][ T5817] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 70.342454][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.554531][ T6773] loop5: detected capacity change from 0 to 7 [ 70.560868][ T6773] Dev loop5: unable to read RDB block 7 [ 70.560893][ T6773] loop5: unable to read partition table [ 70.561070][ T6773] loop5: partition table beyond EOD, truncated [ 70.561102][ T6773] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 70.561287][ T6770] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 70.674123][ T43] audit: type=1400 audit(1790525635.405:512): avc: denied { execute } for pid=6776 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 70.767804][ T5740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.770550][ T5740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.773936][ T5740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.776609][ T5740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.785318][ T5740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.185607][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.185715][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.185997][ T6780] bridge_slave_0: entered allmulticast mode [ 71.187222][ T6780] bridge_slave_0: entered promiscuous mode [ 71.190638][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.190772][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.190864][ T6780] bridge_slave_1: entered allmulticast mode [ 71.192227][ T6780] bridge_slave_1: entered promiscuous mode [ 71.216536][ T6780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.220299][ T6780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.237482][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.237534][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.250325][ T6780] team0: Port device team_slave_0 added [ 71.252975][ T6780] team0: Port device team_slave_1 added [ 71.275692][ T6780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.275709][ T6780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.275728][ T6780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.277458][ T6780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.277470][ T6780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.277490][ T6780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.315744][ T6780] hsr_slave_0: entered promiscuous mode [ 71.316531][ T6780] hsr_slave_1: entered promiscuous mode [ 71.317109][ T6780] debugfs: 'hsr0' already exists in 'hsr' [ 71.317126][ T6780] Cannot create hsr debugfs directory [ 71.491252][ T6780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.497017][ T6780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.497902][ T6780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.500768][ T6780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.502442][ T6780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.505812][ T6780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.506494][ T6780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.510458][ T6780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.528232][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.528324][ T6780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.529128][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.529179][ T6780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.570394][ T6780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.576962][ T6819] overlayfs: failed to resolve './file1': -2 [ 71.578848][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.579721][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.584800][ T6819] netlink: 36 bytes leftover after parsing attributes in process `syz.2.246'. [ 71.598466][ T6780] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.605334][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.605379][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.610341][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.610408][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.652062][ T6822] overlayfs: failed to clone upperpath [ 71.698522][ T6829] : renamed from vlan0 (while UP) [ 71.780202][ T6828] bridge0: port 1(ipvlan3) entered blocking state [ 71.780346][ T6828] bridge0: port 1(ipvlan3) entered disabled state [ 71.780447][ T6828] ipvlan3: entered allmulticast mode [ 71.780461][ T6828] bridge0: entered allmulticast mode [ 71.782735][ T6828] ipvlan3: left allmulticast mode [ 71.782750][ T6828] bridge0: left allmulticast mode [ 71.912503][ T6780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.927362][ T6859] syzkaller1: entered promiscuous mode [ 71.927380][ T6859] syzkaller1: entered allmulticast mode [ 72.077060][ T6780] veth0_vlan: entered promiscuous mode [ 72.082516][ T6780] veth1_vlan: entered promiscuous mode [ 72.109987][ T6780] veth0_macvtap: entered promiscuous mode [ 72.116935][ T6780] veth1_macvtap: entered promiscuous mode [ 72.133329][ T6780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.137737][ T6780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.196523][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.196719][ T6873] block nbd2: NBD_DISCONNECT [ 72.196836][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.197047][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.197279][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.231854][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.231868][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.255667][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.255688][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.677029][ T6893] netlink: 'syz.3.263': attribute type 4 has an invalid length. [ 72.684463][ T6894] netlink: 'syz.3.263': attribute type 4 has an invalid length. [ 72.831182][ T5087] Bluetooth: hci4: command tx timeout [ 72.842807][ T6913] ip_tables: iptables: counters copy to user failed while replacing table [ 72.843144][ T6914] ip_tables: iptables: counters copy to user failed while replacing table [ 72.885957][ T6916] overlay: filesystem on ./file0 not supported as upperdir [ 72.901609][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.269'. [ 72.968935][ T5874] usb 6-1: USB disconnect, device number 4 [ 73.047144][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 73.047161][ T43] audit: type=1400 audit(1790525637.775:521): avc: denied { name_bind } for pid=6921 comm="syz.1.272" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 73.368705][ T6933] ufs: You didn't specify the type of your ufs filesystem [ 73.368705][ T6933] [ 73.368705][ T6933] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 73.368705][ T6933] [ 73.368705][ T6933] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 73.368727][ T6933] ufs: failed to set blocksize [ 73.370122][ T6933] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 73.380798][ T6933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 73.394647][ T6933] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 73.396958][ T6933] netlink: 'syz.1.277': attribute type 2 has an invalid length. [ 73.396976][ T6933] netlink: 46 bytes leftover after parsing attributes in process `syz.1.277'. [ 73.446012][ T6936] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 73.446028][ T6936] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.447343][ T6936] vhci_hcd vhci_hcd.0: Device attached [ 73.448206][ T6939] usbip_core: unknown command [ 73.448213][ T6939] vhci_hcd: unknown pdu 0 [ 73.448218][ T6939] usbip_core: unknown command [ 73.452545][ T5580] vhci_hcd vhci_hcd.2: stop threads [ 73.452559][ T5580] vhci_hcd vhci_hcd.2: release socket [ 73.452580][ T5580] vhci_hcd vhci_hcd.2: disconnect device [ 73.457916][ T43] audit: type=1400 audit(1790525638.185:522): avc: denied { read append } for pid=6935 comm="syz.2.278" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 73.458225][ T43] audit: type=1400 audit(1790525638.185:523): avc: denied { open } for pid=6935 comm="syz.2.278" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 73.590788][ T43] audit: type=1400 audit(1790525638.315:524): avc: denied { setopt } for pid=6945 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.831234][ T1722] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 73.922144][ T43] audit: type=1400 audit(1790525638.655:525): avc: denied { create } for pid=6957 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.951741][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 73.986197][ T43] audit: type=1400 audit(1790525638.715:526): avc: denied { listen } for pid=6962 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.986592][ T43] audit: type=1400 audit(1790525638.715:527): avc: denied { accept } for pid=6962 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.002116][ T1722] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 74.003039][ T1722] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 74.003055][ T1722] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 74.003067][ T1722] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 74.003079][ T1722] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 8306, setting to 1024 [ 74.005307][ T1722] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 74.005320][ T1722] usb 9-1: Product: syz [ 74.005328][ T1722] usb 9-1: Manufacturer: syz [ 74.030019][ T6967] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 74.073110][ T43] audit: type=1400 audit(1790525638.805:528): avc: denied { write } for pid=6968 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.217852][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.218136][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.228853][ T43] audit: type=1400 audit(1790525638.955:529): avc: denied { ioctl } for pid=6945 comm="syz.4.280" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.229818][ T6946] overlay: Bad value for 'workdir' [ 74.243616][ T1722] dvb_ttusb_budget: ttusb_init_controller: error [ 74.243626][ T1722] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 74.305564][ T43] audit: type=1400 audit(1790525639.035:530): avc: denied { search } for pid=6980 comm="syz.1.293" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.319472][ T1722] DVB: Unable to find symbol cx22700_attach() [ 74.372042][ T1722] DVB: Unable to find symbol tda10046_attach() [ 74.372060][ T1722] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 74.388910][ T1722] usb 9-1: USB disconnect, device number 2 [ 74.575817][ T6998] fuse: Bad value for 'fd' [ 74.576393][ T6998] fuse: Bad value for 'fd' [ 74.779767][ T7008] Invalid ELF header type: 0 != 1 [ 74.901174][ T5087] Bluetooth: hci4: command tx timeout [ 74.943949][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 74.943970][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 74.946571][ T7016] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 75.074464][ T7036] netlink: 'syz.4.308': attribute type 10 has an invalid length. [ 75.078198][ T7036] team0: Port device veth0 added [ 75.268916][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.312'. [ 75.574346][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 75.584245][ T7071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.589036][ T7071] bond1: entered promiscuous mode [ 75.860857][ T7086] netlink: 72 bytes leftover after parsing attributes in process `syz.3.323'. [ 76.063486][ T7096] netlink: 164 bytes leftover after parsing attributes in process `syz.3.327'. [ 76.123196][ T7117] overlayfs: failed to resolve './bus': -2 [ 