last executing test programs: 2m11.321906512s ago: executing program 2 (id=3): syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000080)={0x1170, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_NODE={0x1140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xde, 0x3, "bf85ced711ab121714b8f3102c99c7898335a07a02c838720b9ae39566ae8e5f0a40059255e996d8302a5134dc879013eebfd9d09715c15e66fa6f052227090a04fdc8f68e0ae606f708116c2af57160183a6fbdbc0329c41d7c39d2444ea752da05ac8a075b6f93f7d56c6a027869d0496da7cdd333a5e66e61aee4b2f388d239b9952f3db0e3d446a6e608c5a61a1b3143992ec9fbfad72aa2c628dbc4a918da719a05cd615f15556f1370dd5871b6fcea6fb28cb2000b8e2d7c8920c700c3a4658536b769cc59688bd752bca07b987f4a6553243e6dc9dc39"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "acfc95b0f9d5ac5b2b7f9de70102d6359b6090b6626d2369"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}]}, 0x1170}, 0x1, 0x0, 0x0, 0x4044}, 0x20004080) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000013c0)={{0xffffffffffffffff, &(0x7f0000001280)='\\\x1e&.-!+--\\*.\x00', 0x101000, &(0x7f00000012c0)={@_ha_fsid={[0x5, 0x9]}, {0x400, 0x2, 0x1, 0x900000000000000}}, 0x80, &(0x7f0000001300), &(0x7f0000001340)=0x2}, {[0x1, 0x6, 0x1ff, 0x3]}, 0x1ff, 0xf, &(0x7f0000001380)=""/15}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000013c0)={{0xffffffffffffffff, &(0x7f0000001280)='\\\x1e&.-!+--\\*.\x00', 0x101000, &(0x7f00000012c0)={@_ha_fsid={[0x5, 0x9]}, {0x400, 0x2, 0x1, 0x900000000000000}}, 0x80, &(0x7f0000001300), &(0x7f0000001340)=0x2}, {[0x1, 0x6, 0x1ff, 0x3]}, 0x1ff, 0xf, &(0x7f0000001380)=""/15}) statx(r1, &(0x7f0000001440)='./file0\x00', 0x2000, 0x4, &(0x7f0000001480)) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x63}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x8080) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000001680)={0x6, 0x40}, 0x1) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfc, 0x800000}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001780)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x28, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x10}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001a80)={&(0x7f0000001880), 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x178, 0x1403, 0x200, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000001a80)={&(0x7f0000001880), 0xc, &(0x7f0000001a40)={&(0x7f00000018c0)={0x178, 0x1403, 0x200, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000001b00)={[{0x2b, 'cpu'}, {0x2b, 'net'}, {0x2d, 'blkio'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x23) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000001b40)=0x1ff, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000001b40)=0x1ff, 0x4) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000001b80)={r4, 0xe, 0x1, r4}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c40), r1) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x60, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcbe7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044080}, 0x40) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000001dc0)=0x6f25f5a47e9faa9b) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001f00)={'syztnl2\x00', &(0x7f0000001e80)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x1, 0x400, 0x43, @empty, @mcast2, 0x700, 0x7800, 0x6, 0x3}}) sendto$packet(r4, &(0x7f0000001e00)="5708dbf84a5705fb018ec0b91848d73d874ae25d49c871572111fd7989fa0bc052ae1b1ce6608e28b9752331a9d9c69375115c70b63c0a014283d061a6852122d0cc6c79e49acbdddd3f132cc4d0bb735b0187f8943395686340a101e519f5fc1909", 0x62, 0x0, &(0x7f0000001f40)={0x11, 0x16, r7, 0x1, 0xdd, 0x6, @multicast}, 0x14) (async) sendto$packet(r4, &(0x7f0000001e00)="5708dbf84a5705fb018ec0b91848d73d874ae25d49c871572111fd7989fa0bc052ae1b1ce6608e28b9752331a9d9c69375115c70b63c0a014283d061a6852122d0cc6c79e49acbdddd3f132cc4d0bb735b0187f8943395686340a101e519f5fc1909", 0x62, 0x0, &(0x7f0000001f40)={0x11, 0x16, r7, 0x1, 0xdd, 0x6, @multicast}, 0x14) dup3(r1, r5, 0x80000) (async) r8 = dup3(r1, r5, 0x80000) sendmsg$nl_route(r1, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)=@bridge_dellink={0x40, 0x11, 0x8, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x208, 0x50020}, [@IFLA_PROP_LIST={0x4}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'nr0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x11) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x34, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) (async) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x34, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x9e0bb26b4f03dcbd}, 0xc, &(0x7f0000002280)={&(0x7f00000021c0)=@newneigh={0x94, 0x1c, 0x300, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x0, 0x0, r7, 0x40, 0x8, 0x6}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_SRC_VNI={0x8}, @NDA_VLAN={0x6, 0x5, 0x4}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8001}, @NDA_CACHEINFO={0x14, 0x3, {0x5, 0x9, 0x33e, 0x80}}, @NDA_IFINDEX={0x8, 0x8, r7}, @NDA_CACHEINFO={0x14, 0x3, {0x4, 0x2, 0xfffffffe, 0x1ff}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x800) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002300)=0xb9) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000002300)=0xb9) ioctl$XFS_IOC_FSGEOMETRY_V1(r8, 0x80705864, &(0x7f0000002340)) 2m11.202569451s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f00000002c0)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000020000100ffffffff000000000a001440000000070000000008000a00fdffffff14000200fe8000000000000d4600000000000017"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x48e, 0x0, 0x5}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1, &(0x7f0000000180)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}, {@redirect_dir_nofollow}]}) 2m11.013051727s ago: executing program 2 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r3, 0x25, 0x0, @void}, 0x25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd24, 0x25dfdbfd, {0x2, 0x20, 0x14, 0x0, 0xfc, 0x2, 0x0, 0x7, 0x600}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0xea5bc50b6199d7fe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@dellink={0x1a0, 0x11, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x612a0, 0x2140}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}, @IFLA_PHYS_PORT_ID={0xd, 0x22, "d32f4806f2d1794e45"}, @IFLA_AF_SPEC={0xb8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x38, 0x2, 0x0, 0x1, {0x34, 0x1, 0x0, 0x1, [{0x8, 0x4, 0x0, 0x0, 0x3}, {0x8, 0x1b, 0x0, 0x0, 0x8}, {0x8, 0x0, 0x0, 0x0, 0x7}, {0x8, 0xe, 0x0, 0x0, 0x5}, {0x8, 0x18, 0x0, 0x0, 0x7}, {0x8, 0x1b, 0x0, 0x0, 0xf}]}}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xc6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}]}]}, @IFLA_VF_PORTS={0x9c, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3283f40d97effef6f7fa8faed68c7893"}]}, {0x4}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x97e9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "39510d54f8d44eeff3aed9b48af87772"}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "25d6c7f643d6395f3e08e22162cac845"}, @IFLA_PORT_PROFILE={0x8, 0x2, '+\x9b{\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a7f02b4f5481f15b7196140e9e459bbe"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf0}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x39d9}]}, 0x1a0}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2m10.902912584s ago: executing program 2 (id=15): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) 2m10.212268902s ago: executing program 2 (id=17): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000540)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0xc4c03d16, 0x0) sendto$inet6(r4, &(0x7f0000000540)="a6e2976b5c4383036d32dadd2e144d8645cae01b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f26398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f959918f99bf9c2cb9357cf67f178dc2b3d4936e7f7f0a79f74ba464d83ab4bd9c27743daa5cff471bbc2751b5eae8855acb68d518b137cd0b21e21d8c8e16c81cca9c042da488003fcb6fca3d65238ddd944f4fd73b293001c56779f61597995d47f3c0c792a7860db829a0f182c7c29ab03d4fba5f766f439b616bbc96840a1d2696e19b6053159f3c518f2b3f", 0xffffffffffffffca, 0x2000c001, 0x0, 0x44) sendto$inet6(r4, &(0x7f00000002c0)="b3ea8fbee912e30484893ef63115c2c7041268a5d65a467b0ec6c55d71a9b919e5bbc5ce838f880d01ce12abad9ead3b8680", 0x32, 0x200088c0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001fff29bd7000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc030024255c4bd500010067656e35006500001400028005000c000000000005000d000200000008000a00", @ANYRES32=r3, @ANYBLOB="0500210007000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m0.260776573s ago: executing program 1 (id=128): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, 0x0, 0x0, 0x1c}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, 0x0, 0x0, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@uuid_on}]}) close(r2) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) close(r0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, 0x0, 0x0, 0x1c}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, 0x0, 0x0, 0x2}) (async) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, 0x0) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@uuid_on}]}) (async) close(r2) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) (async) close(r0) (async) 2m0.260368035s ago: executing program 1 (id=129): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x7, 0x4, 0x1}) syz_emit_ethernet(0x32, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @random="e731d6c209fb", @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x4, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @remote, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x21}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0xfa7, 0x25d, 0xa43, 0xf9c]}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002780)={&(0x7f0000000140)=@caif=@util={0x25, "ea687c211dc1c98b2e42e36f5521a930"}, 0x80, &(0x7f0000001540)=[{&(0x7f00000001c0)="be8955aa5396716f4a53403edd0fda46769efb54313c5eabd3b46b29e96b1d2097ba131a67f014b9a46c4b96f4433578532d422044eef89940e12cf0fa8f85210ef7f354194e93f11e861ad2d7101e0f7986a679c3520f42c54435c364efd85624a76129c22eaf52241134ac3ae5a2a6b211aafa41ae94b9b1855f0f8a8dbaa5e391f3e29208511805c73b80dd9c2a62591b25cfcd2ea38680ad7f44ca61287d0b4f23763b0fff519ed2287dd3e9e9e424c8e6a42d3926df2a77d495e0fd", 0xbe}, {&(0x7f0000000280)="d01364f8a271b43ebd0546dd22c1323acd59a03c421b0419ff5ab3e7668f2e5c4cc9cd1eed7314acaf0fa87b798fa8d3aac07bf49a3bdaf80c500a0091eccd5d02730c6f4584f4f087d1f1c3442b79100b1afa0e860b92325414a845313fb3b832628534c704c7604846e86deea4f84ad8156a0f0722fba0a620509b64867b88db6676de981d7caa3943fdcb566fd2e08e039b4cec84833e5f10e1b659edfab233e1e1741892af361d2afff5e281c40192a4c8fd1ead92b53b3a75bd8e10e75b89c74301207c1d6634674a93fc811fbe0a5d60e9cd55bda2fdcf5ec2146ba9a5798244e7", 0xe4}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="2b59d305cd4542aa6474639ff1f9d60bd68d9ed8bc90abbe5426d04e8ac688aaf52bafa63cf63848043b80d5586d3ac16ed64ed9a7d3d29bcd779a", 0x3b}, {&(0x7f00000013c0)="435332e54e13190ffbe84190f5fabbd6343af573aa4c6157b18fa9fee95d6fb2ae428c36c10ab7f8603031c7c21e437379d20b3dd5afda332e3d44fe9b815cb17c69f00df1087e83daad9d4961eb7660d1afe07215664f1485bc590677733714470d26442604b042", 0x68}, {&(0x7f0000001440)="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", 0xfd}], 0x6, &(0x7f00000015c0)=[{0xc8, 0x110, 0x9, "e7b53a25fe0753f9f004eea3954b10869305bce3479f24a805e8e40fdfdb0c9cada2072e948969e14286a1185c504d77030c3916921ef9c7551001db0e1953f75a7662dff3f70010b98f4121659a7172c51d5573112dc7c443ff2c84c1129b7ce01b84f2c8144d9e3d572c08587f7abdb0cd34be5109da71d6b2284087e8ede121b94de663d192beb8b1617ba3f762e41c93826a1219e22b35c6bb325ea5b836ced738860c7c771931104b09f3dca0d546bcac8d20"}, {0x1010, 0x104, 0xba, "2bfe29d8055cfed56d31444aa7aecfe1d987302f10c2c2d0be63f0f1ad0bdc6bf5f95366c67503f235f51458bf10e0cc449b972303d8f61dc3421d30c514792be484f36a1b2a61848d22ce31c085276ce0156a57c5ca723c637dc0aed221c061c734fa28453ba505b6644e00edcd141b317db5cbdeeb5558a35850f9ce65b4c61791f67098956dfe69580e01524058a89c623fdcc4ee3a70b394d0d6cc7aede34d3740e11d71ae199991e4babb7cc3e9048e92dfdcbe791ff7cf7ad2bcde88472bf5dc5203a0ee28376364ef3eda4089756320220558a708e12b0ff2605950f85d0fa6871dccd76a01bd5d45c985dc7761085600d54b63483de7e2f1daa586c2e4d23af4e99798b6cffdc746eb72c70e503669721de457557afd8785af15448336f96e52aeda55b8927f94b15d310be9a29d3ca5273bc3eec0fd78e12837884aafffbca5ef99288a776af997a54cafcc9668627f1b65d20a1de19ece5a656876540beaad453d1b9b6be6547eb19743e7185f82d583fb0857c5dd3f10cda002b4c913ef98c73fd8623cddaabb2698f2862bd9ad3874ad6fe18a0fe3d31e08280de2c2604630bdde3e5e562a1be7530df3a0317edf05c67696fea970c0c7572a66f032231c49be0100c1102cca1f33e195814287fa4ccaf5ff2912727d433634b6eb54571822161136490290aa63d21f6d4dd121d34ee110d696867e70e14565f8fc54d16a4d7489ba74453f616c975554f7a32344cf5b6d4bdf0f85b034cd94805c36993a04dc9c08b7f6a17fe89332d806a10b8835da101c73c5dd3a6a9300e22129a9b91c416dd439caf15481fe7d44f73d1f5117592172f5dce83fb0f38edacbbf4167db1a3a403c612c467c2a4741fd843afa70080dd9fe5bd7018a8d0338e16cc5484b86ed3d4dda35ff21ad6c46506037f270bd5c9ca4590e70d09fc3d60b1f44c962d531fc035941a458467409234d192510a2f942bb1f05fc3da8b4d5289b59c41babcb2dfb4caa5e8ddc725be3a6fe01079e16a4581209fa30d4faf92678b2208fb9c95f573814c5be9bded1182b311b065d86c4cb19d95d2451b66ca58db23e45fcfba9677b413aeca42f6a868f34ae29c793818aef17fc40f5df814ad3f626e5bd83a5af43ffc48a75560ae47c589f93abe47e34c6e901d9388b90e8ac2828540c4511dad10aa7bf470b62eb77297f058089aabb1bbccbf908c06216323209e9b010f070bc23d4b17702df1134315f4b326fb53ec3e7db5bc1ad7d3b6cd7e9d5c6c09f59920d34339576a6d61e12ed840e74ae3bc5bc5e37a9f81c450c06268c9948d3079ef1b4bc806b5a3f6d9e5f2f35e04edea1289c0ac1bdc9140dfa5e622c3e65290f9eb694808fcd35aa70dcbf2302910a3a5c77fe8f913c6fd23fc640e001528202ce2f92235b25d2d4b026cdff9a546e3b0b33cde6a9c094787162d8e59be51bf535c1b13245579e236db804bc93f952d83b0892170a209da9ac7e6c2bc75591b6b9372f228a60c3d2ce42f1dabdadb821c142fabf2b425f3c947bb5a4e22e80c5704cd4f8a5d9620980760a64e2db975942ebed253f07b7bce277f38e3afef0fa7d28624e5db7053a76016457fbeffff56d58a246f85e15ab6f363ce83b26acdf43d06f8e9ab41e47f40cc4e5e2346437cd77c7347798cf80d82f2ff1e2ae782c193e5cb5edef59655e1d80ad0b3db0f0dda2a74b5b361981d47a796a751cb00be7a5c65103ba4d4f086b6770063cc00011284397b97139faf3bb63ad61506b403a7d256ad5e19da6c5b0839d7da6ac90739fce56fa6644169e13fcfefc9eaeb0df647a42efcc0dad9e8204d228570420f2726965086df2f7e88963d0e98e46fd36c9e50572eec69babb41c83cf1f689ab1ea0c2a1bb0d876f25efcba3a15e5cce77fded