76.124994][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.126990][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.127425][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.128051][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.128372][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.130532][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.130819][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.135105][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.135993][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.138743][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.141478][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.143645][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.146036][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.148809][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.151207][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.156349][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.158912][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.162046][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.163746][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.166399][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.171600][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.174085][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.176812][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.187520][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.193144][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.197034][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.204119][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.208355][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.209116][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.209484][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.209775][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.210415][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.210737][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.211154][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.213998][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.219070][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.222868][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.224163][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.226916][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.229469][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.231899][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.237115][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.239006][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.241820][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.244644][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.247978][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.249992][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.254095][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.257218][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.265325][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.272894][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.276960][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.277740][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.278271][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.279614][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.282908][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.283900][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.286451][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.290226][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.291479][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.292638][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.295403][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.297909][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.299603][ T7126] SELinux: policydb string length 0 does not match expected length 8 [ 76.299630][ T7126] SELinux: failed to load policy [ 76.300290][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.303091][ T7121] overlayfs: failed to resolve './bus': -2 [ 76.359778][ T25] cfg80211: failed to load regulatory.db [ 76.543199][ T7135] netlink: 'syz.2.335': attribute type 21 has an invalid length. [ 76.543216][ T7135] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.543409][ T7135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.543415][ T7135] IPv6: NLM_F_CREATE should be set when creating new route [ 76.543434][ T7135] IPv6: NLM_F_CREATE should be set when creating new route [ 76.543444][ T7135] IPv6: NLM_F_CREATE should be set when creating new route [ 76.611273][ T5874] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.757637][ T7141] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 76.759236][ T7141] batman_adv: batadv0: Adding interface: gretap1 [ 76.759246][ T7141] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.759262][ T7141] batman_adv: batadv0: Interface activated: gretap1 [ 76.771324][ T5820] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 76.773757][ T5874] usb 6-1: Using ep0 maxpacket: 32 [ 76.780288][ T5874] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 76.781157][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.781174][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.781185][ T5874] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 76.781204][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.799551][ T5874] usb 6-1: config 0 descriptor?? [ 76.904573][ T7151] SELinux: Context system_u:object_r:getty_var_run_t:s0 is not valid (left unmapped). [ 76.906718][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 76.906931][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 76.932160][ T5820] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 76.935269][ T5820] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 76.935304][ T5820] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.935325][ T5820] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.935344][ T5820] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 76.936357][ T5820] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 76.936375][ T5820] usb 9-1: Manufacturer: syz [ 76.940006][ T5820] usb 9-1: config 0 descriptor?? [ 76.964458][ T7156] bridge0: port 1(team0) entered blocking state [ 76.964527][ T7156] bridge0: port 1(team0) entered disabled state [ 76.964768][ T7156] team0: entered allmulticast mode [ 76.964779][ T7156] team_slave_0: entered allmulticast mode [ 76.964797][ T7156] team_slave_1: entered allmulticast mode [ 76.967702][ T7156] team0: entered promiscuous mode [ 76.967714][ T7156] team_slave_0: entered promiscuous mode [ 76.967838][ T7156] team_slave_1: entered promiscuous mode [ 76.970428][ T7156] bridge0: port 1(team0) entered blocking state [ 76.970478][ T7156] bridge0: port 1(team0) entered forwarding state [ 76.983343][ T5087] Bluetooth: hci4: command tx timeout [ 77.057027][ T7162] misc userio: No port type given on /dev/userio [ 77.057045][ T7162] misc userio: No port type given on /dev/userio [ 77.057054][ T7162] misc userio: No port type given on /dev/userio [ 77.057063][ T7162] misc userio: No port type given on /dev/userio [ 77.057071][ T7162] misc userio: No port type given on /dev/userio [ 77.057079][ T7162] misc userio: No port type given on /dev/userio [ 77.057088][ T7162] misc userio: No port type given on /dev/userio [ 77.057096][ T7162] misc userio: No port type given on /dev/userio [ 77.057104][ T7162] misc userio: No port type given on /dev/userio [ 77.057113][ T7162] misc userio: No port type given on /dev/userio [ 77.057121][ T7162] misc userio: No port type given on /dev/userio [ 77.057166][ T7162] misc userio: No port type given on /dev/userio [ 77.057202][ T7162] misc userio: No port type given on /dev/userio [ 77.057212][ T7162] misc userio: No port type given on /dev/userio [ 77.057220][ T7162] misc userio: No port type given on /dev/userio [ 77.057229][ T7162] misc userio: No port type given on /dev/userio [ 77.057237][ T7162] misc userio: No port type given on /dev/userio [ 77.057245][ T7162] misc userio: No port type given on /dev/userio [ 77.057254][ T7162] misc userio: No port type given on /dev/userio [ 77.057262][ T7162] misc userio: No port type given on /dev/userio [ 77.057270][ T7162] misc userio: No port type given on /dev/userio [ 77.057316][ T7162] misc userio: No port type given on /dev/userio [ 77.057335][ T7162] misc userio: No port type given on /dev/userio [ 77.057344][ T7162] misc userio: No port type given on /dev/userio [ 77.057352][ T7162] misc userio: No port type given on /dev/userio [ 77.057360][ T7162] misc userio: No port type given on /dev/userio [ 77.057369][ T7162] misc userio: No port type given on /dev/userio [ 77.057377][ T7162] misc userio: No port type given on /dev/userio [ 77.057386][ T7162] misc userio: No port type given on /dev/userio [ 77.057394][ T7162] misc userio: No port type given on /dev/userio [ 77.057403][ T7162] misc userio: No port type given on /dev/userio [ 77.057411][ T7162] misc userio: No port type given on /dev/userio [ 77.057419][ T7162] misc userio: No port type given on /dev/userio [ 77.057709][ T7161] misc userio: The device must be registered before sending interrupts [ 77.305015][ T5874] usbhid 6-1:0.0: can't add hid device: -71 [ 77.305068][ T5874] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 77.307693][ T5874] usb 6-1: USB disconnect, device number 5 [ 77.321040][ T7165] ip6t_frag: unknown flags 6 [ 77.323577][ T7165] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 77.325042][ T7165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.325059][ T7165] IPv6: NLM_F_CREATE should be set when creating new route [ 77.325069][ T7165] IPv6: NLM_F_CREATE should be set when creating new route [ 77.355275][ T5820] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 77.366788][ T5820] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 77.627333][ T7132] netlink: 'syz.4.334': attribute type 4 has an invalid length. [ 77.632008][ T5820] usb 9-1: USB disconnect, device number 3 [ 78.188771][ T7210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 78.326696][ T43] kauditd_printk_skb: 36 callbacks suppressed [ 78.326837][ T43] audit: type=1400 audit(1790525643.055:567): avc: denied { mounton } for pid=7222 comm="syz.4.360" path="/18/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 78.350443][ T43] audit: type=1400 audit(1790525643.075:568): avc: denied { create } for pid=7224 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.350697][ T43] audit: type=1400 audit(1790525643.075:569): avc: denied { setopt } for pid=7224 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.352590][ T43] audit: type=1400 audit(1790525643.085:570): avc: denied { getopt } for pid=7224 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.382289][ T43] audit: type=1400 audit(1790525643.115:571): avc: denied { write } for pid=7222 comm="syz.4.360" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 78.384378][ T43] audit: type=1400 audit(1790525643.115:572): avc: denied { mounton } for pid=7222 comm="syz.4.360" path="/18/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 78.488997][ T7232] overlayfs: failed to resolve '/|': -2 [ 78.553225][ T7235] Invalid ELF header type: 0 != 1 [ 78.814742][ T43] audit: type=1400 audit(1790525643.545:573): avc: denied { connect } for pid=7236 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.815245][ T43] audit: type=1400 audit(1790525643.545:574): avc: denied { write } for pid=7236 comm="syz.3.364" laddr=fe80::c418:38ff:fe6c:5c20 lport=5469 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.064195][ T7253] bridge0: port 3(vlan2) entered blocking state [ 79.064240][ T7253] bridge0: port 3(vlan2) entered disabled state [ 79.064313][ T7253] vlan2: entered allmulticast mode [ 79.064326][ T7253] geneve0: entered allmulticast mode [ 79.066840][ T7253] vlan2: entered promiscuous mode [ 79.066853][ T7253] geneve0: entered promiscuous mode [ 79.071061][ T5087] Bluetooth: hci4: command tx timeout [ 79.123517][ T7257] syzkaller0: entered promiscuous mode [ 79.123536][ T7257] syzkaller0: entered allmulticast mode [ 79.182203][ T7259] random: crng reseeded on system resumption [ 79.186661][ T43] audit: type=1400 audit(1790525643.915:575): avc: denied { mmap_zero } for pid=7258 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 79.187896][ T43] audit: type=1400 audit(1790525643.915:576): avc: denied { ioctl } for pid=7258 comm="syz.4.370" path="socket:[16128]" dev="sockfs" ino=16128 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.268361][ T7264] jffs2: notice: (7264) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 79.347568][ T7272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.375'. [ 79.354062][ T7272] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.375'. [ 79.433846][ T7282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7282 comm=syz.4.377 [ 79.587472][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.598720][ T7295] trusted_key: encrypted_key: master key parameter 'N]sɣHɰSS<_' is invalid [ 79.602746][ T7301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.382'. [ 79.643996][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.384'. [ 79.695763][ T7313] Invalid ELF header type: 0 != 1 [ 79.707302][ T7315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=7315 comm=syz.2.383 [ 79.827692][ T7336] pim6reg: entered allmulticast mode [ 79.834437][ T7333] gtp0: entered allmulticast mode [ 79.852922][ T7336] team0: entered allmulticast mode [ 79.852943][ T7336] team_slave_0: entered allmulticast mode [ 79.852959][ T7336] team_slave_1: entered allmulticast mode [ 79.853303][ T7336] pim6reg: left allmulticast mode [ 79.930232][ T7338] fuse: fd is not a fuse device [ 79.930934][ T7338] fuse: fd is not a fuse device [ 80.009710][ T7350] Invalid ELF header type: 0 != 1 [ 80.059658][ T7353] netlink: 36 bytes leftover after parsing attributes in process `syz.1.398'. [ 80.150431][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 80.504239][ T7346] team0: left allmulticast mode [ 80.504256][ T7346] team_slave_0: left allmulticast mode [ 80.504266][ T7346] team_slave_1: left allmulticast mode [ 80.552643][ T7374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.402'. [ 80.654455][ T7384] mmap: syz.3.405 (7384): VmData 37523456 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 80.830863][ T7392] Invalid ELF header type: 0 != 1 [ 80.914371][ T7403] Invalid source name [ 80.918780][ T7403] Invalid source name [ 81.033606][ T7414] netlink: 48 bytes leftover after parsing attributes in process `syz.1.415'. [ 81.120443][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 81.200594][ T7414] netlink: 164 bytes leftover after parsing attributes in process `syz.1.415'. [ 81.411128][ T7450] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 81.411156][ T7450] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 81.411165][ T7450] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 81.743666][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.743734][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.743786][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.743834][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.743883][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.743931][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.743978][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.744026][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.744076][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.744129][ T7473] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 81.996476][ T7483] Invalid ELF header type: 0 != 1 [ 82.012112][ T7485] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `ݗb"^6C2W [ 82.012112][ T7485] 7 [ 82.303428][ T5087] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 83.667776][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 83.667789][ T43] audit: type=1400 audit(1790525648.395:604): avc: denied { ioctl } for pid=7541 comm="syz.1.449" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.773832][ T43] audit: type=1400 audit(1790525648.505:605): avc: denied { write } for pid=7549 comm="syz.2.452" name="usb_gadget" dev="configfs" ino=5377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.774093][ T43] audit: type=1400 audit(1790525648.505:606): avc: denied { add_name } for pid=7549 comm="syz.2.452" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.774332][ T43] audit: type=1400 audit(1790525648.505:607): avc: denied { create } for pid=7549 comm="syz.2.452" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 83.776036][ T43] audit: type=1400 audit(1790525648.505:608): avc: denied { write } for pid=7549 comm="syz.2.452" name="configs" dev="configfs" ino=14295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.776855][ T43] audit: type=1400 audit(1790525648.505:609): avc: denied { write } for pid=7549 comm="syz.2.452" name="c.1" dev="configfs" ino=14299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.777164][ T43] audit: type=1400 audit(1790525648.505:610): avc: denied { create } for pid=7549 comm="syz.2.452" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 83.778085][ T43] audit: type=1400 audit(1790525648.505:611): avc: denied { write } for pid=7549 comm="syz.2.452" name="UDC" dev="configfs" ino=14301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 83.778251][ T43] audit: type=1400 audit(1790525648.505:612): avc: denied { open } for pid=7549 comm="syz.2.452" path="/113/config/usb_gadget/g1/UDC" dev="configfs" ino=14301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 83.778805][ T43] audit: type=1400 audit(1790525648.505:613): avc: denied { bind } for pid=7549 comm="syz.2.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.782680][ T7550] UDC core: g1: couldn't find an available UDC or it's busy [ 84.320904][ T7597] hfsplus: unable to find HFS+ superblock [ 84.403964][ T7613] veth1_to_bond: entered allmulticast mode [ 84.448837][ T7612] veth1_to_bond: left allmulticast mode [ 84.462510][ T7575] cgroup: fork rejected by pids controller in /syz2 [ 85.010204][ T7660] Invalid ELF header type: 0 != 1 [ 85.149298][ T7667] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 85.149312][ T7667] __nla_validate_parse: 1 callbacks suppressed [ 85.149318][ T7667] netlink: 17 bytes leftover after parsing attributes in process `syz.1.472'. [ 85.224103][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.474'. [ 85.224941][ T7672] netlink: 'syz.1.474': attribute type 10 has an invalid length. [ 85.229807][ T7672] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 85.271653][ T7675] xt_CT: No such helper "pptp" [ 85.368272][ T7693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.479'. [ 85.469274][ T7706] veth1_macvtap: left promiscuous mode [ 85.469291][ T7706] macsec0: entered promiscuous mode [ 85.469298][ T7706] macsec0: entered allmulticast mode [ 85.475456][ T7706] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 85.475946][ T7706] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 85.476336][ T7707] MTD: Couldn't look up 'mtd0/file0': -2 [ 85.544325][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=788 sclass=netlink_route_socket pid=7716 comm=syz.1.486 [ 85.726958][ T7733] overlay: Unknown parameter 'func' [ 85.994415][ T7743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.494'. [ 85.994616][ T7743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.494'. [ 85.994793][ T7743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.494'. [ 85.994969][ T7743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.494'. [ 85.995904][ T7743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.494'. [ 85.996042][ T7743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.494'. [ 85.996171][ T7743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.494'. [ 86.056750][ T7743] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 86.059702][ T7747] xt_check_target_common: 1 callbacks suppressed [ 86.059716][ T7747] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 86.273727][ T7753] Invalid ELF header type: 0 != 1 [ 86.641090][ T853] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 86.793661][ T853] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 86.794620][ T853] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 86.794641][ T853] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 86.794669][ T853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.968121][ T7796] Invalid ELF header type: 0 != 1 [ 87.005075][ T50] usb 9-1: USB disconnect, device number 4 [ 87.692129][ T7852] binder: Bad value for 'max' [ 87.695670][ T7856] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 87.701789][ T7857] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.701812][ T7857] overlayfs: failed to set xattr on upper [ 87.701816][ T7857] overlayfs: ...falling back to redirect_dir=nofollow. [ 87.701820][ T7857] overlayfs: ...falling back to index=off. [ 87.701824][ T7857] overlayfs: ...falling back to uuid=null. [ 87.742442][ T7865] net_ratelimit: 48 callbacks suppressed [ 87.742456][ T7865] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 87.783581][ T7879] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 87.879993][ T7895] Cannot find set identified by id 0 to match [ 87.909894][ T7904] UBIFS error (pid: 7904): cannot open "ubi0:test", error -19 [ 87.937945][ T7906] netlink: 'syz.2.534': attribute type 21 has an invalid length. [ 88.711103][ T5874] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 88.771811][ T7933] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 88.773760][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 88.773770][ T43] audit: type=1400 audit(1790525653.505:637): avc: denied { write } for pid=7931 comm="syz.2.542" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 88.777086][ T43] audit: type=1400 audit(1790525653.505:638): avc: denied { create } for pid=7931 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.777706][ T43] audit: type=1400 audit(1790525653.505:639): avc: denied { write } for pid=7931 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.861787][ T5874] usb 9-1: Using ep0 maxpacket: 8 [ 88.865482][ T5874] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.866369][ T5874] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.866383][ T5874] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.866395][ T5874] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.866406][ T5874] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.866426][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.903391][ T43] audit: type=1400 audit(1790525653.635:640): avc: denied { append } for pid=7944 comm="syz.1.547" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.070563][ T5874] usb 9-1: GET_CAPABILITIES returned 0 [ 89.070588][ T5874] usbtmc 9-1:16.0: can't read capabilities [ 89.158384][ T7956] netlink: zone