891436d90579bd83b69ad475a22959e8b654a671548c573060e4a57d9932f901c90c697eb6a0b3f870fc4ed08f7be1d42d0a78bfb605cbfe7fcaa32ffb9f7cdf851ddda6e4a02e2216670ed95e11c08fb1f82614770481809f7bd066ede8dbfd297620ff900ddafb99c9dc934f713461d1704228b6e47ce919e7bfad4c58f19a92a6c6a4be020ade91fb4e098e7436674cf3e262539dd31270f5fcfcd3445bdba3d8f904ce878cad85b9c16289f71271d861beea3cd5149cb7184449e442f1f3ab039d4e375cd48dc4dda3fd64ce925370b04da080c01af43375167a3d686f2f9333d1863d4a8ad6661f4c9a37434597641e1c00562eb951ed6522236ca430d6750ee85899cc05d970ea950f100b466879925bcdff23081742084a27d1cd3c8e3e2036ed4cd4d810700602293e125469b3c2d704469d73606dda17aa74027e1a7a393795a3e52377c95b5ccf442b3b6f93bb0196fea00a7c44fe7355ee2b614aed5818ce2bd7aadfbe58f16485acbb2ffda4e1ff171f46ce9b78c98475c5a62a4d51c3f998cd39fc9809e70672c67d612083f17da811c08e90fcb93236856d20028ee861b31fdc3145c73969c45fc7a35520d10687b176aac86d3c93066fc26150de0814cc14dff540922742240ec7a7a71cabba95eef37bef8fee6277b123b28f25953e2747371b57ff85179cb191eac6b6d380c1e38550eb7cd3503219a9f2f58de8885b5e58912c483e296d5999a07ce9504239c98be5a35bc5930557af65653a7d35b62f702a9cc25a595ef8639d051d4fb575d311d6b95465e595cc72ab88903c91bf8865a0626453c2b914c51fd587c096cb83a0c71917a81b373208b483da941710bc33c1071974158f3804179f93c96d4a73181bb463c68a977eae843c5723a8afdb07b7caea59490067a9d324b6018a0f54bbb9b74b39d2a5efa5f27efe2ae61dc633e6e59fc61743f7152f1838a35f6634a07bad163e2752904cf1198610610462ad0064a5008c143ad193d192f6cf0948fde9dd003f639b25a95a5e6dc159bc90bd85772d897cd6ae1860a67197e8cc0a59b81144ec586be89d35c3cfcb92084e911b1abcdf5d47548b8264a468155d7ffb1fa97092127c5f4d34b41a2787af0e4750c347592a5197bb2025a2dafe05d113b3afb33c87b1be27f6c0d6938cfff0a977e5f5fe9d28db53d6b9a49092b078ea43158497b066f9fb4a2ebdd05a62c16d11b1ae16b8268d9a7246df98834a18d375d9514145e2cbb64247c681164212938811c69cf4acebd85257036b6a36134b7591d284cd4b7e72140c5c4ba57f22cc8505040a7dfdd15f39bd80952986283288d558f5a432b532027720f6cf3711146ec4ae7ab3c40dc03a960b7537804b3138893e398651ba551ee5a58c8f9c333595f3c416a23a1886c9de4fdb697b8d1f4e72305fb00243ce2aff8ed34af8a84baf8f5abeb0b8339be25694c653438ef95978574fe5bd09b5dc506cc9342a3d654ba1d0c2c6113406f4515fc4bd76928a36d0b1a9c0eb855a3a45bae102454cec7ba324dac94953a8eebd94576570855194f4b94630a6c2ce5964a22cfbf1190a069b43bdf519f0aa78237ef00a13feb7007d77411c1fd5f30fbcb4055eb2ca43603823aa904e4668cb5f977c06e953e94cec77ac22c11f8760e283952af2abc3bde9e5954de2008e47abccf317391fe9d59cbd2f41b00695d3044197a5e5b9e94992497e84ec36ccd1a6409e41424f2cd8c28b2902327291fc91c9a425128802fc22d27739edfb8d79c4f73f8be457ecfcd12d96bc81d00b05c80935f92fbf6404ee4847a3b72762e65392de398fa913f8b5bd720140f524b5687705dab5e09f5e0e88d354109ead977f572bd28d2827324be1346debca9e555212b9814e242801546a2e807ef3e5f0bbdd93bd1caf050db09f8d36b1d6996cae79265fb401906c41c4069d85225522fdccb78a6bec28b3772d562a5457355e925b06af186b4f7a57c6a1a2b3caf618a297b21b2fd67de32374bb6c5e764d2991f3147c0792dbdf42eb04d4fe24f6410583264593dcfee94271960c47dd5aacf57c1755d896319b83b37555cf5a88ecb2acd4e1ceb93fb2aae39f5150a27904a83756d053d5c73e9f5f8fd5fe0ad4e8f00d23ea386dfd94cea7afc2a8601f99d610acaebea0dcf200ebab948de119c8866d32bc116238496de3ec8a58e929ea075a52055a9407e8973071461f013fcab0edbe8625e729189c381f351e75ad833cfbe6c815c2be2af652837e7672947ca53d8c351e6d72aa41b42a30c44d2ed57f9f189c55584e84587f40357a5dc8f00174cc79eead5b18b381b9c3974b0ea59fc700e1b7d127da9439f3776e5b5b96be57087d41a292203c01878d280e053bd383aa07581c421117fe4e04bff764facde95885015937c088991bbba7cc7e5ae3328f175eadd38a2d0076bffcf2457e2bf5863b548fa6af12c4df852bb25a35a0c7fb87ac122967e64573eda7b96dd89c243e40344d22a3a64b7240e5856bc77c952816960c1bd78a63f581d336b7bb56d927d5ce987669af302d5b9b23c41e0a2e0328760abbda82ec68d8b125cad03a959ba454776cda73b042a3c8a10dd1846502c11e38e34bfb03620d20abff728a7c87cb1002bf9f589d0f155e81885c85db26bbf4727250e29967d158272382785dc8983579410441da70913a9f032167074f825a7e0b69a196e5da5234d27e0ccb998e19ef1373bbd8a7ef31fca0adb977e8569169a3f69a6a8206810e0eb1196730b6a65d1a02b095350fdb49640373f4490c86a1c579949f26a0edfcff7c27aabceb0387615ab7832adb173240d7c922949e969409fe65c467834011cafcdd62d32b6e2a054ceca1b1d253e4e2ffcba09035e3101c758ebb107075ebc6714a92dabbf384e56e5920604d6f2de3bd377e2ef07bf0340a1d1485ecb6140076badf0fd1d1a5cd56be223db97b3a3a63078175ff8a1ba60c29f38630ae9d9a0ddeb85f4b3f0bcdb1f39ac61a6d4035d593371b466becf4c08af4319d06684a1eb9b897481e2cbbd044df13c0ca72113adcca63233c4d51d834b3109fa26a69c41f259d757983869791b0cbf4400fc81f79e383af40d80a19c64f471e61c67955eb35acf6b41413e5aab49b4643bfe38e402203960ee4e16271f0daaf5d94396588406e37a9e1ba890b5e62cdfbeca28f33289c74bc3b61f594aafa992662d90f3ed19fd64138b435fffd418f91555d9e80776a3b37a03b1d3b2aa661d9b8efa0e91435a18f1ae0a50eaa76c83ce446b9a3d9ba3959d71f126edfd06d3fa49c0fa2bda9738012af46ceeca9b1af0059b14eb666bbe40b0da3ac321fe572d912c68735d1ba3caccf5c57ac447bc61a550692f6dee5574ae35815f92c994124fb8caebb1cd9dee246a3f0a85fccb0ca76543cccd10d52ca074ebcadb7d4e685525bc0787eb79aa917c5987756e930a03bee2921e6abae5cdf81ab03bdfc904f72528c01be93a2006752a6d554959fea22ff2111e191793675067f0295e37d67325bdc18ca491f5fe9234cf282054e50c5a07cc7c2b8a5a54b6c1fe128c502ce5aaf5adcb6a653dfaf2dce3c9a3c95d71082772728314fe52f4ea071f3d29d90066705c12e008851a2fbb2603a81bb3dcc53a53210cc4354848544355b54b53c507e6450b4cdc0bb21d69599aae7af808c6522475c40178a11050b367ff9d36a0d371411d1c4d5e947fa555e1463ca55d8de77277bb4ca59225e17781cba678c8baf997da2c27a4cb94c7886368bb724d222faddbb88ca12ec63b8869505e0c14131334caeb2a31020b570fa67230f10e859dd4667f8d340a541c92eb7f576caae1a96887"}, {0xc8, 0x111, 0x2, "cc615058997482a70a6c0e256d8625afde9f8eca7c86a0fce2516b9d592d350659e921f264f3bf69661382dd65d82247fa814e4c60a4d4c4c3c4ced1cebe568c4daddd492de8c078e6de9757d055afc030f2cfbb8141dec4553daca033bc84782812e569919673cf569b424fc8d1f8825e4a344a40369caae0ddd9fd3a703474167bb93a6f0c570f932b0c6719022d14a788fcb36c22d9d78dbc001025cc6114f21088dae7e4d197510f683250bbfee2caa06c"}, {0x18, 0x3a, 0x10, "9aebe463f7"}], 0x11b8}, 0x1840) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000027c0), 0x191001, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000002a00)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002880)={0x124, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x81) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000002a40), &(0x7f0000002a80)=0x40) mkdir(&(0x7f0000002ac0)='./file0\x00', 0x26) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000002b00)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000002b40)={0x3, r4, 0x4f3, 0x2, 0x8001, 0x6, 0x7, 0x4}) syz_emit_ethernet(0x6a, &(0x7f0000002b80)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x1}}, {@generic={0x8863, "bcd5cc6f11e7bf2d4d8d81768bd2c98c4df22a616679973bc29644fecaff994d440d40349ab49f8e7b50c636e99a301f60dd06b2a59a3084bbcd676d9566540e0e370a9e4ec5525872a0ddd745e07dfc7d556a31"}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000002c00), 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000002c80)={0x0, r4, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000002cc0)={r5, 0x4, 0x401, 0xaa3, 0xa0a, 0x9, 0xfffffffe}) sendto$inet6(r2, &(0x7f0000002d00)="0d17170320375ae690524c8973bf1d2c7daa493948b658063c2e076e6acfb8aeaf91980b77265ada8bc98c24d9176a984337cb441ce0d99cb42996eb3c7a2345843081bec9b13536e464dae812d6d623578ca1faa62ce1de0521cf", 0x5b, 0x1, 0x0, 0x0) r6 = dup3(r2, r2, 0x80000) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000002dc0)={0x1, &(0x7f0000002d80)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000002e00)={r7}) lremovexattr(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)=@random={'system.', '%&\x00'}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f0000002f00)={0x8, 0x120, 0xfa00, {0x3, {0xffff85c9, 0x7f, "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", 0xe, 0x29, 0x0, 0x6, 0xfd, 0xd}}}, 0x128) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) poll(&(0x7f0000003040)=[{r2, 0x4080}, {r6, 0x10}, {r9, 0x113}, {r8, 0x2}, {r6, 0x4400}], 0x5, 0x4) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000003080)={0x0, {{0x2, 0x4e20, @local}}, 0x1, 0x8, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}, {{0x2, 0x0, @broadcast}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @private=0xa010102}}]}, 0x490) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000003540)={0x6, 0x6, 0xc, 0x2, 0x4, "78b1bc3371b5970f658f217786441a6536e3cb", 0x6, 0x1}) fcntl$setownex(r0, 0xf, &(0x7f0000003580)={0x4da49e4b789829cb, 0xffffffffffffffff}) 2m0.183438363s ago: executing program 1 (id=131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x4001, @remote, 'dvmrp0\x00'}}) (async) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000000102010200000000000000000a0000070e0006006674702d32"], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x24080040) (async) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/128) (async, rerun: 64) r1 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x71) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x780f, 0x8000, 0x0, 0x4, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @private=0xa010101, {[@end]}}}}}) 1m59.942627507s ago: executing program 1 (id=133): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000100)='bpf\x00', 0x0) (async) fsopen(&(0x7f0000000100)='bpf\x00', 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="5c2053a401", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4c) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) (async) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x3) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) syz_io_uring_setup(0x2fd, &(0x7f0000000100)={0x0, 0x83b5, 0x20, 0x0, 0xde, 0x0, r5}, 0x0, 0x0) (async) syz_io_uring_setup(0x2fd, &(0x7f0000000100)={0x0, 0x83b5, 0x20, 0x0, 0xde, 0x0, r5}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xe827, 0x80, 0x1, 0x3c2}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_setup(0x43f, &(0x7f0000000100)={0x0, 0xd6c1, 0x4, 0x0, 0x32f, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000000)=[@generic={0x100}, @x={0x94, 0x8, "62475825f209"}, @v={0x93, 0x7, 0x80, 0x17, @MIDI_NOTEON=@special, 0x71, 0x3ff}], 0x11) (async) write$sequencer(0xffffffffffffffff, &(0x7f0000000000)=[@generic={0x100}, @x={0x94, 0x8, "62475825f209"}, @v={0x93, 0x7, 0x80, 0x17, @MIDI_NOTEON=@special, 0x71, 0x3ff}], 0x11) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) (async) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 1m59.823129953s ago: executing program 1 (id=134): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4081}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x2000080, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xfffffffffffffd86, r8, 0x200, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x40}, 0x4, 0x700000000000000, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0xd8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xa8, 0x2, [@TCA_BASIC_EMATCHES={0xa4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x9, 0x4, 0xcab}, [@TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c47e6b", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="cb", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="5325d3", @TCF_META_TYPE_VAR='Iu]', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="89ff21"]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_VAR="ce5f593834b665", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x2c, 0x2, [@TCF_META_TYPE_VAR="ce92741ccb76", @TCF_META_TYPE_VAR="acc0", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="1ca4", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ede827b0ea", @TCF_META_TYPE_VAR="10d92417fcd5eaad09", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffc0, 0x5, 0x2}, {0x8, 0x3, 0x1}}}]}}]}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) 1m58.882526525s ago: executing program 1 (id=140): r0 = socket(0x840000000002, 0x3, 0xff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000000008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @remote}}}], 0x20}, 0x400c804) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x2010491, &(0x7f00000000c0)='norecovery') 1m55.20431892s ago: executing program 32 (id=17): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x7d97, 0x800) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000540)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0xc4c03d16, 0x0) sendto$inet6(r4, &(0x7f0000000540)="a6e2976b5c4383036d32dadd2e144d8645cae01b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f26398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f959918f99bf9c2cb9357cf67f178dc2b3d4936e7f7f0a79f74ba464d83ab4bd9c27743daa5cff471bbc2751b5eae8855acb68d518b137cd0b21e21d8c8e16c81cca9c042da488003fcb6fca3d65238ddd944f4fd73b293001c56779f61597995d47f3c0c792a7860db829a0f182c7c29ab03d4fba5f766f439b616bbc96840a1d2696e19b6053159f3c518f2b3f", 0xffffffffffffffca, 0x2000c001, 0x0, 0x44) sendto$inet6(r4, &(0x7f00000002c0)="b3ea8fbee912e30484893ef63115c2c7041268a5d65a467b0ec6c55d71a9b919e5bbc5ce838f880d01ce12abad9ead3b8680", 0x32, 0x200088c0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001fff29bd7000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc030024255c4bd500010067656e35006500001400028005000c000000000005000d000200000008000a00", @ANYRES32=r3, @ANYBLOB="0500210007000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m43.662902743s ago: executing program 33 (id=140): r0 = socket(0x840000000002, 0x3, 0xff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe00000100000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000000008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @remote}}}], 0x20}, 0x400c804) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x2010491, &(0x7f00000000c0)='norecovery') 20.007047706s ago: executing program 5 (id=1419): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x52, 0x0}, 0x24004045) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x2, 0x2, 0x2}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r4, 0xc49, 0x7721, 0x16, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x61901, 0x0) lseek(r7, 0xcc, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='iso9660\x00', 0x425, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffffff"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x45) mkdirat(r9, &(0x7f0000000100)='./file0\x00', 0x2) read$FUSE(r0, &(0x7f00000014c0)={0x2020}, 0x2020) mkdir(&(0x7f0000000240)='./file0\x00', 0x108) 18.44241753s ago: executing program 4 (id=1449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES16, @ANYRES8=r0, @ANYRESOCT=0x0, @ANYRES8], 0x48) getpgrp(0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = fsmount(r3, 0x0, 0x3) memfd_create(&(0x7f0000000040)='rootmode', 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x0, 0x9, 0x10010, r4, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x80, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r6, r6) r7 = openat$cgroup(r4, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4054}, 0x64010) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f000000fa00)=0x9) 18.281153657s ago: executing program 3 (id=1453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000017c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000240)={0x48, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffb}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48884}, 0x40000) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4005}, 0x4088890) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x40, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x40}, 0x4, 0x700000000000000, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8001}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xec, 0x6, "e8e3e2e96cbc39f58cb7cc4296df266c82ef1be9c24282098fbc86ee1b0334d692db2a4e6cc863503ad7493e543b2c6d9fea2457512a18565db49436d5eb055d0b50dbfdce49ee8c99b2369711b721da38b02d993eb7b9a17bf4e414a3c65cdbb6e8996db5352058aa8f67fd886038101fde4da5d35da44ab01d1555cb6947f88bfb36b114a4968efc7fdbfb23b73a16ab3ebed0b0e50c04c1243bc276703160958077ff92a1e7aebc4ee684bf5b1141505245b39d04985b9889e9d82a0eb8951f452e8eaa4d503d3519458ac6b8658a5ac59cb34961f7c9a7f99f10b36a70732335107f5ea85fe8"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x17c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000017c0), r5) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001800)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f0000000240)={0x48, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffb}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48884}, 0x40000) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4005}, 0x4088890) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x40, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x40}, 0x4, 0x700000000000000, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8001}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xec, 0x6, "e8e3e2e96cbc39f58cb7cc4296df266c82ef1be9c24282098fbc86ee1b0334d692db2a4e6cc863503ad7493e543b2c6d9fea2457512a18565db49436d5eb055d0b50dbfdce49ee8c99b2369711b721da38b02d993eb7b9a17bf4e414a3c65cdbb6e8996db5352058aa8f67fd886038101fde4da5d35da44ab01d1555cb6947f88bfb36b114a4968efc7fdbfb23b73a16ab3ebed0b0e50c04c1243bc276703160958077ff92a1e7aebc4ee684bf5b1141505245b39d04985b9889e9d82a0eb8951f452e8eaa4d503d3519458ac6b8658a5ac59cb34961f7c9a7f99f10b36a70732335107f5ea85fe8"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x17c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) (async) 18.201969142s ago: executing program 3 (id=1454): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vivid(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000340)={0x0, 0x6, 0x6, '\x00', &(0x7f0000000200)=0x3}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) syz_open_dev$vim2m(0x0, 0x4, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000080)={0xba, 0x4a, &(0x7f0000000100)="95fc4addf044e1fb09ecf1e2ce360b2105632eb54e0b02a418f4f2bd17dbdcc8afa1742f14657480e8ba39e8c24c24ffc15b5e3a70f5be1b58edfd2c0cfe642365f1021f5617a28e45feb38e5c575dd0969bd98febf9cb16b0e836128f83d44fa96afd68ed929de15c5a99e5933166a18f89f0485aaec2180e6fe32697f9af7ae70920f23f1ea2a7048c5412c8cb9993b43fe8683fb9dc8efb3695da3946e3fe22f330af8e95cec27e5352a717d9a78f7536def662c4beede384896e", {0x9, 0x1ff, 0x38416761, 0x7, 0x5, 0x6, 0x4, 0x1}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000001980)={0x9, &(0x7f0000001840)=[{0x80, 0xe8, &(0x7f0000000440)="66ef682075166bf19a56bc790db2b95e92d7b65b594ad52ff4de83749e8044065212ff3a97795099e72726da31fc1bbaa761f19045469b6dc9c5bbeae2146c1612c37c2309c1749272cc0ef1997c0c112e2c3b13c88e5157d3670eb8cc2b948c2d66ae66ce132bcf23a7e20bce7f5977563bd77059dc2f11d272cff989b1a6f8e1e96ea58ec28bba8e476f10c839a95452952963a7ac192549bc1a4ee7ccdff54215f0ec0a6588a7834042174e3e0fbbe3ba313f65a7e81784d5b043de86e2743fc89d4ff6af11f8d1c54d93d9d824a464aff9794e90cb809c4c0eb3e7e57079824cae1ac16e6bb5"}, {0x2953, 0x1000, &(0x7f0000000540)="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", 0x1}, {0xc, 0x0, &(0x7f0000000380), 0x0, 0x1}, {0x0, 0x23, &(0x7f00000003c0)="e2f0256b1278db2f198eedaa32ce7defa232457c578de4c63b81fa2ca55ce0003fff38"}, {0x5, 0xda, &(0x7f0000001540)="8d10d8bb8d9a2e1808fe1a1f711cff4defb45380a695d5186f1370e4599bdc60f7515e524575618ef755fd05bb93d4ac274096c6c028b953a09f110055456a310f03f9cc2f721144e6fd0fb20385e6cacdde835c45ede1d6da45f6930c65176d084b2199db892a10e062c698965529a8748917bd138912f799b7bff711c31f034959fcc8818c06ef92fe04f8e7ab1453ed934e1f28b61d2cac9901a8dd0b2c1ce71b01782e5d9636de2f65b7de7dfa5e8222d0c4abd8fedf67e71c9886aa25298ae045f29175ec88ebe89bb46929e740abca8f23557cb01e359a", 0x1}, {0x7, 0x4d, &(0x7f0000001640)="df369c961ee9e0100949c59023c88b6c7921b7d5bd78d4afb38f3823226ee4792afe06dee8ffe32cc6d3d644f2e45f26209aacb3d391d29f18131e0bd118b43d8cd45ac546c44db62ea4eca253", 0x1, 0x1}, {0x3, 0x46, &(0x7f00000016c0)="646b3c303a588dd392724da1a8a58fd6fd4a5d12def0370c28cb38f75807b2a8c1b3da5a2081e256c09c3c37014c223e6c0e3a6cc235a26ed8e4ed7b7421f8920c50c30a67bf"}, {0x9, 0x89, &(0x7f0000001740)="9294949a9dfdec382f4b047d19a1854076dfd78e7e62c43361fec87048cf0cf49690d4aebe96d5c9a7c43e339443f6206771606290c5140979882444f526c4532533391d5abd891991d02f48b82ef2afe847535567c71b1cf1840a3dea6d26d30a5f1bb40cc98452a9bd70941c9065960bd1864ef1b3ca49dbafde92c7694f6a1957c32ffdbab37d09", 0x1}, {0x8, 0x3f, &(0x7f0000001800)="c468b218f43dc5ba14e5d5c03c12f19e2e8fb1fffd33a4cbb189cc6dec92411ce166d6883b7e290ce054390822b918b900ba57e53972d642955e6e41998550", 0x1}]}) mount(0x0, &(0x7f00000019c0)='./file1/file0\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000001a00)='v\xfc|\xf2Y\x0f\x8b\x8fK\x18e\xf0_\x11a\xb5\xad(\xd4\xce\x9f\xab\xe9H\xe80\x8anq\x9a\x16\x7f\xbdr\xad\v') chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x16a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) 17.990935517s ago: executing program 3 (id=1457): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x401, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0xf0, r2, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xc8, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x34, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x80000001}]}, 0x34}}, 0x4044) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x4891) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 17.931703884s ago: executing program 3 (id=1459): r0 = syz_io_uring_setup(0x18d7, &(0x7f00000003c0)={0x0, 0xb6d7, 0x2, 0xfffffffe, 0x25b}, &(0x7f0000ffe000), &(0x7f000001b000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f00000021c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) 4.321355791s ago: executing program 4 (id=1465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = socket(0x1, 0x3, 0x0) unshare(0x2a020480) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fchown(r3, 0xee01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000540)={0x89, "4599d1cc583abf51414d07758a362cc77b2890aa57c65f55f9e61476bf522796", 0x2, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) bind$unix(r2, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff34000480300001800b00010074617267657400002000028008000100534554000c00030002b51112d439c59208000240000000010900010073797a3000000004090002007379673200000000140000001100010000000000000000000000000a"], 0x88}}, 0x800) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc801}, 0x20044054) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) accept4(r6, &(0x7f0000000340)=@hci, &(0x7f0000000500)=0x80, 0x0) 4.321082321s ago: executing program 0 (id=1466): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x800, 0x70bd25, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "f1b9a8169700df4ea8e18c49d2ee"}}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0xbdda, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000e706000000ffffffe19500000000"], 0x0}, 0x94) r3 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x4, 0x8, 0x6, 0x4, 0x800008}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, 0xfffffffffffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001800dd8d0000000000000000020000000100000600000000060015000500000058001680540001"], 0x7c}}, 0x20000810) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00141202800800010008000000062102000100000008000500", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.320789384s ago: executing program 4 (id=1467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async, rerun: 64) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000c7a8352200a500000095000000000000004c4be55951cf1262011ca290d436c886834e827f5ec0bf8096f7e7fbe73516a6d6779e06f383927fc31296b8f63a481f55c9cf1814873ef93657449815cdad7c4de4d877052e92d04f60730ca12dde257a03ef"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 4.32024793s ago: executing program 0 (id=1468): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x5, 0xffff, 0x6, 0x3, 0x7, 0x0, [{0x2, 0x10001, 0xffff, '\x00', 0x8}, {0x4d, 0xd, 0xf, '\x00', 0x3400}, {0x40, 0x327, 0xffffffffffffffff, '\x00', 0x1100}, {0xffffffffffff8000, 0x800, 0x2, '\x00', 0x580}, {0x8000000000000000, 0x8, 0x1ff, '\x00', 0x2402}, {0xf, 0x4, 0x100000001, '\x00', 0x30c}, {0x8db7, 0x1678b2d, 0x10, '\x00', 0x80}]}) r1 = syz_open_dev$dvb_dvr(&(0x7f00000001c0), 0x4, 0x21c040) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x2) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x1, 0x8, {{0x18, 0x4, 0x0, 0x26, 0x60, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@end, @lsrr={0x83, 0x7, 0xcd, [@loopback]}, @timestamp={0x44, 0xc, 0x6f, 0x0, 0x1, [0x2, 0x6]}, @timestamp_addr={0x44, 0x14, 0xc9, 0x1, 0x3, [{@private=0xa010100, 0x2}, {@loopback, 0xfffffffb}]}, @ssrr={0x89, 0x13, 0xf6, [@dev={0xac, 0x14, 0x14, 0xa}, @empty, @rand_addr=0x64010100, @broadcast]}, @generic={0x82, 0xc, "42c473961baa1c358fd3"}, @end, @ra={0x94, 0x4}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001500)={&(0x7f0000000200), 0xc, &(0x7f00000014c0)={&(0x7f0000000300)={0x11a8, 0x12, 0x800, 0x70bd2d, 0x25dfdbfd, {0x1f, 0xbe, 0x3, 0x4, {0x4e22, 0x4e22, [0x1000, 0x4, 0xb, 0x3ff], [0x7, 0x7, 0xc7a, 0xff], r3, [0x7, 0x7fffffff]}, 0x5, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x52, 0x1, "7eed709983f9bba19ee6839f4dfd5104623a37f18e5b6eb3827a4360c38d0ad6bf4cfbcd5edec5ef90670fb0b5d97b323181bf4c70adeb60e9d542f32be0153ba418b493fbddabdf5331bff14781"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "dfd7a977990ca6f7efc1bbc1839ef365a4bd7491dc5344b102b6d420c2d406"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "e23ac07a48cebd18789fe2135a86eab963aafd932933ae5a2c6c2b2ce51a9eeb532696bd45cdccf2906c911fc51ff2ba9a4480bc8ead80e6788444c6197bc7d784733bffc72ca48fc12713ca416c29ca29c84dd7cbd552fcd0103be9561e9d159da6769457a84dce31"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "9689c7f2fc7a8015c7284cb80d50037e02006fb95caec53c22164a6a071a6bcff9f8dc9e2f7e6cfc9d54733c893027f4b6488e8fd82d7773cc89296a536228506a550740c1c6386768b65a9ed7d3c034f75f76c98a6827364f723a7856f5c1e9e7febf9a01ec824a56"}]}, 0x11a8}, 0x1, 0x0, 0x0, 0x20048080}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@getstats={0x1c, 0x5e, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x6}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x871) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001640), 0x110000) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r4, 0x80184153, &(0x7f0000001b00)={0x0, &(0x7f0000001ac0)=[&(0x7f0000001680)="f6cd208fb54bda7ae1a1062b68ad4836ac5f62f3ddd734a2a48c80b5f03f923f5c12e6a31a42e4d887119111f3cd57dea8fe6a43022cdc7f7241e01b43eed47e875d1bbe238f4f12f86cdedb460c0bfbfda6639328e2ddcee99758fb44960f849ec58aca8004bd69a27cb9ecc67b6c8cef88f4090f8a9234c36a93d4d2742c645f7e9a7845768b50a3714d13d86dc68a7d959fdcd411966e7c656eacac8f8bd1070c0b441b807cf8bebff37c85a7729a5f138e4a3d70808572006d0821a2257909f0c67f937ee469d760f9d376bb35ea3d065d0ffd59d7", &(0x7f0000001780)="3f8fa21bc1bef98913f6775ab2ebe28e9958d73cfa547957eb5c4ea844bc73f49b55079cbb3c699f498013ae4809e92a12278a478c6e2af29d31cb9ea1f918f63eaca1fd05f0847a90dbfd06d6fb0c3b1548a8edba1354", &(0x7f0000001800)="5b2893e8568a1100cb507b1d1aca14b4ad0946484e6c3abdb9726c407b25b18efbadc07606aeb56d6a1e3a836fca308cfd7b45", &(0x7f0000001840)="ec5f3c055d47eb067ce56858d87e9d9adb30b550e393c23ffa2f82667f531eab68536ed361afaeb5bf0ef8de17f5e3a13aaa6779b5df80b9665c0465047c119a5d4d32601af3ddfae6816c8f4b7faf63f711fd96", &(0x7f00000018c0)="c82d8a6ec84f92465e16509f1401c49499c712ba5515614c9353f5a83861703335653e9907e403d78a21c23c74f23d00bf9a8db18b2b30e6d6341688b417217de33a5de43a72db474155c332b2e9948b4950b30af79af09f13a33b3441d6389fccc4ca23e9e60de481029c28932b9c730e60cbc8c9f5aaf9209295b44ee52a852c2e1c5e9dd4b1fe3756aef5db148ba574cbf8bb4ac9a631ada9aa7e524a630d9bb467d9d528a1170cd91e1ab254e7e2d2be0e64321ee993a009dc9fce45ba5ad2a997284c30608f", &(0x7f00000019c0)="fd0d2e8b922c82fc5b5ee5f294ffc6ab414252e80cc974e39d48f10f62c27c80b77375b386e44c8f3fe133ee136995a1e441e4b8b968c467852af8edfc694fbd8c6923b5a6bdd23d1500fd12fcda32e8c5cc7860422f110c8846a5b9d399a62c626fc3de06d2113950307561694636ce51c846f9490b03b60d2e84e9f0d953b9bdfb4e76340c2d78ce64c0e5dcb4497666582cf28551c8e431ee61725199e71af7692b143efddcc124fb22cc642310a5b8e95224258704d7257ab5d839937869d2afa35e8171897dc5a25947a59a8c"]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r4) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x14, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80c1}, 0x24004001) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x68, r5, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "18163f62969c401d"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x2, 0x3}, {0x8, 0x3}, {0x1}, {0xc}, {0x9, 0x5}, {0xdf, 0x4}, {0xb}, {0x9d, 0x4}, {0x2, 0x5}], "0db164a2946d33be"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x7, 0x5}, {0x3}, {0x1, 0x4}, {0xc7, 0x7}, {0x2, 0x7}, {0x8}, {0x4, 0x1}, {0x2, 0x3}, {0x6, 0x7}, {0x7, 0x7}], "a577ba7339bfd312"}}]}, 0x68}}, 0x28040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e40), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x30, r8, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x44000) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4044001) connect$netrom(r4, &(0x7f0000002040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000002300)={{}, {0x8}, 