id is out of range [ 89.158400][ T7956] netlink: zone id is out of range [ 89.158407][ T7956] netlink: zone id is out of range [ 89.158413][ T7956] netlink: zone id is out of range [ 89.158421][ T7956] netlink: zone id is out of range [ 89.158428][ T7956] netlink: zone id is out of range [ 89.158434][ T7956] netlink: zone id is out of range [ 89.158442][ T7956] netlink: zone id is out of range [ 89.158449][ T7956] netlink: zone id is out of range [ 89.281877][ C0] usbtmc 9-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 89.309134][ T7926] kvm: pic: non byte write [ 89.317936][ T5874] usb 9-1: USB disconnect, device number 5 [ 89.489958][ T7959] syzkaller0: entered promiscuous mode [ 89.489981][ T7959] syzkaller0: entered allmulticast mode [ 89.499067][ T43] audit: type=1400 audit(1790525654.225:641): avc: denied { mount } for pid=7958 comm="syz.2.551" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 89.499694][ T43] audit: type=1400 audit(1790525654.225:642): avc: denied { search } for pid=7958 comm="syz.2.551" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 89.499964][ T43] audit: type=1400 audit(1790525654.225:643): avc: denied { read } for pid=7958 comm="syz.2.551" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 89.500279][ T43] audit: type=1400 audit(1790525654.225:644): avc: denied { open } for pid=7958 comm="syz.2.551" path="/135/nfsd/exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 89.780677][ T7963] program syz.1.553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.786805][ T43] audit: type=1400 audit(1790525654.515:645): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 89.792262][ T7963] usb usb9: usbfs: process 7963 (syz.1.553) did not claim interface 0 before use [ 89.826501][ T43] audit: type=1400 audit(1790525654.555:646): avc: denied { set_context_mgr } for pid=7966 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 89.826534][ T7968] binder: BINDER_SET_CONTEXT_MGR already set [ 89.826546][ T7968] binder: 7966:7968 ioctl 4018620d 200000000240 returned -16 [ 89.828319][ T7968] binder: BINDER_SET_CONTEXT_MGR already set [ 89.828333][ T7968] binder: 7966:7968 ioctl 4018620d 200000000040 returned -16 [ 89.837771][ T7967] bridge1: entered allmulticast mode [ 89.985675][ T7987] tracefs: Unknown parameter '0x00000000000000000x0000000000000000' [ 90.017202][ T7991] netlink: 'syz.2.560': attribute type 10 has an invalid length. [ 90.026762][ T8001] netlink: 'syz.2.560': attribute type 10 has an invalid length. [ 90.055067][ T7991] dummy0: entered promiscuous mode [ 90.055291][ T7991] dummy0: entered allmulticast mode [ 90.056403][ T7991] team0: Port device dummy0 added [ 90.079041][ T8001] dummy0 (unregistering): left promiscuous mode [ 90.079065][ T8001] dummy0 (unregistering): left allmulticast mode [ 90.080607][ T8001] team0: Port device dummy0 removed [ 90.103436][ T5087] Bluetooth: hci3: command 0x2016 tx timeout [ 90.254657][ T8022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2122 sclass=netlink_route_socket pid=8022 comm=syz.3.565 [ 90.294300][ T8028] __nla_validate_parse: 65 callbacks suppressed [ 90.294349][ T8028] netlink: 9 bytes leftover after parsing attributes in process `syz.3.566'. [ 90.295403][ T8028] gretap0: entered promiscuous mode [ 90.303978][ T8028] netlink: 5 bytes leftover after parsing attributes in process `syz.3.566'. [ 90.304130][ T8028] 0{X: renamed from gretap0 [ 90.307962][ T8028] 0{X: left promiscuous mode [ 90.307974][ T8028] 0{X: entered allmulticast mode [ 90.911656][ T8086] Bluetooth: hci0: invalid len left 7, exp >= 112 [ 91.163926][ T8113] fuse: fd is not a fuse device [ 91.181767][ T5820] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 91.243385][ T8120] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 91.294725][ T8120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 91.341602][ T5820] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 91.342554][ T5820] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 91.342567][ T5820] usb 7-1: config 1 has no interface number 0 [ 91.344288][ T8109] bond5: (slave gretap1): making interface the new active one [ 91.344724][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.344737][ T5820] usb 7-1: Product: syz [ 91.344745][ T5820] usb 7-1: Manufacturer: syz [ 91.344752][ T5820] usb 7-1: SerialNumber: syz [ 91.345043][ T8109] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 91.350197][ T5820] usb 7-1: 3:0 : does not exist [ 91.350208][ T5820] usb 7-1: 3:0 : does not exist [ 91.445825][ T8130] netlink: 'syz.4.584': attribute type 2 has an invalid length. [ 91.446309][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 91.462003][ T8130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.514599][ T5087] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 91.515726][ T8133] fuse: Unknown parameter 'a' [ 91.549233][ T5820] usb 7-1: USB disconnect, device number 11 [ 91.635025][ T8148] 9p: Bad value for 'rfdno' [ 92.081122][ T5820] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 92.088079][ T8168] netlink: 'syz.3.597': attribute type 5 has an invalid length. [ 92.088096][ T8170] netlink: 'syz.3.597': attribute type 5 has an invalid length. [ 92.120818][ T8174] netlink: 'syz.3.598': attribute type 5 has an invalid length. [ 92.123921][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 92.124392][ T8174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.598'. [ 92.183718][ T5087] Bluetooth: hci3: command 0x2016 tx timeout [ 92.258341][ T5820] usb 7-1: New USB device found, idVendor=0a67, idProduct=5011, bcdDevice= 0.40 [ 92.259097][ T5820] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 92.259113][ T5820] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.260636][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.260648][ T5820] usb 7-1: Product: 睰䋽杢㏄ℌ욈踊␃Ჷ挢㸐拋␩ེ벾蟤趵獓쪚樧熙츉꾒﮸솣炻厮鞴鯆⡗믚옛⎺棰뗵鯓Ɏ暥財ᛀ報⯟᧰꺻ﺦ뛉듥饸误轋뤍Ꮟꮾ姚ᯍܳ铳鉮걗ﴯ懝궠佧⦋๪ⶵ늕ί믒쓘堘䆅⸩ၼ檅뫏⮫⦭삡苐配㹥㣥뽡Ꮖ縎⩔뒉Ö꪿ꡥ㯮步ꠌ᥏蜮돊᪇蟚⻃ᅨ＊玾蟺䯋䛴摠呴⫥ [ 92.260666][ T5820] usb 7-1: Manufacturer: 㯝읣ࡋꛦ鋒ዱ䟍䣴뤫ꋶ䱙⭴丆뎝롏蕖ꁮﲳ鹏ા宇㔿淌孨ꅥ쎼坤䅊ꤓ厶䄷➙멗삼࿢᷿쉦䔧챵쮀ⵖ᝹೏易㡸뺁㶜฻銾邟뗐ꛛ縁죄뇍⏤⭠ [ 92.260680][ T5820] usb 7-1: SerialNumber: 荇㫰㛐䭿籡樻山䞈ⱖ㥠䤻שּׂ쎵㓘滋䜥궘ⅈ뙷ṻ猋鷧㫜࿚闚 [ 92.473261][ T5820] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 92.473782][ T5820] usb 7-1: unit 1 not found! [ 92.494617][ T5820] usb 7-1: USB disconnect, device number 12 [ 92.547480][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.981268][ T5820] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 93.122417][ T5820] usb 7-1: device descriptor read/64, error -71 [ 93.223401][ T30] net_ratelimit: 1722 callbacks suppressed [ 93.223421][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.385574][ T5820] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 93.531813][ T5820] usb 7-1: device descriptor read/64, error -71 [ 93.624966][ T8241] FAULT_INJECTION: forcing a failure. [ 93.624966][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 93.624988][ T8241] CPU: 1 UID: 0 PID: 8241 Comm: syz.1.616 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.625004][ T8241] Tainted: [L]=SOFTLOCKUP [ 93.625008][ T8241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 93.625015][ T8241] Call Trace: [ 93.625019][ T8241] [ 93.625024][ T8241] dump_stack_lvl+0x100/0x190 [ 93.625056][ T8241] should_fail_ex.cold+0x5/0xa [ 93.625073][ T8241] should_failslab+0xc2/0x120 [ 93.625093][ T8241] __kmalloc_noprof+0xfc/0x840 [ 93.625107][ T8241] ? load_msg+0x118/0x4a0 [ 93.625124][ T8241] load_msg+0x118/0x4a0 [ 93.625140][ T8241] do_msgsnd+0x1ad/0x1790 [ 93.625160][ T8241] ? __pfx_do_msgsnd+0x10/0x10 [ 93.625178][ T8241] ? find_held_lock+0x2b/0x80 [ 93.625194][ T8241] ? __might_fault+0xc5/0x140 [ 93.625211][ T8241] ? __might_fault+0xc5/0x140 [ 93.625232][ T8241] ? __x64_sys_msgsnd+0xe5/0x130 [ 93.625247][ T8241] __x64_sys_msgsnd+0xe5/0x130 [ 93.625265][ T8241] do_syscall_64+0x123/0x790 [ 93.625281][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.625293][ T8241] RIP: 0033:0x7fc48679e159 [ 93.625303][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.625314][ T8241] RSP: 002b:00007fc4875bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 93.625326][ T8241] RAX: ffffffffffffffda RBX: 00007fc486a25fa0 RCX: 00007fc48679e159 [ 93.625333][ T8241] RDX: 0000000000002000 RSI: 0000200000000040 RDI: 0000000000000000 [ 93.625340][ T8241] RBP: 00007fc48683506b R08: 0000000000000000 R09: 0000000000000000 [ 93.625347][ T8241] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 93.625353][ T8241] R13: 00007fc486a26038 R14: 00007fc486a25fa0 R15: 00007ffeae49eee8 [ 93.625368][ T8241] [ 93.651935][ T5820] usb usb7-port1: attempt power cycle [ 93.922984][ T8251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.619'. [ 93.923278][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.619'. [ 93.984272][ T8256] xt_hashlimit: max too large, truncated to 1048576 [ 93.985120][ T8256] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.992245][ T5820] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 94.014715][ T5820] usb 7-1: device descriptor read/8, error -71 [ 94.015144][ T8261] nfs4: Bad value for 'source' [ 94.018509][ T8262] nfs4: Bad value for 'source' [ 94.026989][ T8265] ip_tables: iptables: counters copy to user failed while replacing table [ 94.261132][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.281074][ T5820] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 94.302217][ T5820] usb 7-1: device descriptor read/8, error -71 [ 94.327844][ T8299] netlink: 'syz.3.630': attribute type 11 has an invalid length. [ 94.421272][ T5820] usb usb7-port1: unable to enumerate USB device [ 94.726146][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 94.726164][ T43] audit: type=1400 audit(1790525659.455:670): avc: denied { getopt } for pid=8300 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.907588][ T8317] bridge2: entered allmulticast mode [ 94.919120][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.994785][ T8322] program syz.1.