0x8, 0x0, 0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='./file0\x00', &(0x7f0000002140)="83a067c40d75bac87f604c5cbcfc2c35fdb3175911991b3de4b9eb1c3de3cf4dff26259b93a6a4eb870e73be1f5a55f1b44ea2b2a2fdb49cd6918d64c43ffa1dc551c2a6be43af849e640d2b0ab1d01c0e79ab", 0x53, 0x0, &(0x7f00000021c0)={0x2, 0xd2, {0x1, 0xc, 0x49, "909dc0b03588f51d83b227ad1836c8bb331f9e22992752b4fd8cdb7de3f6d29f4b6479ff5746e84ee82a0d10219ee235eb281900fb150d4474d58e21733333a0ee3113d69730f844e1", 0x7c, "413039e7d806edc65620c753b784516faa31615b19d39f2102fbb617874c784f5f46307b990429ccb6f0e2486aa4fc071acbc8da7672697ffca502ba1c6b4909fa213da4b532be863d91d52382b24bcf67502413b5f8974da197c8460f5137fff1fac13cb72529d60dec24d457b2066faab4eabb61d6272771fff596"}, 0x51, "7046da781c602b65bc0d3cf9072f3181032739e40e54c89cc7f534bafa61133519d487e5ef384a93b5ccc0ac5b23f2c2f74390bbccdef4377ff022eef7e704080b349e0e39db4ef7201433511309543a60"}, 0x12f}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000002380)={0x0, {}, 0x0, {}, 0x6, 0x9, 0x5, 0x10, "af808bc3f06bad45cbf6741a2eeff64e5157299d596a7399357b249929552ad114951a3f3192ed02a01d7c2a7f5585f580f5d246e48482919030bb05800dbcd9", "f0dcf377347f5d4ba0f27589ae924f75989e648020016566c0420bf5ab5b31ef", [0xc67b, 0x4a6fcc20]}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r4) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r9, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r4) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x58, r10, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x9}, 0x4000080) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000002700)={0x9da, 0x8014, 0x523567e1, 0x8, 0x0}, &(0x7f0000002740)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000002780)={r12, 0xfff9, 0x1, 0x4, 0xfc1, 0x1}, &(0x7f00000027c0)=0x14) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0xac, r10, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4d0763cc8829d9f93daa671f2c0be00a"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "25507d33b46fb8a3907a04f646d89572"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "aa9f2708d5c1168f50e43e5faca60368"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "f3681d24a048d876cdcac1f20a5e0f3d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "15a466c23eba5f2ede9ec7dad7162fc1"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e6e7f6f52477d5fde5cdd579b690fc50"}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x4028900) 4.318214552s ago: executing program 0 (id=1469): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@private, @in=@multicast1}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x97) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 4.316704276s ago: executing program 5 (id=1470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24) 4.316351947s ago: executing program 4 (id=1471): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 4.316091243s ago: executing program 3 (id=1472): syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xa, 0x4, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0x3, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x2, 0x6, 0x400438, 0x2, 0x9, 0x95, 0x7fffffff, 0x404, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x3e55, 0x4, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0x100, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x32d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405"], 0x70}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.352044927s ago: executing program 0 (id=1473): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6(0xa, 0x2, 0x9322) dup(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x2, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffe01, 0x0, 0x6, 0x1000000000}, 0x0, 0x1000, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x40}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff8d) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x48, 0x37, 0x80, 0x6}, {0x6, 0x6, 0x2, 0x57c}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xa052) 2.972188022s ago: executing program 5 (id=1474): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000700)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) 2.491585675s ago: executing program 4 (id=1475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000000)={0x0, 0xdddd0000}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x2}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.49123605s ago: executing program 0 (id=1476): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2102, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002200)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x5, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0x14b000) close(r8) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000005c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e00000018"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.56195821s ago: executing program 5 (id=1477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c850, 0x0, 0x0) 1.037742951s ago: executing program 3 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x91) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x10, 0xb, 0x1, 0x52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x8, 0x7, 0xfffffc01, 0x6}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast2}, &(0x7f0000000300)=0xc) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xa}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010200}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000e893b0db28f32560fe332b9184aeb1c832a09c523b89802638d6aebfd1067fcb329ec7220465b6eb4a16ef3428dd18da", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0003030000000000000000000000ffffac1414aa8edd000020000100", @ANYRES32=0x0, @ANYBLOB="01020200e000000200"/19, @ANYBLOB="01000000000000000000000000000000000000008edd000020000100", @ANYRES32=r5, @ANYBLOB="010103006401010000000000000000000000000086", @ANYRES32=r6, @ANYBLOB="01020300fe8000000000000000000000000000bb96dd000020000100", @ANYRES32=r8, @ANYBLOB="01030000fe88000000000000000000000000000186dd000020000100", @ANYRES32, @ANYBLOB="00010400fe8000000000000000000000000000bb86dd0000"], 0xf8}, 0x1, 0x0, 0x0, 0xc800}, 0x40) unshare(0x64000600) r10 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000002380)=@nat={'nat\x00', 0x8, 0x5, 0x508, 0x118, 0x208, 0xffffffff, 0x208, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv6=@mcast1, @icmp_id=0xfffd, @gre_key}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 542.463492ms ago: executing program 0 (id=1479): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x116e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x40000) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020) openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) 241.621282ms ago: executing program 5 (id=1480): syz_emit_ethernet(0x7e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x6) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 182.076517ms ago: executing program 5 (id=1481): write$tun(0xffffffffffffffff, 0x0, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, 0x0, 0x3) 0s ago: executing program 4 (id=1482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$swradio(0x0, 0x0, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x4000003, &(0x7f00000000c0)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) 0s ago: executing program 3 (id=1483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) kernel console output (not intermixed with test programs): 2] netlink: 9 bytes leftover after parsing attributes in process `syz.3.463'. [ 94.119114][ T7752] netlink: 9 bytes leftover after parsing attributes in process `syz.3.463'. [ 94.204892][ T40] audit: type=1400 audit(1771910811.199:507): avc: denied { mounton } for pid=7753 comm="syz.5.464" path="/proc/80/task" dev="proc" ino=21201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 94.214309][ T40] audit: type=1400 audit(1771910811.199:508): avc: denied { create } for pid=7753 comm="syz.5.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.224831][ T40] audit: type=1400 audit(1771910811.209:509): avc: denied { accept } for pid=7753 comm="syz.5.464" lport=35010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.232667][ T40] audit: type=1400 audit(1771910811.209:510): avc: denied { setopt } for pid=7753 comm="syz.5.464" lport=35010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.328785][ T7762] netlink: 'syz.3.466': attribute type 13 has an invalid length. [ 94.430073][ T50] usb 9-1: USB disconnect, device number 2 [ 94.505142][ T7769] veth1_to_batadv: entered promiscuous mode [ 94.586928][ T7780] vxcan1: entered allmulticast mode [ 94.820702][ T7803] 8021q: VLANs not supported on ipvlan1 [ 94.891148][ T7811] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.090828][ T7836] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 95.094334][ T1028] IPVS: starting estimator thread 0... [ 95.169812][ T7848] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 95.176006][ T7847] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 95.182711][ T7847] overlayfs: missing 'lowerdir' [ 95.193121][ T7848] netlink: 'syz.4.492': attribute type 10 has an invalid length. [ 95.200637][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.203777][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.213090][ T7837] IPVS: using max 43 ests per chain, 103200 per kthread [ 95.218914][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.221284][ T7848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.224102][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.227436][ T7848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.233502][ T7848] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.243416][ T7848] bridge0: port 3(syz_tun) entered blocking state [ 95.246379][ T7848] bridge0: port 3(syz_tun) entered disabled state [ 95.249168][ T7848] syz_tun: entered allmulticast mode [ 95.253141][ T7848] syz_tun: entered promiscuous mode [ 95.257813][ T7848] bridge0: port 3(syz_tun) entered blocking state [ 95.260933][ T7848] bridge0: port 3(syz_tun) entered forwarding state [ 95.279247][ T7848] netlink: 'syz.4.492': attribute type 10 has an invalid length. [ 95.283312][ T7848] syz_tun: left allmulticast mode [ 95.300882][ T7848] bridge0: port 3(syz_tun) entered disabled state [ 95.345091][ T7859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7859 comm=syz.3.498 [ 95.469732][ T7877] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 96.191946][ T7924] devtmpfs: Cannot change global quota limit on remount [ 96.201939][ T7924] devtmpfs: Cannot change global quota limit on remount [ 96.325239][ T7933] program syz.5.520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.042204][ T7997] unsupported nla_type 4111 [ 97.069767][ T8000] comedi comedi1: Minor 0 could not be opened [ 97.497465][ T8042] tmpfs: Unknown parameter 'tmpfs' [ 97.738644][ T8069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=8069 comm=syz.3.552 [ 97.744811][ T8069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25881 sclass=netlink_route_socket pid=8069 comm=syz.3.552 [ 97.815573][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 97.975114][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 97.979665][ T34] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 97.992849][ T34] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 97.998215][ T34] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 98.001291][ T34] usb 5-1: config 250 has no interface number 0 [ 98.002308][ T8096] sock: sock_timestamping_bind_phc: sock not bind to device [ 98.003841][ T34] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 98.012320][ T34] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 98.019677][ T34] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.025515][ T34] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.030404][ T34] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 98.039047][ T34] usb 5-1: config 250 interface 228 has no altsetting 0 [ 98.044009][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 98.048580][ T34] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 98.052226][ T34] usb 5-1: Product: syz [ 98.054099][ T34] usb 5-1: SerialNumber: syz [ 98.119193][ T34] hub 5-1:250.228: bad descriptor, ignoring hub [ 98.121478][ T34] hub 5-1:250.228: probe with driver hub failed with error -5 [ 98.179404][ T8110] netlink: 'syz.5.558': attribute type 4 has an invalid length. [ 98.259573][ T8127] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 98.329573][ T34] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 98.346324][ T8131] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 98.642374][ T8154] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 98.646431][ T8154] gretap1: entered promiscuous mode [ 98.648325][ T8154] gretap1: entered allmulticast mode [ 98.835690][ T8168] __nla_validate_parse: 78 callbacks suppressed [ 98.835710][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.578'. [ 99.054223][ T8175] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8175 comm=syz.3.579 [ 99.114686][ T8178] fuse: Unknown parameter '0x0000000000000005' [ 99.138507][ T8181] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 99.226299][ T8183] netlink: 44 bytes leftover after parsing attributes in process `syz.4.582'. [ 99.231958][ T8183] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 99.285243][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 99.285297][ T40] audit: type=1400 audit(1771910816.289:546): avc: denied { getopt } for pid=8196 comm="syz.4.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 99.381492][ T8204] netlink: 'syz.3.589': attribute type 2 has an invalid length. [ 99.409230][ T8202] syzkaller0: entered promiscuous mode [ 99.411611][ T8202] syzkaller0: entered allmulticast mode [ 99.716902][ T40] audit: type=1400 audit(1771910816.719:547): avc: denied { setopt } for pid=8230 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.752703][ T40] audit: type=1400 audit(1771910816.749:548): avc: denied { bind } for pid=8230 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.801108][ T8236] Cannot find add_set index 65532 as target [ 100.055588][ T8252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=8252 comm=syz.3.605 [ 100.123371][ T40] audit: type=1400 audit(1771910817.119:549): avc: denied { accept } for pid=8253 comm="syz.3.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 100.224875][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 100.233444][ T40] audit: type=1400 audit(1771910817.229:550): avc: denied { mounton } for pid=8254 comm="syz.4.606" path="/bus" dev="ramfs" ino=24182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 100.233739][ T8259] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 100.243906][ T8259] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 100.248511][ T8259] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 100.350604][ T8264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.610'. [ 100.355907][ T8264] netlink: 44 bytes leftover after parsing attributes in process `syz.3.610'. [ 100.415740][ T8268] netlink: 87 bytes leftover after parsing attributes in process `syz.3.611'. [ 100.651523][ T8285] netlink: 'syz.0.616': attribute type 2 has an invalid length. [ 100.694918][ T40] audit: type=1400 audit(1771910817.689:551): avc: denied { validate_trans } for pid=8292 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 100.710607][ T6018] usb 5-1: USB disconnect, device number 13 [ 100.718001][ T6018] usblp0: removed [ 100.754981][ T8301] netlink: 'syz.3.621': attribute type 63 has an invalid length. [ 100.758944][ T8301] netlink: 5 bytes leftover after parsing attributes in process `syz.3.621'. [ 100.761889][ T8301] gretap0: entered allmulticast mode [ 100.763720][ T8298] netlink: 'syz.3.621': attribute type 63 has an invalid length. [ 100.763732][ T8298] netlink: 5 bytes leftover after parsing attributes in process `syz.3.621'. [ 100.772152][ T8301] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 100.777629][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.5.622'. [ 100.782410][ T8303] program syz.5.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.795790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.821643][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 100.831165][ T8297] binder: 8296:8297 ioctl 8004587d 0 returned -22 [ 100.876260][ T40] audit: type=1400 audit(1771910817.879:552): avc: denied { execute } for pid=8318 comm="syz.3.626" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=25240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 100.992098][ T8328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.003893][ T8328] macvlan3: entered promiscuous mode [ 101.006352][ T8328] macvlan3: entered allmulticast mode [ 101.009642][ T8328] bond1: entered promiscuous mode [ 101.012356][ T8328] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 101.021643][ T8328] bond1: left promiscuous mode [ 101.041788][ T8330] netlink: 'syz.5.629': attribute type 2 has an invalid length. [ 101.054462][ T8335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8335 comm=syz.0.630 [ 101.095269][ T40] audit: type=1400 audit(1771910818.089:553): avc: denied { map } for pid=8336 comm="syz.3.633" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.148446][ T8342] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 50999997 out of range (51000000..2150000000) [ 101.159833][ T40] audit: type=1400 audit(1771910818.159:554): avc: denied { remount } for pid=8341 comm="syz.5.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 101.166826][ T40] audit: type=1400 audit(1771910818.159:555): avc: denied { perfmon } for pid=8346 comm="syz.0.636" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.357048][ T833] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 101.465183][ T8362] xt_hashlimit: size too large, truncated to 1048576 [ 101.520290][ T833] usb 8-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 101.523961][ T833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 101.526808][ T833] usb 8-1: Product: syz [ 101.528538][ T833] usb 8-1: Manufacturer: syz [ 101.530387][ T833] usb 8-1: SerialNumber: syz [ 101.534772][ T833] usb 8-1: config 0 descriptor?? [ 101.539143][ T833] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 101.542492][ T833] dvb-usb: bulk message failed: -22 (2/0) [ 101.549665][ T833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.553028][ T833] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 101.557312][ T833] usb 8-1: media controller created [ 101.569633][ T833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.602933][ T8366] vcan1: entered allmulticast mode [ 101.747440][ T8337] cxusb: i2c wr: len=79 is too big! [ 101.747440][ T8337] [ 101.754384][ T833] cxusb: set interface failed [ 101.756484][ T833] dvb-usb: bulk message failed: -22 (1/0) [ 101.786005][ T833] DVB: Unable to find symbol mt352_attach() [ 101.789044][ T833] dvb-usb: bulk message failed: -22 (5/0) [ 101.791083][ T833] zl10353_read_register: readreg error (reg=127, ret==-121) [ 101.793661][ T833] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 101.845967][ T833] rc_core: IR keymap rc-dvico-mce not found [ 101.848134][ T833] Registered IR keymap rc-empty [ 101.852978][ T833] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0 [ 101.857958][ T833] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb8/8-1/rc/rc0/input10 [ 101.869496][ T833] dvb-usb: schedule remote query interval to 100 msecs. [ 101.872352][ T833] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 101.879354][ T833] usb 8-1: USB disconnect, device number 12 [ 101.933046][ T833] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 102.088746][ T8375] netlink: 'syz.0.644': attribute type 2 has an invalid length. [ 102.342309][ T8389] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 102.428554][ T8389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.462055][ T8388] vlan3: entered allmulticast mode [ 102.464286][ T8388] bond1: entered allmulticast mode [ 102.559346][ T8394] syz_tun: entered promiscuous mode [ 102.561081][ T8394] syz_tun: entered allmulticast mode [ 102.975779][ T8418] netlink: 'syz.3.653': attribute type 2 has an invalid length. [ 103.656803][ T8454] netlink: 'syz.4.667': attribute type 2 has an invalid length. [ 103.788626][ T8460] fuse: Bad value for 'group_id' [ 103.790706][ T8460] fuse: Bad value for 'group_id' [ 103.848965][ T8463] overlayfs: failed to resolve './bus': -2 [ 103.920670][ T8471] __nla_validate_parse: 5 callbacks suppressed [ 103.920689][ T8471] netlink: 32 bytes leftover after parsing attributes in process `syz.5.673'. [ 103.924757][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.672'. [ 103.928196][ T8471] netlink: 76 bytes leftover after parsing attributes in process `syz.5.673'. [ 103.930471][ T8467] xt_hashlimit: size too large, truncated to 1048576 [ 104.116916][ T8481] netlink: 'syz.5.676': attribute type 2 has an invalid length. [ 104.248277][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 104.280644][ T8494] bridge_slave_1: left allmulticast mode [ 104.282690][ T8494] bridge_slave_1: left promiscuous mode [ 104.284593][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.302782][ T8494] bridge_slave_0: left allmulticast mode [ 104.307307][ T8494] bridge_slave_0: left promiscuous mode [ 104.310105][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.334885][ T8502] misc userio: Begin command sent, but we're already running [ 104.339099][ T8502] netlink: 36 bytes leftover after parsing attributes in process `syz.5.682'. [ 104.394131][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 104.394178][ T40] audit: type=1400 audit(1771910821.389:567): avc: denied { read write } for pid=8493 comm="syz.5.682" name="usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 104.404648][ T40] audit: type=1400 audit(1771910821.389:568): avc: denied { open } for pid=8493 comm="syz.5.682" path="/dev/usbmon6" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 104.543879][ T8508] ip6gre2: entered allmulticast mode [ 104.548116][ T8508] team0: Device ip6gre2 is of different type [ 104.555133][ T5935] Bluetooth: hci4: command 0x0406 tx timeout [ 104.600652][ T40] audit: type=1400 audit(1771911077.606:569): avc: denied { getopt } for pid=8509 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.760470][ T8529] netlink: 71 bytes leftover after parsing attributes in process `syz.0.693'. [ 104.872444][ T40] audit: type=1400 audit(1771911077.866:570): avc: denied { read } for pid=8541 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.921377][ T8546] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 104.925885][ T40] audit: type=1400 audit(1771911077.926:571): avc: denied { write } for pid=8545 comm="syz.4.698" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.940543][ T40] audit: type=1400 audit(1771911077.926:572): avc: denied { ioctl } for pid=8545 comm="syz.4.698" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.952415][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.030033][ T8558] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 105.030053][ T8558] netlink: 'syz.0.702': attribute type 2 has an invalid length. [ 105.124016][ T40] audit: type=1400 audit(1771911078.116:573): avc: denied { associate } for pid=8565 comm="syz.0.704" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 105.136338][ T40] audit: type=1400 audit(1771911078.126:574): avc: denied { read } for pid=8565 comm="syz.0.704" dev="nsfs" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.143127][ T8565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.144502][ T40] audit: type=1400 audit(1771911078.126:575): avc: denied { open } for pid=8565 comm="syz.0.704" path="net:[4026532960]" dev="nsfs" ino=4026532960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.199315][ T8572] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 105.199364][ T40] audit: type=1400 audit(1771911078.196:576): avc: denied { set_context_mgr } for pid=8571 comm="syz.3.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 105.201992][ T8572] binder: 8571:8572 ioctl 4018620d 200000000240 returned -1 [ 105.423665][ T8584] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.709' resets device [ 105.428338][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 105.431556][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.709'. [ 105.439195][ T8584] geneve3: entered promiscuous mode [ 105.441109][ T8584] geneve3: entered allmulticast mode [ 105.502190][ T8585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.709'. [ 105.905681][ T159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.930091][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 105.995294][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.141438][ T8613] netlink: 'syz.5.715': attribute type 14 has an invalid length. [ 106.514025][ T8631] program syz.5.721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.609961][ T8634] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 106.711195][ T8638] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 106.713565][ T8638] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 106.717200][ T8638] vhci_hcd vhci_hcd.0: Device attached [ 106.741040][ T8638] xt_connbytes: Forcing CT accounting to be enabled [ 106.743762][ T8638] Cannot find set identified by id 0 to match [ 106.867071][ T8639] vhci_hcd: connection closed [ 106.869972][ T12] vhci_hcd vhci_hcd.4: stop threads [ 106.876647][ T12] vhci_hcd vhci_hcd.4: release socket [ 106.880065][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 106.895176][ T833] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 107.025701][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.234420][ T8654] netlink: 'syz.3.728': attribute type 2 has an invalid length. [ 107.525879][ T6016] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 107.563937][ T8669] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.567268][ T8669] overlayfs: failed to set xattr on upper [ 107.569168][ T8669] overlayfs: ...falling back to redirect_dir=nofollow. [ 107.571404][ T8669] overlayfs: ...falling back to index=off. [ 107.573893][ T8669] overlayfs: ...falling back to uuid=null. [ 107.575873][ T8669] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 107.667764][ T6016] usb 8-1: device descriptor read/64, error -71 [ 107.671770][ T8675] netlink: 'syz.4.737': attribute type 2 has an invalid length. [ 107.915249][ T6016] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 108.055378][ T6016] usb 8-1: device descriptor read/64, error -71 [ 108.065362][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.165555][ T6016] usb usb8-port1: attempt power cycle [ 108.195765][ T8704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8704 comm=syz.5.746 [ 108.201165][ T8703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8703 comm=syz.5.746 [ 108.342304][ T8710] kvm: kvm [8707]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 108.347353][ T8710] kvm: kvm [8707]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 108.369009][ T8710] kvm: kvm [8707]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 108.390657][ T8710] kvm: kvm [8707]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x186) = 0xfffffc18 [ 108.394149][ T8710] kvm: kvm [8707]: vcpu2, guest rIP: 0x9130 Unhandled WRMSR(0x187) = 0xfffffc18 [ 108.505819][ T6016] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 108.528888][ T6016] usb 8-1: device descriptor read/8, error -71 [ 108.765301][ T6016] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 108.766921][ T8720] netlink: 'syz.4.751': attribute type 1 has an invalid length. [ 108.794453][ T8720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.805728][ T6016] usb 8-1: device descriptor read/8, error -71 [ 108.843816][ T8724] Invalid logical block size (536872960) [ 108.849815][ T8724] tipc: Started in network mode [ 108.852281][ T8724] tipc: Node identity , cluster identity 4711 [ 108.898822][ T8727] netlink: 'syz.4.754': attribute type 21 has an invalid length. [ 108.921034][ T6016] usb usb8-port1: unable to enumerate USB device [ 108.948946][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.008313][ T8736] binder: 8735:8736 unknown command 0 [ 109.010173][ T8736] binder: 8735:8736 ioctl c0306201 200000000080 returned -22 [ 109.060477][ T8741] bond2: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 109.066266][ T8741] bond2 (unregistering): Released all slaves [ 109.109430][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.158083][ T8755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.162080][ T8755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.172238][ T8755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.260360][ T8771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8771 comm=syz.0.766 [ 109.304898][ T8773] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 109.361708][ T8784] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 