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.071652][ T8334] netlink: 'syz.2.641': attribute type 1 has an invalid length. [ 95.071671][ T8334] netlink: 84 bytes leftover after parsing attributes in process `syz.2.641'. [ 95.071680][ T8334] netlink: 'syz.2.641': attribute type 2 has an invalid length. [ 95.071686][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 95.073023][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.140005][ T8341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.644'. [ 95.204949][ T43] audit: type=1326 audit(1790525659.935:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.648" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4e59e159 code=0x7ffc0000 [ 95.204993][ T43] audit: type=1326 audit(1790525659.935:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.648" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4e59e159 code=0x7ffc0000 [ 95.205151][ T43] audit: type=1326 audit(1790525659.935:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.648" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b4e55e98e code=0x7ffc0000 [ 95.205350][ T43] audit: type=1326 audit(1790525659.935:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.648" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4e59e159 code=0x7ffc0000 [ 95.205795][ T43] audit: type=1326 audit(1790525659.935:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.648" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f8b4e59e159 code=0x7ffc0000 [ 95.205947][ T43] audit: type=1326 audit(1790525659.935:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.648" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4e59e159 code=0x7ffc0000 [ 95.206186][ T43] audit: type=1326 audit(1790525659.935:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.648" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8b4e59e159 code=0x7ffc0000 [ 95.206330][ T43] audit: type=1326 audit(1790525659.935:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.648" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4e59e159 code=0x7ffc0000 [ 95.206481][ T43] audit: type=1326 audit(1790525659.935:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8352 comm="syz.2.648" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4e59e159 code=0x7ffc0000 [ 95.236549][ T8351] netlink: 'syz.1.646': attribute type 4 has an invalid length. [ 95.238095][ T30] bridge0: entered promiscuous mode [ 95.303923][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.697522][ T8378] fuse: fd is not a fuse device [ 95.759005][ T8381] FAT-fs (mtdblock0): bogus logical sector size 65508 [ 95.759020][ T8381] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 95.831817][ T8382] overlayfs: upper fs does not support tmpfile. [ 95.921221][ T8394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=8394 comm=syz.3.661 [ 95.921247][ T8394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8394 comm=syz.3.661 [ 95.975220][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 96.017633][ T8404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.017828][ T8404] block device autoloading is deprecated and will be removed. [ 96.227078][ T8420] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.316730][ T8426] FAULT_INJECTION: forcing a failure. [ 96.316730][ T8426] name failslab, interval 1, probability 0, space 0, times 0 [ 96.316762][ T8426] CPU: 1 UID: 0 PID: 8426 Comm: syz.2.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 96.316787][ T8426] Tainted: [L]=SOFTLOCKUP [ 96.316793][ T8426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.316805][ T8426] Call Trace: [ 96.316817][ T8426] [ 96.316823][ T8426] dump_stack_lvl+0x100/0x190 [ 96.316864][ T8426] should_fail_ex.cold+0x5/0xa [ 96.316893][ T8426] should_failslab+0xc2/0x120 [ 96.316922][ T8426] __kmalloc_cache_noprof+0x91/0x6d0 [ 96.316950][ T8426] ? x509_cert_parse+0xfc/0x910 [ 96.316992][ T8426] x509_cert_parse+0xfc/0x910 [ 96.317020][ T8426] x509_key_preparse+0x65/0x9c0 [ 96.317047][ T8426] asymmetric_key_preparse+0xce/0x1d0 [ 96.317074][ T8426] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 96.317103][ T8426] __key_create_or_update+0x463/0xe30 [ 96.317131][ T8426] ? __pfx___key_create_or_update+0x10/0x10 [ 96.317155][ T8426] ? lookup_user_key+0x3f3/0x1300 [ 96.317191][ T8426] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 96.317217][ T8426] key_create_or_update+0x42/0x60 [ 96.317244][ T8426] __do_sys_add_key+0x2e8/0x460 [ 96.317274][ T8426] ? __pfx___do_sys_add_key+0x10/0x10 [ 96.317311][ T8426] do_syscall_64+0x123/0x790 [ 96.317339][ T8426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.317359][ T8426] RIP: 0033:0x7f8b4e59e159 [ 96.317376][ T8426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.317393][ T8426] RSP: 002b:00007f8b4f3dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 96.317417][ T8426] RAX: ffffffffffffffda RBX: 00007f8b4e825fa0 RCX: 00007f8b4e59e159 [ 96.317430][ T8426] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 96.317441][ T8426] RBP: 00007f8b4e63506b R08: ffffffffffffffff R09: 0000000000000000 [ 96.317452][ T8426] R10: 00000000000003eb R11: 0000000000000246 R12: 0000000000000000 [ 96.317463][ T8426] R13: 00007f8b4e826038 R14: 00007f8b4e825fa0 R15: 00007fff1dd104e8 [ 96.317488][ T8426] [ 96.351614][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.538877][ T8439] syzkaller0: entered promiscuous mode [ 96.538891][ T8439] syzkaller0: entered allmulticast mode [ 96.593939][ T8441] SELinux: ebitmap start bit (8390656) is beyond the end of the bitmap (1088) [ 96.593984][ T8441] SELinux: invalid class [ 96.596124][ T8441] SELinux: failed to load policy [ 96.646253][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'. [ 96.646274][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.675'. [ 97.381313][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.520849][ T8453] netlink: 'syz.4.678': attribute type 3 has an invalid length. [ 97.550140][ T8458] FAULT_INJECTION: forcing a failure. [ 97.550140][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 97.550174][ T8458] CPU: 3 UID: 0 PID: 8458 Comm: syz.2.679 Tainted: G L syzkaller #0 PREEMPT(full) [ 97.550201][ T8458] Tainted: [L]=SOFTLOCKUP [ 97.550208][ T8458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.550219][ T8458] Call Trace: [ 97.550226][ T8458] [ 97.550234][ T8458] dump_stack_lvl+0x100/0x190 [ 97.550268][ T8458] should_fail_ex.cold+0x5/0xa [ 97.550294][ T8458] should_failslab+0xc2/0x120 [ 97.550319][ T8458] kmem_cache_alloc_noprof+0x92/0x6a0 [ 97.550341][ T8458] ? alloc_empty_file+0x5b/0x1c0 [ 97.550372][ T8458] alloc_empty_file+0x5b/0x1c0 [ 97.550401][ T8458] path_openat+0xdb/0x2440 [ 97.550430][ T8458] ? __pfx_path_openat+0x10/0x10 [ 97.550461][ T8458] do_file_open+0x20e/0x430 [ 97.550485][ T8458] ? __pfx_do_file_open+0x10/0x10 [ 97.550525][ T8458] ? _raw_spin_unlock+0x28/0x50 [ 97.550550][ T8458] ? alloc_fd+0x471/0x7a0 [ 97.550580][ T8458] do_sys_openat2+0x10f/0x1e0 [ 97.550606][ T8458] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.550642][ T8458] __x64_sys_openat+0x12d/0x210 [ 97.550670][ T8458] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.550706][ T8458] do_syscall_64+0x123/0x790 [ 97.550728][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.550748][ T8458] RIP: 0033:0x7f8b4e55e98e [ 97.550765][ T8458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.550782][ T8458] RSP: 002b:00007f8b4f3dcf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.550803][ T8458] RAX: ffffffffffffffda RBX: 00007f8b4f3dd6c0 RCX: 00007f8b4e55e98e [ 97.550814][ T8458] RDX: 0000000000000000 RSI: 00007f8b4e6347a6 RDI: ffffffffffffff9c [ 97.550829][ T8458] RBP: 00007f8b4e63506b R08: 0000000000000000 R09: 0000000000000000 [ 97.550840][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.550851][ T8458] R13: 00007f8b4e826038 R14: 00007f8b4e825fa0 R15: 00007fff1dd104e8 [ 97.550875][ T8458] [ 97.847320][ T8469] 9p: p9: multiple sources not supported [ 97.939312][ T8475] netlink: 2436 bytes leftover after parsing attributes in process `syz.4.685'. [ 97.939330][ T8475] openvswitch: netlink: Flow actions attr not present in new flow. [ 97.971318][ T30] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 97.972792][ T8477] netlink: 68 bytes leftover after parsing attributes in process `syz.4.686'. [ 97.973549][ T8477] ip_tables: iptables: counters copy to user failed while replacing table [ 98.111928][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.689'. [ 98.132488][ T30] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 98.133298][ T30] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.133314][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 98.133327][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 98.134885][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.134897][ T30] usb 7-1: Product: syz [ 98.134904][ T30] usb 7-1: Manufacturer: syz [ 98.134912][ T30] usb 7-1: SerialNumber: syz [ 98.138613][ T30] usb 7-1: config 0 descriptor?? [ 98.139302][ T8471] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 98.146304][ T8492] geneve1: entered allmulticast mode [ 98.181903][ T30] rc_core: IR keymap rc-streamzap not found [ 98.181915][ T30] Registered IR keymap rc-empty [ 98.187269][ T30] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 98.188255][ T30] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 98.349938][ T30] usb 7-1: USB disconnect, device number 17 [ 98.388957][ T8502] netlink: 64 bytes leftover after parsing attributes in process `syz.4.692'. [ 98.391941][ T8503] netlink: 'syz.4.692': attribute type 10 has an invalid length. [ 98.431274][ T5875] net_ratelimit: 1 callbacks suppressed [ 98.431288][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.537407][ T8508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.061370][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.698'. [ 99.063601][ T8528] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 99.063620][ T8528] netlink: 40 bytes leftover after parsing attributes in process `syz.3.698'. [ 99.066185][ T8528] dummy0: entered promiscuous mode [ 99.067030][ T8528] bridge0: port 3(dummy0) entered blocking state [ 99.067074][ T8528] bridge0: port 3(dummy0) entered disabled state [ 99.067137][ T8528] dummy0: entered allmulticast mode [ 99.068654][ T8528] bridge0: port 3(dummy0) entered blocking state [ 99.068739][ T8528] bridge0: port 3(dummy0) entered listening state [ 99.133045][ T8534] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 99.156345][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 99.188352][ T8534] bond2: entered promiscuous mode [ 99.188671][ T8534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.214627][ T8534] bond2 (unregistering): Released all slaves [ 99.305327][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.305539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.305677][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.309015][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.315942][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.318359][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.337704][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.397193][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.448283][ T8564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8564 comm=syz.4.707 [ 99.538692][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.538704][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.538709][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.538714][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.538719][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.538723][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.538728][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.538733][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.538737][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.538741][ T8581] tc action pedit offset must be on 32 bit boundaries [ 99.541083][ T1044] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 99.559639][ T8582] netlink: 'syz.3.706': attribute type 8 has an invalid length. [ 99.694346][ T1044] usb 6-1: unable to get BOS descriptor or descriptor too short [ 99.694389][ T1044] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 99.698903][ T1044] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 99.698927][ T1044] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 99.698941][ T1044] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.698956][ T1044] usb 6-1: config 0 has no interface number 0 [ 99.698988][ T1044] usb 6-1: config 0 interface 251 altsetting 11 endpoint 0x8 has invalid wMaxPacketSize 0 [ 99.699006][ T1044] usb 6-1: config 0 interface 251 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.699027][ T1044] usb 6-1: config 0 interface 251 has no altsetting 0 [ 99.706077][ T1044] usb 6-1: string descriptor 0 read error: -22 [ 99.706162][ T1044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.721962][ T1044] usb 6-1: config 0 descriptor?? [ 99.727210][ T1044] cypress_m8 6-1:0.251: HID->COM RS232 Adapter converter detected [ 99.728150][ T1044] cyphidcom ttyUSB0: required endpoint is missing [ 99.929841][ T1044] usb 6-1: USB disconnect, device number 6 [ 99.930932][ T1044] cypress_m8 6-1:0.251: device disconnected [ 100.589110][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 100.589129][ T43] audit: type=1400 audit(1790525665.315:702): avc: denied { read } for pid=8627 comm="syz.4.722" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 100.620057][ T8630] fuse: fd is not a fuse device [ 100.704008][ T8639] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 100.704026][ T8639] netlink: 'syz.1.727': attribute type 2 has an invalid length. [ 100.791164][ T50] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 100.941820][ T50] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 100.942754][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.149443][ T50] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 101.160170][ T50] usb 7-1: USB disconnect, device number 18 [ 101.269140][ T8657] kvm: pic: non byte read [ 101.272883][ T8657] kvm: pic: single mode not supported [ 101.273226][ T8657] kvm: pic: non byte read [ 101.427592][ T8665] kvm [8664]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 101.428174][ T8665] kvm [8664]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 101.465001][ T8672] overlayfs: failed to clone upperpath [ 101.620410][ T43] audit: type=1400 audit(1790525666.345:703): avc: denied { connect } for pid=8678 comm="syz.4.