109.525946][ T8800] __nla_validate_parse: 8 callbacks suppressed [ 109.525964][ T8800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.775'. [ 109.582108][ T8800] netlink: 20 bytes leftover after parsing attributes in process `syz.5.775'. [ 109.597396][ T5957] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 109.629251][ T8807] netlink: 'syz.0.779': attribute type 10 has an invalid length. [ 109.632001][ T8807] team_slave_0: left promiscuous mode [ 109.633938][ T8807] team_slave_1: left promiscuous mode [ 109.636650][ T8807] veth1_to_batadv: left promiscuous mode [ 109.643328][ T8807] team0: Cannot enslave team device to itself [ 109.672072][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.780'. [ 109.680403][ T8812] netlink: 'syz.0.780': attribute type 16 has an invalid length. [ 109.684085][ T8812] netlink: 64102 bytes leftover after parsing attributes in process `syz.0.780'. [ 109.769926][ T5957] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 109.773120][ T5957] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.774984][ T8818] SELinux: syz.0.783 (8818) set checkreqprot to 1. This is no longer supported. [ 109.774994][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 109.775382][ T40] audit: type=1400 audit(1771911082.766:583): avc: denied { setcheckreqprot } for pid=8817 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 109.776770][ T5957] usb 9-1: Product: syz [ 109.790910][ T8819] overlayfs: failed lookup in lower (newroot/219, name='file1', err=-40): overlapping layers [ 109.792305][ T5957] usb 9-1: Manufacturer: syz [ 109.792317][ T5957] usb 9-1: SerialNumber: syz [ 109.957657][ T40] audit: type=1400 audit(1771911082.956:584): avc: denied { append } for pid=8835 comm="syz.5.785" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.965935][ T40] audit: type=1400 audit(1771911082.956:585): avc: denied { ioctl } for pid=8835 comm="syz.5.785" path="/dev/usbmon1" dev="devtmpfs" ino=738 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.987650][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.785'. [ 109.999776][ T5957] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 110.004790][ T5957] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 110.014187][ T5957] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 110.022595][ T5957] usb 9-1: USB disconnect, device number 3 [ 110.044701][ T40] audit: type=1400 audit(1771911083.036:586): avc: denied { watch_reads } for pid=8837 comm="syz.0.788" path="pipe:[31944]" dev="pipefs" ino=31944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 110.096200][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.788'. [ 110.099052][ T8841] validate_nla: 1 callbacks suppressed [ 110.099061][ T8841] netlink: 'syz.0.788': attribute type 7 has an invalid length. [ 110.103269][ T8841] netlink: 'syz.0.788': attribute type 8 has an invalid length. [ 110.103278][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 110.117287][ T8842] netlink: 'syz.5.789': attribute type 2 has an invalid length. [ 110.168361][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.790'. [ 110.178224][ T8844] ip6gre1: entered promiscuous mode [ 110.180570][ T8844] ip6gre1: entered allmulticast mode [ 110.185085][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.186284][ T8844] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.189169][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.215367][ T6016] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.234532][ T40] audit: type=1400 audit(1771911083.226:587): avc: denied { map } for pid=8845 comm="syz.5.791" path="socket:[30474]" dev="sockfs" ino=30474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.236019][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.791'. [ 110.251775][ T40] audit: type=1400 audit(1771911083.246:588): avc: denied { add_name } for pid=8845 comm="syz.5.791" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.261107][ T40] audit: type=1400 audit(1771911083.246:589): avc: denied { create } for pid=8845 comm="syz.5.791" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 110.354481][ T8859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.795'. [ 110.448593][ T40] audit: type=1400 audit(1771911083.446:590): avc: denied { ioctl } for pid=8852 comm="syz.5.794" path="pid:[4026533496]" dev="nsfs" ino=4026533496 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.571211][ T8870] netlink: 'syz.4.797': attribute type 3 has an invalid length. [ 110.591184][ T40] audit: type=1400 audit(1771911083.586:591): avc: denied { name_bind } for pid=8869 comm="syz.4.797" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 110.615450][ T6016] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.751851][ T6016] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.785681][ T6009] Process accounting resumed [ 110.796725][ T8884] Process accounting resumed [ 110.823732][ T40] audit: type=1400 audit(1771911083.816:592): avc: denied { write } for pid=8885 comm="syz.4.801" name="/" dev="9p" ino=73662667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.845905][ T8886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23857 sclass=netlink_route_socket pid=8886 comm=syz.4.801 [ 110.948858][ T8890] bond2: Invalid ad_actor_system MAC address. [ 110.951536][ T8890] bond2: option ad_actor_system: invalid value (255) [ 110.970683][ T8890] bond2 (unregistering): Released all slaves [ 111.026760][ T159] net_ratelimit: 9 callbacks suppressed [ 111.026775][ T159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.164102][ T8897] netlink: 'syz.0.806': attribute type 2 has an invalid length. [ 111.175168][ T50] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 111.187204][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.220399][ T8902] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 111.272451][ T8902] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 111.320367][ T8907] tun0: tun_chr_ioctl cmd 1074025675 [ 111.322583][ T8907] tun0: persist disabled [ 111.385617][ T50] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.388926][ T50] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.391725][ T50] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 111.395387][ T50] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 111.398333][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.402771][ T8888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.413153][ T50] hub 8-1:1.0: bad descriptor, ignoring hub [ 111.415233][ T50] hub 8-1:1.0: probe with driver hub failed with error -5 [ 111.418683][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 111.420399][ T50] cdc_wdm 8-1:1.0: skipping garbage [ 111.422943][ T50] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 111.424867][ T50] cdc_wdm 8-1:1.0: Unknown control protocol [ 111.691123][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 111.694061][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 111.696125][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 111.813502][ T8854] Set syz1 is full, maxelem 65536 reached [ 111.848314][ T10] usb 8-1: USB disconnect, device number 17 [ 112.167667][ T8908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.229347][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.306345][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.672168][ T8940] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 113.265399][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.065482][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.315826][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.336627][ T8909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.428345][ T8947] usb usb8: selecting invalid altsetting 56942 [ 114.434410][ T8947] Cannot find add_set index 65532 as target [ 114.441353][ T8947] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.442447][ T8952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.451320][ T8943] trusted_key: encrypted_key: insufficient parameters specified [ 114.455088][ T8952] trusted_key: encrypted_key: insufficient parameters specified [ 114.491075][ T8956] overlayfs: failed to resolve './bus': -2 [ 114.494543][ T8956] overlayfs: failed to resolve './file0': -2 [ 114.500568][ T8956] overlay: Unknown parameter 'nfc' [ 114.560975][ T8970] __nla_validate_parse: 5 callbacks suppressed [ 114.560988][ T8970] netlink: 40 bytes leftover after parsing attributes in process `syz.4.822'. [ 114.635165][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.345460][ T1028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.471647][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 115.471665][ T40] audit: type=1400 audit(1771911088.466:598): avc: denied { audit_write } for pid=9003 comm="syz.5.835" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.483646][ T40] audit: type=1107 audit(1771911088.476:599): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='jI;)>&OdZ0[=%m7y&TK&}uG(q ' [ 115.492328][ T40] audit: type=1400 audit(1771911088.476:600): avc: denied { accept } for pid=9003 comm="syz.5.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.862427][ T40] audit: type=1400 audit(1771911088.856:601): avc: denied { write } for pid=9030 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.007093][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.5.847'. [ 116.162572][ T9059] netlink: 20 bytes leftover after parsing attributes in process `syz.5.850'. [ 116.323379][ T9063] UHID_CREATE from different security context by process 581 (syz.4.852), this is not allowed. [ 116.386903][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.408075][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.411251][ T9069] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 116.411292][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.504186][ T9066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.512526][ T9066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.519964][ T9074] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 116.620202][ T9073] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.855'. [ 116.647454][ T9072] bridge0: port 3(syz_tun) entered blocking state [ 116.650247][ T9072] bridge0: port 3(syz_tun) entered disabled state [ 116.655531][ T9072] syz_tun: entered allmulticast mode [ 116.663469][ T9074] syz_tun: left allmulticast mode [ 116.668015][ T9074] bridge0: port 3(syz_tun) entered disabled state [ 116.674226][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.685113][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.688002][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.690842][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.800258][ T9078] netlink: 'syz.5.857': attribute type 2 has an invalid length. [ 117.050277][ T9095] ./cgroup: Can't lookup blockdev [ 117.311420][ T9099] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 117.463516][ T40] audit: type=1400 audit(1771911090.456:602): avc: denied { map } for pid=9114 comm="syz.3.868" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 117.498124][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.863'. [ 117.634421][ T9128] IPVS: fo: FWM 3 0x00000003 - no destination available [ 117.639775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.995922][ T9165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=129 sclass=netlink_route_socket pid=9165 comm=syz.4.881 [ 118.026244][ T40] audit: type=1400 audit(1771911091.026:603): avc: denied { shutdown } for pid=9166 comm="syz.4.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.034912][ T40] audit: type=1400 audit(1771911091.026:604): avc: denied { read } for pid=9166 comm="syz.4.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.073363][ T9175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9175 comm=syz.4.883 [ 118.187114][ T9180] SELinux: failed to load policy [ 118.218246][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.889'. [ 118.225446][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.5.888'. [ 118.264140][ T9187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9187 comm=syz.5.888 [ 118.305851][ T54] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 118.379150][ T9191] program syz.4.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.480693][ T9193] netlink: 'syz.3.892': attribute type 15 has an invalid length. [ 118.483191][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'. [ 118.485295][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 118.489904][ T54] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 118.494414][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.507935][ T54] pvrusb2: Hardware description: Terratec Grabster AV400 [ 118.515186][ T54] pvrusb2: ********** [ 118.521813][ T54] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 118.526650][ T54] pvrusb2: Important functionality might not be entirely working. [ 118.529788][ T54] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 118.535336][ T50] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 118.544691][ T54] pvrusb2: ********** [ 118.552393][ T9200] binfmt_misc: register: failed to install interpreter file ./file1 [ 118.639335][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 118.658460][ T9207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.695081][ T50] usb 10-1: Using ep0 maxpacket: 32 [ 118.698263][ T50] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 118.701600][ T50] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 118.706183][ T50] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.709220][ T2488] pvrusb2: Invalid write control endpoint [ 118.711918][ T50] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 118.713931][ T50] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 118.720779][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.723407][ T50] usb 10-1: Product: syz [ 118.723914][ T9214] dlm: non-version read from control device 0 [ 118.724826][ T50] usb 10-1: Manufacturer: syz [ 118.724835][ T50] usb 10-1: SerialNumber: syz [ 118.730022][ T9214] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 118.735261][ C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 118.742057][ T50] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input13 [ 118.744171][ T2488] pvrusb2: Invalid write control endpoint [ 118.750860][ T2488] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 118.755791][ T2488] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 118.758670][ T2488] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 118.762733][ T2488] pvrusb2: Device being rendered inoperable [ 118.768653][ T2488] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 118.771489][ T2488] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 118.776951][ T2488] pvrusb2: Attached sub-driver cx25840 [ 118.778845][ T2488] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 118.782541][ T2488] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 118.904907][ T9173] pvrusb2: Attempted to execute control transfer when device not ok [ 118.910065][ T9174] pvrusb2: Attempted to execute control transfer when device not ok [ 118.979998][ T50] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 118.981897][ T50] (id 0x00) [ 119.010594][ T1463] usb 5-1: USB disconnect, device number 14 [ 119.035487][ T50] rc_core: IR keymap rc-imon-pad not found [ 119.038685][ T50] Registered IR keymap rc-empty [ 119.042211][ T50] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 119.047571][ T50] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 119.176328][ T50] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 119.182697][ T50] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input14 [ 119.190374][ T50] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:2> initialized [ 119.571034][ T9225] nvme_fabrics: missing parameter 'transport=%s' [ 119.573386][ T9225] nvme_fabrics: missing parameter 'nqn=%s' [ 119.601114][ T9225] nvme_fabrics: missing parameter 'transport=%s' [ 119.603976][ T9225] nvme_fabrics: missing parameter 'nqn=%s' [ 119.648530][ T40] audit: type=1400 audit(1771911092.646:605): avc: denied { create } for pid=9229 comm="syz.0.901" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.664166][ T40] audit: type=1400 audit(1771911092.646:606): avc: denied { map } for pid=9229 comm="syz.0.901" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.674443][ T40] audit: type=1400 audit(1771911092.646:607): avc: denied { read write } for pid=9229 comm="syz.0.901" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 119.720765][ T9234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 119.722817][ T9234] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 119.726840][ T9234] vhci_hcd vhci_hcd.0: Device attached [ 119.732408][ T9234] Cannot find set identified by id 0 to match [ 119.763059][ T9232] imon:send_packet: packet tx failed (-71) [ 119.763161][ T34] usb 10-1: USB disconnect, device number 2 [ 119.795642][ T9232] imon:vfd_write: send packet #1 failed [ 119.905176][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 119.975180][ T5957] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 119.981980][ T9235] vhci_hcd: connection reset by peer [ 119.985807][ T212] vhci_hcd vhci_hcd.4: stop threads [ 119.987952][ T212] vhci_hcd vhci_hcd.4: release socket [ 119.990172][ T212] vhci_hcd vhci_hcd.4: disconnect device [ 120.055638][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 120.058992][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.062008][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.065773][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.068720][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.071600][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.075278][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.078450][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.081518][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.085242][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.088466][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.091552][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.096060][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.099963][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.103706][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.108579][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.112429][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.116202][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.119757][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.122766][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.125756][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.129148][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.132055][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.134933][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.138695][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.142470][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 120.145550][ T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 120.148175][ T10] usb 5-1: Product: syz [ 120.149616][ T10] usb 5-1: Manufacturer: syz [ 120.151084][ T10] usb 5-1: SerialNumber: syz [ 120.156744][ T10] usb 5-1: config 0 descriptor?? [ 120.165423][ T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 120.379932][ T9230] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 120.383281][ T50] usb 5-1: USB disconnect, device number 15 [ 120.387306][ T50] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 120.510993][ T9243] netlink: 'syz.5.903': attribute type 2 has an invalid length. [ 120.592915][ T9248] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9248 comm=syz.5.905 [ 120.654228][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 120.654246][ T40] audit: type=1400 audit(1771911093.646:609): avc: denied { create } for pid=9247 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.655926][ T9250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.906'. [ 120.659267][ T40] audit: type=1400 audit(1771911093.656:610): avc: denied { ioctl } for pid=9247 comm="syz.5.905" path="socket:[36949]" dev="sockfs" ino=36949 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.659907][ T9251] netlink: 'syz.5.905': attribute type 11 has an invalid length. [ 120.680792][ T9251] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.905'. [ 120.683323][ T40] audit: type=1400 audit(1771911093.656:611): avc: denied { connect } for pid=9247 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 120.707054][ T9250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.906'. [ 120.935095][ T9259] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 120.940276][ T9259] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.909'. [ 120.943422][ T9259] openvswitch: netlink: Missing key (keys=40, expected=100) [ 121.105535][ T6016] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 121.256652][ T6016] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 121.260893][ T6016] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 121.264404][ T6016] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 121.271156][ T6016] usb 9-1: string descriptor 0 read error: -22 [ 121.273212][ T6016] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.276212][ T6016] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.281078][ T9257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 121.415192][ T54] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 121.467824][ T40] audit: type=1400 audit(1771911094.466:612): avc: denied { ioctl } for pid=9272 comm="syz.5.915" path="socket:[35107]" dev="sockfs" ino=35107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.487318][ T6016] cdc_ncm 9-1:1.0: bind() failure [ 121.492976][ T6016] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 121.495785][ T6016] cdc_ncm 9-1:1.1: bind() failure [ 121.499755][ T6016] usb 9-1: USB disconnect, device number 4 [ 121.565185][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 121.574417][ T54] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 121.577657][ T54] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 121.580357][ T54] usb 5-1: Product: syz [ 121.581734][ T54] usb 5-1: Manufacturer: syz [ 121.583302][ T54] usb 5-1: SerialNumber: syz [ 121.587705][ T54] usb 5-1: config 0 descriptor?? [ 121.791073][ T40] audit: type=1400 audit(1771911094.786:613): avc: denied { setopt } for pid=9290 comm="syz.5.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.826104][ T50] usb 5-1: USB disconnect, device number 16 [ 121.834944][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.923'. [ 121.877280][ T9301] netlink: 96 bytes leftover after parsing attributes in process `syz.3.924'. [ 121.890610][ T9304] input: syz0 as /devices/virtual/input/input15 [ 122.011172][ T40] audit: type=1326 audit(1771911095.006:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.5.927" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32c399c629 code=0x0 [ 122.178533][ T40] audit: type=1400 audit(1771911095.176:615): avc: denied { create } for pid=9325 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.186917][ T40] audit: type=1400 audit(1771911095.176:616): avc: denied { setopt } for pid=9325 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.193238][ T40] audit: type=1400 audit(1771911095.176:617): avc: denied { accept } for pid=9325 comm="syz.3.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 122.313127][ T9336] ip6t_REJECT: ECHOREPLY is not supported [ 122.356369][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 122.360195][ T9340] netlink: 'syz.3.936': attribute type 5 has an invalid length. [ 122.363800][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 122.390426][ T9342] overlayfs: regular lower layers cannot follow data lower layers [ 122.395204][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 122.398213][ T9342] team0: Device is already in use. [ 122.416390][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 122.420007][ T9343] netlink: 'syz.3.936': attribute type 5 has an invalid length. [ 122.566349][ T40] audit: type=1400 audit(1771911095.566:618): avc: denied { read write } for pid=9348 comm="syz.0.940" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 122.716925][ T9362] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 122.803239][ T9372] overlay: Bad value for 'xino' [ 122.923951][ T9386] sctp: [Deprecated]: syz.0.952 (pid 9386) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.923951][ T9386] Use struct sctp_sack_info instead [ 123.252156][ T9410] dvmrp0: entered allmulticast mode [ 123.441420][ T9430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.737330][ T9492] netlink: 'syz.0.978': attribute type 1 has an invalid length. [ 123.825194][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.906523][ T9511] lo: Caught tx_queue_len zero misconfig [ 123.932158][ T9511] syzkaller0: entered promiscuous mode [ 123.934066][ T9511] syzkaller0: entered allmulticast mode [ 124.003869][ T9520] overlay: Unknown parameter 'dont_hash' [ 124.017725][ T9520] mmap: syz.3.988 (9520) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.036054][ T9526] usb usb8: usbfs: process 9526 (syz.5.989) did not claim interface 0 before use [ 124.082521][ T9526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.949991][ T9562] [syz.4.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 124.966558][ T9562] [syz.4.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 125.104508][ T9585] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 125.115463][ T5957] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 125.122176][ T9583] fuse: Unknown parameter '0x0000000000000003' [ 125.436721][ T9607] bond4: invalid ARP target 0.0.0.0 specified for addition [ 125.440058][ T9607] bond4: option arp_ip_target: invalid value (0) [ 125.444404][ T9607] bond4 (unregistering): Released all slaves [ 125.468136][ T9610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9610 comm=syz.0.1014 [ 125.472512][ T9610] netlink: 'syz.0.1014': attribute type 2 has an invalid length. [ 125.584396][ T5938] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 125.753414][ T9636] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 125.757509][ T9636] qnx6: wrong signature (magic) in superblock #1. [ 125.759666][ T9636] qnx6: unable to read the first superblock [ 125.769681][ T9638] netlink: 'syz.0.1024': attribute type 2 has an invalid length. [ 125.774853][ T9638] __nla_validate_parse: 21 callbacks suppressed [ 125.774868][ T9638] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1024'. [ 125.840969][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 125.841013][ T40] audit: type=1400 audit(1771911098.836:634): avc: denied { append } for pid=9640 comm="syz.4.1026" path="/243/file0/cpuset.effective_cpus" dev="9p" ino=73662715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.865332][ T40] audit: type=1400 audit(1771911098.836:635): avc: denied { lock } for pid=9640 comm="syz.4.1026" path="/243/file0/cpuset.effective_cpus" dev="9p" ino=73662715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.974708][ T9647] program syz.5.1025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.008528][ T40] audit: type=1400 audit(1771911099.006:636): avc: denied { unmount } for pid=7123 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 126.138930][ T9669] xt_bpf: check failed: parse error [ 126.222717][ T9677] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 126.273719][ T40] audit: type=1400 audit(1771911099.266:637): avc: denied { read } for pid=9674 comm="syz.5.1033" path="socket:[34338]" dev="sockfs" ino=34338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.335528][ T9682] bond0: (slave bond_slave_0): Releasing backup interface [ 126.342660][ T9682] bond0: (slave bond_slave_1): Releasing backup interface [ 126.352418][ T9682] team0: Port device team_slave_0 removed [ 126.364894][ T9682] team0: Port device team_slave_1 removed [ 126.368258][ T9682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.371293][ T9682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.375717][ T9682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.376391][ T9683] netlink: 'syz.5.1033': attribute type 10 has an invalid length. [ 126.379083][ T9682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.387949][ T9682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.409307][ T9683] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 126.442114][ T9683] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.487574][ T9687] netlink: 'syz.5.1035': attribute type 10 has an invalid length. [ 126.493981][ T9687] netlink: 'syz.5.1035': attribute type 10 has an invalid length. [ 126.498695][ T9687] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1035'. [ 126.502845][ T9687] batadv0: entered promiscuous mode [ 126.506061][ T9687] batadv0: entered allmulticast mode [ 126.508029][ T9687] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 126.570483][ T9690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.611241][ T9694] netlink: 'syz.5.1037': attribute type 21 has an invalid length. [ 126.614177][ T9694] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.643343][ T40] audit: type=1400 audit(1771911099.636:638): avc: denied { getopt } for pid=9695 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.717328][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.720407][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.734263][ T9702] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.736354][ T9702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.738795][ T9702] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.740805][ T9702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.746408][ T9702] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 126.862211][ T40] audit: type=1400 audit(1771911099.856:639): avc: denied { mounton } for pid=9709 comm="syz.5.1044" path="/178/file0" dev="tmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 126.872358][ T9714] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 126.929333][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 126.933045][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1045'. [ 126.939818][ T40] audit: type=1400 audit(1771911099.936:640): avc: denied { ioctl } for pid=9723 comm="syz.5.1046" path="socket:[36462]" dev="sockfs" ino=36462 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.945242][ T9722] comedi comedi3: bad chanlist[0]=0x00300001 chan=1 range length=1 [ 126.971731][ T9722] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 126.993710][ T40] audit: type=1400 audit(1771911099.986:641): avc: denied { bind } for pid=9726 comm="syz.4.