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.751283][ T43] audit: type=1400 audit(1790525666.485:704): avc: denied { write } for pid=8684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.806458][ T43] audit: type=1400 audit(1790525666.535:705): avc: denied { write } for pid=8689 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.965146][ T43] audit: type=1400 audit(1790525666.695:706): avc: denied { write } for pid=8692 comm="syz.4.745" name="instances" dev="tracefs" ino=1730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.966139][ T43] audit: type=1400 audit(1790525666.695:707): avc: denied { add_name } for pid=8692 comm="syz.4.745" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 101.966427][ T43] audit: type=1400 audit(1790525666.695:708): avc: denied { create } for pid=8692 comm="syz.4.745" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 102.015108][ T43] audit: type=1400 audit(1790525666.745:709): avc: denied { read write } for pid=8692 comm="syz.4.745" name="available_tracers" dev="tracefs" ino=1628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 102.015385][ T43] audit: type=1400 audit(1790525666.745:710): avc: denied { ioctl open } for pid=8692 comm="syz.4.745" path="/119/tracefs/available_tracers" dev="tracefs" ino=1628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 102.210215][ T8697] loop0: detected capacity change from 0 to 4096 [ 102.273869][ T8697] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 102.273886][ T8697] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 102.273912][ T8697] loop0: [ 102.283659][ T43] audit: type=1400 audit(1790525667.015:711): avc: denied { mounton } for pid=8696 comm="syz.4.746" path="/120/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 102.736331][ T5580] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.832357][ T5087] Bluetooth: hci5: command 0x1003 tx timeout [ 102.832750][ T5740] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 102.846641][ T5580] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.920807][ T5580] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.935474][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.940798][ T5732] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 102.942554][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.943477][ T8729] FAULT_INJECTION: forcing a failure. [ 102.943477][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 102.943496][ T8729] CPU: 0 UID: 0 PID: 8729 Comm: syz.1.751 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.943511][ T8729] Tainted: [L]=SOFTLOCKUP [ 102.943515][ T8729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.943522][ T8729] Call Trace: [ 102.943526][ T8729] [ 102.943530][ T8729] dump_stack_lvl+0x100/0x190 [ 102.943559][ T8729] should_fail_ex.cold+0x5/0xa [ 102.943575][ T8729] should_failslab+0xc2/0x120 [ 102.943595][ T8729] kmem_cache_alloc_noprof+0x92/0x6a0 [ 102.943608][ T8729] ? __pfx_map_id_range_down+0x10/0x10 [ 102.943620][ T8729] ? rcu_is_watching+0x13/0xc0 [ 102.943635][ T8729] ? security_inode_alloc+0x3b/0x2c0 [ 102.943650][ T8729] security_inode_alloc+0x3b/0x2c0 [ 102.943662][ T8729] inode_init_always_gfp+0xc6f/0xfb0 [ 102.943679][ T8729] alloc_inode+0x8e/0x250 [ 102.943691][ T8729] sock_alloc+0x44/0x280 [ 102.943709][ T8729] ? security_socket_create+0x7f/0x250 [ 102.943721][ T8729] __sock_create+0xc2/0x860 [ 102.943734][ T8729] __sys_socket+0x14d/0x260 [ 102.943745][ T8729] ? __pfx___sys_socket+0x10/0x10 [ 102.943760][ T8729] __x64_sys_socket+0x72/0xb0 [ 102.943771][ T8729] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.943792][ T8729] do_syscall_64+0x123/0x790 [ 102.943804][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.943815][ T8729] RIP: 0033:0x7fc48679e159 [ 102.943824][ T8729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.943835][ T8729] RSP: 002b:00007fc4875bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 102.943846][ T8729] RAX: ffffffffffffffda RBX: 00007fc486a25fa0 RCX: 00007fc48679e159 [ 102.943853][ T8729] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 102.943859][ T8729] RBP: 00007fc48683506b R08: 0000000000000000 R09: 0000000000000000 [ 102.943866][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.943872][ T8729] R13: 00007fc486a26038 R14: 00007fc486a25fa0 R15: 00007ffeae49eee8 [ 102.943885][ T8729] [ 102.950131][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.952067][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.953024][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.034613][ T5580] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.051629][ T8727] __nla_validate_parse: 11 callbacks suppressed [ 103.051641][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 103.103660][ T8748] overlayfs: failed to clone upperpath [ 103.136026][ T5804] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.163906][ T5804] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.186736][ T8756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.754'. [ 103.197120][ T5580] bridge_slave_1: left allmulticast mode [ 103.197163][ T5580] bridge_slave_1: left promiscuous mode [ 103.198657][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.208886][ T5580] bridge_slave_0: left allmulticast mode [ 103.208901][ T5580] bridge_slave_0: left promiscuous mode [ 103.211305][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.364654][ T5580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.368257][ T5580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.369992][ T5580] bond0 (unregistering): Released all slaves [ 103.382768][ T5580] bond1 (unregistering): Released all slaves [ 103.391549][ T5803] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.391672][ T5803] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.401645][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 103.429328][ T8763] overlayfs: failed to clone lowerpath [ 103.464666][ T8763] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 103.473241][ T8763] overlayfs: failed to clone lowerpath [ 103.612569][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 103.615151][ T8787] net_ratelimit: 16 callbacks suppressed [ 103.615162][ T8787] ip_tables: iptables: counters copy to user failed while replacing table [ 103.737071][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.737152][ T8724] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.737217][ T8724] bridge_slave_0: entered allmulticast mode [ 103.739815][ T8724] bridge_slave_0: entered promiscuous mode [ 103.755525][ T5580] hsr_slave_0: left promiscuous mode [ 103.756120][ T5580] hsr_slave_1: left promiscuous mode [ 103.756561][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.756580][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.758963][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.758974][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.762430][ T5580] veth1_macvtap: left promiscuous mode [ 103.762472][ T5580] veth0_macvtap: left promiscuous mode [ 103.762527][ T5580] veth1_vlan: left promiscuous mode [ 103.762549][ T5580] veth0_vlan: left promiscuous mode [ 103.921896][ T5580] team0 (unregistering): Port device team_slave_1 removed [ 103.929966][ T5580] team0 (unregistering): Port device team_slave_0 removed [ 103.977623][ T5580] team0 (unregistering): Port device veth0 removed [ 104.016824][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.016873][ T8724] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.016955][ T8724] bridge_slave_1: entered allmulticast mode [ 104.017743][ T8724] bridge_slave_1: entered promiscuous mode [ 104.020098][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 104.057389][ T8724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.062820][ T8724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.076910][ T8724] team0: Port device team_slave_0 added [ 104.078301][ T8724] team0: Port device team_slave_1 added [ 104.095003][ T8724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.095015][ T8724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.095028][ T8724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.095966][ T8724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.095975][ T8724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.095988][ T8724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.127669][ T8724] hsr_slave_0: entered promiscuous mode [ 104.128150][ T8724] hsr_slave_1: entered promiscuous mode [ 104.128458][ T8724] debugfs: 'hsr0' already exists in 'hsr' [ 104.128469][ T8724] Cannot create hsr debugfs directory [ 104.299969][ T8724] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.305935][ T8724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.307235][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 104.311601][ T8724] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.317263][ T8724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.317956][ T8724] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.333136][ T8724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.333864][ T8724] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.340734][ T8724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.369289][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.369337][ T8724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.369441][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.369485][ T8724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.435122][ T8724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.442569][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.446634][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.488348][ T8724] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.508564][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.510240][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.522875][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.522994][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.601958][ T8867] netlink: 156 bytes leftover after parsing attributes in process `syz.3.769'. [ 104.681736][ T8879] ip6gretap0: entered promiscuous mode [ 104.682548][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 104.802629][ T8724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.937275][ T8724] veth0_vlan: entered promiscuous mode [ 104.941848][ T8724] veth1_vlan: entered promiscuous mode [ 104.972472][ T8724] veth0_macvtap: entered promiscuous mode [ 104.976064][ T8724] veth1_macvtap: entered promiscuous mode [ 104.981217][ T5740] Bluetooth: hci4: command tx timeout [ 104.984537][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.988356][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.994166][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.994305][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.994331][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.994348][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.074680][ T470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.074694][ T470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.105032][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.105047][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.621932][ T56] wlan1: Trigger new scan to find an IBSS to join [ 105.918868][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 105.918880][ T43] audit: type=1400 audit(1790525670.645:730): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.950827][ T8913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.776'. [ 105.955116][ T8913] netlink: 'syz.2.776': attribute type 4 has an invalid length. [ 105.955128][ T8913] netlink: 152 bytes leftover after parsing attributes in process `syz.2.776'. [ 105.959869][ T8913] .`: renamed from bond0 (while UP) [ 105.997949][ T43] audit: type=1400 audit(1790525670.725:731): avc: denied { watch watch_reads } for pid=8914 comm="syz.1.777" path="/233/file0" dev="tmpfs" ino=1347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 106.024838][ T43] audit: type=1400 audit(1790525670.755:732): avc: denied { ioctl } for pid=8916 comm="syz.2.778" path="socket:[25431]" dev="sockfs" ino=25431 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 106.039499][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 106.039522][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 106.043773][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 106.043795][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 106.053444][ T8918] syzkaller1: entered promiscuous mode [ 106.053457][ T8918] syzkaller1: entered allmulticast mode [ 106.386355][ T8934] bond0: option slaves: interface -bo does not exist! [ 106.434216][ T43] audit: type=1400 audit(1790525671.165:733): avc: denied { read } for pid=8936 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.435199][ T43] audit: type=1400 audit(1790525671.165:734): avc: denied { setopt } for pid=8936 comm="syz.5.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.576977][ T8948] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 106.763051][ T8961] overlay: Unknown parameter './file0/file2' [ 106.794114][ T8965] ip_tables: iptables: counters copy to user failed while replacing table [ 106.993223][ T5740] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 106.993276][ T5740] Bluetooth: hci3: Injecting HCI hardware error event [ 106.994616][ T5740] Bluetooth: hci3: hardware error 0x00 [ 107.062714][ T5087] Bluetooth: hci4: command tx timeout [ 107.271073][ T5820] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 107.271169][ T5876] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 107.421086][ T5820] usb 7-1: Using ep0 maxpacket: 32 [ 107.421574][ T5820] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 107.422556][ T5820] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 107.422580][ T5820] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 107.422593][ T5820] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.422606][ T5820] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 107.424126][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.424144][ T5820] usb 7-1: Product: syz [ 107.424156][ T5820] usb 7-1: Manufacturer: syz [ 107.424168][ T5820] usb 7-1: SerialNumber: syz [ 107.432467][ T8993] netlink: 'syz.3.796': attribute type 39 has an invalid length. [ 107.433728][ C2] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 107.438871][ T5820] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/input/input11 [ 107.441263][ T5876] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 107.445380][ T8993] hsr_slave_0 (unregistering): left promiscuous mode [ 107.456375][ T5876] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 107.456391][ T5876] usb 10-1: config 1 has no interface number 0 [ 107.456411][ T5876] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 107.456424][ T5876] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 107.470683][ T5876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.470699][ T5876] usb 10-1: Product: syz [ 107.470707][ T5876] usb 10-1: Manufacturer: syz [ 107.470714][ T5876] usb 10-1: SerialNumber: syz [ 107.483886][ T8982] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 107.608319][ T43] audit: type=1800 audit(1790525672.335:735): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.797" name="nullb0" dev="tmpfs" ino=1314 res=0 errno=0 [ 107.651189][ T5820] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 107.651202][ T5820] (id 0x00) [ 107.712947][ T5820] rc_core: IR keymap rc-imon-pad not found [ 107.712964][ T5820] Registered IR keymap rc-empty [ 107.713020][ T5820] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 107.713034][ T5820] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 107.738249][ T5820] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0 [ 107.746558][ T5820] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:155.0/rc/rc0/input12 [ 107.767198][ T5820] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:19> initialized [ 107.940076][ T43] audit: type=1400 audit(1790525672.665:736): avc: denied { remount } for pid=9014 comm="syz.1.802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 107.995477][ T43] audit: type=1400 audit(1790525672.725:737): avc: denied { read write } for pid=9022 comm="syz.1.803" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.995759][ T43] audit: type=1400 audit(1790525672.725:738): avc: denied { open } for pid=9022 comm="syz.1.803" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 107.996374][ T43] audit: type=1400 audit(1790525672.725:739): avc: denied { ioctl } for pid=9022 comm="syz.1.803" path="socket:[24343]" dev="sockfs" ino=24343 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 107.997580][ T9023] overlayfs: missing 'lowerdir' [ 108.006413][ T5820] usb 7-1: USB disconnect, device number 19 [ 108.044635][ T9026] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 108.263970][ T9026] support for the xor transformation has been removed. [ 108.284009][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.314292][ T9034] __nla_validate_parse: 9 callbacks suppressed [ 108.314306][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 108.453927][ T9039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9039 comm=syz.3.808 [ 108.561923][ T9041] netlink: 76 bytes leftover after parsing attributes in process `syz.2.809'. [ 108.561943][ T9041] netlink: 76 bytes leftover after parsing attributes in process `syz.2.809'. [ 108.561953][ T9041] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 108.675879][ T9044] overlayfs: failed to resolve './file1/file0': -2 [ 108.721163][ T5087] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 108.723880][ T9046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36120 sclass=netlink_route_socket pid=9046 comm=syz.2.811 [ 108.742317][ T470] wlan1: Trigger new scan to find an IBSS to join [ 108.983211][ T9055] netlink: Setting conntrack mark requires 'commit' flag. [ 108.983229][ T9055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.984752][ T9055] trusted_key: encrypted_key: insufficient parameters specified [ 109.017389][ T9062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9062 comm=syz.3.815 [ 109.080831][ T470] IPVS: starting estimator thread 0... [ 109.143316][ T5740] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 109.143399][ T5740] Bluetooth: hci4: command tx timeout [ 109.171232][ T9071] IPVS: using max 44 ests per chain, 105600 per kthread [ 109.445653][ T9101] netlink: 'syz.1.827': attribute type 2 has an invalid length. [ 109.480292][ T9107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 109.530629][ T9110] loop6: detected capacity change from 0 to 524288000 [ 109.592076][ T9110] devpts: Bad value for 'max' [ 109.600292][ T9115] devpts: Bad value for 'max' [ 109.951124][ T1722] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 110.077145][ T5876] usb 10-1: Incompatible driver and firmware versions [ 110.082029][ T5876] usb 10-1: USB disconnect, device number 2 [ 110.101073][ T1722] usb 6-1: Using ep0 maxpacket: 8 [ 110.101958][ T1722] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 110.102770][ T1722] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 110.102795][ T1722] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 110.102810][ T1722] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 110.102824][ T1722] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 110.102838][ T1722] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 110.102851][ T1722] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.102872][ T1722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.310189][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.313836][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.316774][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.317230][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.322436][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.325640][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.328869][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.329626][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.329657][ T9137] ip6erspan0: entered allmulticast mode [ 110.330135][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.332116][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.344070][ T1722] usb 6-1: usb_control_msg returned -32 [ 110.344100][ T1722] usbtmc 6-1:16.0: can't read capabilities [ 110.395100][ T9144] netlink: 778 bytes leftover after parsing attributes in process `syz.3.837'. [ 110.523492][ T9154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=9154 comm=syz.3.841 [ 110.657440][ T9157] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.761263][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.819298][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 110.922615][ T5442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.990923][ T43] kauditd_printk_skb: 6988 callbacks suppressed [ 110.990935][ T43] audit: type=1400 audit(1790525675.715:7728): avc: denied { map } for pid=9171 comm="syz.3.846" path="socket:[26175]" dev="sockfs" ino=26175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 111.221080][ T5087] Bluetooth: hci4: command tx timeout [ 111.711154][ T56] wlan1: Trigger new scan to find an IBSS to join [ 112.468994][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 112.612576][ T56] wlan1: Creating new IBSS network, BSSID 42:26:a3:cb:b2:fe [ 113.148422][ T43] audit: type=1400 audit(1790525677.875:7729): avc: denied { read } for pid=9212 comm="syz.2.857" name="/" dev="configfs" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 113.149281][ T43] audit: type=1400 audit(1790525677.875:7730): avc: denied { read open } for pid=9212 comm="syz.2.857" path="/" dev="configfs" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 113.165895][ T9218] raw_sendmsg: syz.3.856 forgot to set AF_INET. Fix it! [ 113.786467][ T9259] syz.5.865 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.852383][ T8904] usb 6-1: USB disconnect, device number 7 [ 113.942575][ T9263] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.059180][ T9224] ceph: No mds server is up or the cluster is laggy [ 114.095561][ T9268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.870'. [ 114.097410][ T9268] netlink: 60 bytes leftover after parsing attributes in process `syz.1.870'. [ 114.104363][ C1] bridge0: port 3(dummy0) entered learning state [ 114.227127][ T9270] jffs2: notice: (9270) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 114.417597][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 114.422049][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 114.692169][ T9320] sg_write: data in/out 16973882/213 bytes for SCSI command 0x2b-- guessing data in; [ 114.692169][ T9320] program syz.2.889 not setting count and/or reply_len properly [ 114.761855][ T43] audit: type=1400 audit(1790525679.495:7731): avc: denied { write } for pid=9326 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.815913][ T43] audit: type=1400 audit(1790525679.545:7732): avc: denied { mounton } for pid=9331 comm="syz.2.892" path="/198/file1/file0" dev="autofs" ino=27153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 114.869190][ T43] audit: type=1400 audit(1790525679.595:7733): avc: denied { write } for pid=9342 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.890628][ T43] audit: type=1400 audit(1790525679.615:7734): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 114.906734][ T43] audit: type=1400 audit(1790525679.635:7735): avc: denied { unmount } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 114.926153][ T43] audit: type=1400 audit(1790525679.655:7736): avc: denied { connect } for pid=9345 comm="syz.3.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.997903][ T9346] tipc: Started in network mode [ 114.997930][ T9346] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 114.997998][ T9346] tipc: Enabling of bearer rejected, failed to enable media [ 115.028367][ T43] audit: type=1400 audit(1790525679.755:7737): avc: denied { write } for pid=9352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.069417][ T58] hsr0: entered promiscuous mode [ 115.075136][ T9351] netlink: 25 bytes leftover after parsing attributes in process `syz.5.897'. [ 115.077521][ T9351] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.897'. [ 115.077602][ T9351] 0XD: renamed from eql [ 115.077832][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 115.098514][ T9351] 0XD: remember to turn off Van-Jacobson compression on your slave devices [ 115.098536][ T9351] 0XD: left promiscuous mode [ 115.098606][ T9351] 0XD: entered allmulticast mode [ 115.372070][ T9397] SELinux: security_context_str_to_sid (measure) failed with errno=-22 [ 115.391086][ T58] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 115.542071][ T58] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 115.544914][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.544928][ T58] usb 6-1: Product: syz [ 115.544937][ T58] usb 6-1: Manufacturer: syz [ 115.544945][ T58] usb 6-1: SerialNumber: syz [ 115.586597][ T8904] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.993194][ T9368] [U] zͻi[27| [ 115.993230][ T9368] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 115.993239][ T9368] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 115.993265][ T9368] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 115.993288][ T9368] [U] 8)X)YvxRĻbmbN@ox;JD, [ 115.993296][ T9368] [U] *Cn3v7KEXgt_3 [ 115.993303][ T9368] [U] D/QazҬEHgE1$_ks=R@ [ 115.993326][ T9368] [U] ϼcEv @ [ 115.993329][ T9368] [U] a% [ 115.993343][ T9368] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 115.993355][ T9368] [U] f1p3 [ 115.993361][ T9368] [U] N0[L;a_l&kMC [ 115.993377][ T9368] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 115.994079][ T9367] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 48 0f b9 3a e9 e1 fc ff ff e8 03 08 30 fc e9 7c fe ff ff e8 59 [ 117.974505][ T58] RSP: 0018:ffffc90000abf6c0 EFLAGS: 00010246 [ 117.976415][ T58] RAX: 0000000000000000 RBX: ffff888100760040 RCX: 1ffff110200ec022 [ 117.978828][ T58] RDX: ffff8880227148a0 RSI: 0000000000000029 RDI: ffffffff9150ceb0 [ 117.981460][ T58] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 117.983894][ T58] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 117.986347][ T58] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803e756300 [ 117.988749][ T58] FS: 0000000000000000(0000) GS:ffff8880d5c51000(0000) knlGS:0000000000000000 [ 117.991875][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.993997][ T58] CR2: 00007f5cef437ff8 CR3: 0000000024609000 CR4: 0000000000352ef0 [ 117.996447][ T58] Call Trace: [ 117.997479][ T58] [ 117.998424][ T58] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 118.000728][ T58] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 118.002680][ T58] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.004255][ T58] ? __pfx_autoremove_wake_function+0x10/0x10 [ 118.006116][ T58] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 118.008033][ T58] drm_atomic_helper_commit_tail+0xff/0x130 [ 118.009882][ T58] commit_tail+0x338/0x430 [ 118.011330][ T58] drm_atomic_helper_commit+0x303/0x380 [ 118.013010][ T58] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 118.014946][ T58] drm_atomic_commit+0x230/0x300 [ 118.016554][ T58] ? __pfx_drm_atomic_commit+0x10/0x10 [ 118.018188][ T58] ? __pfx___drm_printfn_info+0x10/0x10 [ 118.019853][ T58] ? modeset_lock+0x114/0x6d0 [ 118.021344][ T58] drm_atomic_helper_dirtyfb+0x603/0x790 [ 118.023045][ T58] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 118.024917][ T58] ? do_raw_spin_lock+0x128/0x260 [ 118.026515][ T58] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 118.028382][ T58] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 118.030260][ T58] drm_fb_helper_damage_work+0x4c8/0xab0 [ 118.032026][ T58] ? process_one_work+0xa2c/0x1b10 [ 118.033618][ T58] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 118.035509][ T58] ? process_one_work+0x906/0x1b10 [ 118.037086][ T58] ? process_one_work+0x906/0x1b10 [ 118.038715][ T58] process_one_work+0xac7/0x1b10 [ 118.040246][ T58] ? __pfx_process_one_work+0x10/0x10 [ 118.042083][ T58] ? lock_acquire+0x1d1/0x380 [ 118.043557][ T58] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 118.045544][ T58] worker_thread+0x5ef/0xe50 [ 118.047000][ T58] ? kthread+0x13a/0x450 [ 118.048287][ T58] ? __pfx_worker_thread+0x10/0x10 [ 118.049877][ T58] kthread+0x373/0x450 [ 118.051232][ T58] ? __pfx_kthread+0x10/0x10 [ 118.052694][ T58] ret_from_fork+0x730/0xd60 [ 118.054192][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 118.055851][ T58] ? __switch_to+0x800/0x10f0 [ 118.057365][ T58] ? __pfx_kthread+0x10/0x10 [ 118.058766][ T58] ret_from_fork_asm+0x1a/0x30 [ 118.060227][ T58] [ 118.061283][ T58] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.063591][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 118.067008][ T58] Tainted: [L]=SOFTLOCKUP [ 118.068431][ T58] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 118.071685][ T58] Workqueue: events drm_fb_helper_damage_work [ 118.073640][ T58] Call Trace: [ 118.074716][ T58] [ 118.075703][ T58] dump_stack_lvl+0x100/0x190 [ 118.077206][ T58] vpanic+0x553/0x970 [ 118.078452][ T58] ? __pfx_vpanic+0x10/0x10 [ 118.079871][ T58] panic+0xd1/0xe0 [ 118.081045][ T58] ? __pfx_panic+0x10/0x10 [ 118.082509][ T58] check_panic_on_warn.cold+0x19/0x34 [ 118.084152][ T58] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 118.086388][ T58] __warn.cold+0x191/0x318 [ 118.087776][ T58] __report_bug+0x30f/0x440 [ 118.089195][ T58] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 118.091429][ T58] ? __pfx___report_bug+0x10/0x10 [ 118.093034][ T58] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.094675][ T58] report_bug_entry+0xe2/0x290 [ 118.096189][ T58] ? drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 118.098346][ T58] handle_bug+0x1cd/0x2a0 [ 118.099683][ T58] exc_invalid_op+0x17/0x50 [ 118.101117][ T58] asm_exc_invalid_op+0x1a/0x20 [ 118.102708][ T58] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 118.105169][ T58] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d 18 a4 74 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 03 08 30 fc e9 7c fe ff ff e8 59 [ 118.111750][ T58] RSP: 0018:ffffc90000abf6c0 EFLAGS: 00010246 [ 118.113982][ T58] RAX: 0000000000000000 RBX: ffff888100760040 RCX: 1ffff110200ec022 [ 118.116623][ T58] RDX: ffff8880227148a0 RSI: 0000000000000029 RDI: ffffffff9150ceb0 [ 118.119122][ T58] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 118.121646][ T58] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 118.124172][ T58] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88803e756300 [ 118.126765][ T58] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 118.129174][ T58] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 118.131061][ T58] ? lockdep_hardirqs_on+0x7d/0x110 [ 118.132728][ T58] ? __pfx_autoremove_wake_function+0x10/0x10 [ 118.134696][ T58] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 118.136749][ T58] drm_atomic_helper_commit_tail+0xff/0x130 [ 118.138638][ T58] commit_tail+0x338/0x430 [ 118.140073][ T58] drm_atomic_helper_commit+0x303/0x380 [ 118.141820][ T58] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 118.143687][ T58] drm_atomic_commit+0x230/0x300 [ 118.145217][ T58] ? __pfx_drm_atomic_commit+0x10/0x10 [ 118.146987][ T58] ? __pfx___drm_printfn_info+0x10/0x10 [ 118.148793][ T58] ? modeset_lock+0x114/0x6d0 [ 118.150337][ T58] drm_atomic_helper_dirtyfb+0x603/0x790 [ 118.152121][ T58] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 118.154115][ T58] ? do_raw_spin_lock+0x128/0x260 [ 118.155758][ T58] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10 [ 118.157705][ T58] drm_fbdev_shmem_helper_fb_dirty+0x1cc/0x350 [ 118.159700][ T58] drm_fb_helper_damage_work+0x4c8/0xab0 [ 118.161482][ T58] ? process_one_work+0xa2c/0x1b10 [ 118.163120][ T58] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 118.165063][ T58] ? process_one_work+0x906/0x1b10 [ 118.166745][ T58] ? process_one_work+0x906/0x1b10 [ 118.168360][ T58] process_one_work+0xac7/0x1b10 [ 118.169910][ T58] ? __pfx_process_one_work+0x10/0x10 [ 118.171568][ T58] ? lock_acquire+0x1d1/0x380 [ 118.173018][ T58] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 118.174926][ T58] worker_thread+0x5ef/0xe50 [ 118.176452][ T58] ? kthread+0x13a/0x450 [ 118.177815][ T58] ? __pfx_worker_thread+0x10/0x10 [ 118.179459][ T58] kthread+0x373/0x450 [ 118.180797][ T58] ? __pfx_kthread+0x10/0x10 [ 118.182292][ T58] ret_from_fork+0x730/0xd60 [ 118.183776][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 118.185404][ T58] ? __switch_to+0x800/0x10f0 [ 118.186921][ T58] ? __pfx_kthread+0x10/0x10 [ 118.188404][ T58] ret_from_fork_asm+0x1a/0x30 [ 118.189988][ T58] [ 119.262829][ T58] Shutting down cpus with NMI [ 119.264936][ T58] Kernel Offset: disabled [ 119.266362][ T58] Rebooting in 86400 seconds..