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.062478][ T40] audit: type=1400 audit(1771911100.056:642): avc: denied { create } for pid=9733 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.070972][ T40] audit: type=1400 audit(1771911100.066:643): avc: denied { setopt } for pid=9733 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.097115][ T9736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9736 comm=syz.4.1049 [ 127.607689][ T9773] sit0: Caught tx_queue_len zero misconfig [ 127.701202][ T9779] fuse: Unknown parameter '' [ 128.044924][ T9804] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.129556][ T9812] fuse: Unknown parameter '' [ 128.188210][ T9814] openvswitch: netlink: Message has 430 unknown bytes. [ 128.499203][ T9835] fuse: Unknown parameter '' [ 128.705177][ T5935] Bluetooth: hci0: command 0x1407 tx timeout [ 128.707528][ T5938] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 128.840584][ T9852] hpfs: Bad magic ... probably not HPFS [ 128.848334][ T9852] hpfs: Bad magic ... probably not HPFS [ 128.922537][ T9857] fuse: Bad value for 'group_id' [ 128.924323][ T9857] fuse: Bad value for 'group_id' [ 129.022515][ T9867] 9p: p9: multiple sources not supported [ 129.034096][ T9866] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1095'. [ 129.051712][ T9866] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1095'. [ 129.054729][ T9866] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1095'. [ 129.059351][ T9867] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 4π!FVluc'f`ކ;1 [ 129.150256][ T9872] ip6gre2: entered allmulticast mode [ 129.154824][ T9872] team0: Device ip6gre2 is of different type [ 129.168075][ T9876] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1100'. [ 129.378702][ T9896] fuse: Bad value for 'group_id' [ 129.380820][ T9896] fuse: Bad value for 'group_id' [ 129.392425][ T9899] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.413293][ T9901] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 129.498836][ T9915] netlink: 4456 bytes leftover after parsing attributes in process `syz.5.1108'. [ 129.586317][ T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.591162][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1107'. [ 129.612451][ T9923] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 129.755732][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.024545][ T9936] fuse: Bad value for 'group_id' [ 130.027360][ T9936] fuse: Bad value for 'group_id' [ 130.068619][ T9938] syz_tun: entered allmulticast mode [ 130.147867][ T9938] syz_tun: left allmulticast mode [ 130.246611][ T9950] bridge0: port 3(veth0_to_bridge) entered blocking state [ 130.248980][ T9950] bridge0: port 3(veth0_to_bridge) entered disabled state [ 130.251351][ T9950] veth0_to_bridge: entered allmulticast mode [ 130.254785][ T9950] veth0_to_bridge: entered promiscuous mode [ 130.785271][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.949168][ T5935] Bluetooth: hci0: command 0x1407 tx timeout [ 131.288688][ T9980] geneve2: entered promiscuous mode [ 131.290645][ T9980] geneve2: entered allmulticast mode [ 131.337295][ T9982] 8021q: VLANs not supported on ipvlan0 [ 131.449997][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 131.450044][ T40] audit: type=1400 audit(1771911104.446:657): avc: denied { create } for pid=9988 comm="syz.5.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.631547][T10008] __nla_validate_parse: 1 callbacks suppressed [ 131.631560][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 131.803475][T10003] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1133'. [ 131.826162][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.930143][T10022] x_tables: duplicate underflow at hook 2 [ 131.938378][ T40] audit: type=1400 audit(1771911104.936:658): avc: denied { ioctl } for pid=10021 comm="syz.5.1139" path="/dev/cpu/2/msr" dev="devtmpfs" ino=91 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 131.948237][ T40] audit: type=1400 audit(1771911104.946:659): avc: denied { getopt } for pid=10021 comm="syz.5.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.994980][T10024] ntfs3(sr0): Primary boot signature is not NTFS. [ 132.001238][T10024] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 132.055415][ T6009] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 132.220951][ T6009] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 132.224984][ T6009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.228649][ T6009] usb 9-1: Product: syz [ 132.230553][ T6009] usb 9-1: Manufacturer: syz [ 132.232643][ T6009] usb 9-1: SerialNumber: syz [ 132.245881][ T6009] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.273855][ T50] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.376833][T10045] tipc: Enabling of bearer rejected, failed to enable media [ 132.397826][T10047] cgroup: Unknown subsys name 'cpuset' [ 132.438369][T10045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1149'. [ 132.478794][ T34] usb 9-1: USB disconnect, device number 5 [ 132.483845][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 132.625349][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.799459][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.866610][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.975258][T10059] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1153'. [ 132.981147][T10059] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 133.042316][T10065] netlink: 'syz.4.1154': attribute type 11 has an invalid length. [ 133.049458][T10065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1154'. [ 133.099308][ T40] audit: type=1400 audit(1771911106.096:660): avc: denied { create } for pid=10058 comm="syz.5.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.107521][ T40] audit: type=1400 audit(1771911106.096:661): avc: denied { write } for pid=10058 comm="syz.5.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.126712][T10069] pimreg: entered allmulticast mode [ 133.131107][T10069] syz_tun: entered allmulticast mode [ 133.242411][T10068] pimreg: left allmulticast mode [ 133.345129][ T50] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 133.348472][ T50] ath9k_htc: Failed to initialize the device [ 133.354035][ T34] usb 9-1: ath9k_htc: USB layer deinitialized [ 133.407429][T10074] overlayfs: failed to resolve './file0': -2 [ 133.632163][T10094] bridge6: entered promiscuous mode [ 133.634589][T10094] bridge6: entered allmulticast mode [ 133.720345][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1165'. [ 133.905272][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.996132][T10118] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1169'. [ 134.095178][ T6016] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 134.174668][T10124] binder: 10123:10124 ioctl c0306201 0 returned -14 [ 134.179753][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 134.181507][T10124] binder: 10123:10124 ioctl c0306201 0 returned -14 [ 134.185799][T10124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1171'. [ 134.245434][ T6016] usb 9-1: Using ep0 maxpacket: 16 [ 134.249294][ T6016] usb 9-1: config 12 has an invalid interface number: 220 but max is 3 [ 134.252056][ T6016] usb 9-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 134.254953][ T6016] usb 9-1: config 12 has an invalid interface number: 76 but max is 3 [ 134.258588][ T6016] usb 9-1: config 12 has an invalid interface number: 212 but max is 3 [ 134.262004][ T6016] usb 9-1: config 12 has 3 interfaces, different from the descriptor's value: 4 [ 134.265848][ T6016] usb 9-1: config 12 has no interface number 0 [ 134.268487][ T6016] usb 9-1: config 12 has no interface number 1 [ 134.284720][ T6016] usb 9-1: config 12 has no interface number 2 [ 134.288073][ T6016] usb 9-1: config 12 interface 220 altsetting 87 has an invalid descriptor for endpoint zero, skipping [ 134.292803][ T6016] usb 9-1: config 12 interface 220 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 134.304097][ T6016] usb 9-1: config 12 interface 76 altsetting 7 endpoint 0x4 has an invalid bInterval 72, changing to 7 [ 134.322746][ T6016] usb 9-1: config 12 interface 76 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 134.327639][ T6016] usb 9-1: config 12 interface 76 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.332871][ T6016] usb 9-1: config 12 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 134.337584][ T6016] usb 9-1: config 12 interface 76 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 134.342491][ T6016] usb 9-1: config 12 interface 76 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 134.347100][ T6016] usb 9-1: config 12 interface 212 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 134.351604][ T6016] usb 9-1: config 12 interface 212 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 134.356622][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 134.361638][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 134.368858][ T6016] usb 9-1: config 12 interface 212 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 134.373259][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 134.377509][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has an endpoint descriptor with address 0x1A, changing to 0xA [ 134.382063][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 134.386772][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 134.391244][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 134.395935][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 134.400390][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 134.403999][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 134.407577][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 134.411528][ T6016] usb 9-1: config 12 interface 212 altsetting 5 has a duplicate endpoint with address 0x4, skipping [ 134.415977][ T6016] usb 9-1: config 12 interface 220 has no altsetting 0 [ 134.418862][ T6016] usb 9-1: config 12 interface 76 has no altsetting 0 [ 134.421741][ T6016] usb 9-1: config 12 interface 212 has no altsetting 0 [ 134.426798][ T6016] usb 9-1: Dual-Role OTG device on HNP port [ 134.429639][ T6016] usb 9-1: New USB device found, idVendor=413c, idProduct=8213, bcdDevice=c1.0a [ 134.433123][ T6016] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.436676][ T6016] usb 9-1: Product: syz [ 134.438510][ T6016] usb 9-1: Manufacturer: syz [ 134.440265][ T6016] usb 9-1: SerialNumber: syz [ 134.654387][ T6016] option 9-1:12.220: GSM modem (1-port) converter detected [ 134.669099][ T6016] usb 9-1: USB disconnect, device number 6 [ 134.670020][ T6016] option 9-1:12.220: device disconnected [ 134.837185][ T40] audit: type=1400 audit(1771911107.836:662): avc: denied { accept } for pid=10168 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 134.855225][ T34] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 134.887986][T10171] overlayfs: overlapping lowerdir path [ 134.895657][ T40] audit: type=1400 audit(1771911107.896:663): avc: denied { setattr } for pid=10170 comm="syz.5.1187" name="NETLINK" dev="sockfs" ino=41334 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.927562][T10173] sctp: [Deprecated]: syz.3.1188 (pid 10173) Use of int in maxseg socket option. [ 134.927562][T10173] Use struct sctp_assoc_value instead [ 134.945892][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.988733][T10176] validate_nla: 1 callbacks suppressed [ 134.988752][T10176] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 135.005002][T10176] bond2: entered promiscuous mode [ 135.005098][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 135.006930][T10176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.011544][ T34] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 135.023300][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 135.028637][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.033139][T10176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10176 comm=syz.3.1189 [ 135.038760][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 135.043684][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.051516][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.056897][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.059829][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.072051][T10176] bond2: (slave bridge3): making interface the new active one [ 135.083203][T10176] bridge3: entered promiscuous mode [ 135.090010][T10176] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 135.105150][ T5935] Bluetooth: hci4: command 0x0406 tx timeout [ 135.275700][ T34] usb 5-1: usb_control_msg returned -32 [ 135.278686][ T34] usbtmc 5-1:16.0: can't read capabilities [ 135.352686][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.633074][ C3] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 135.641120][T10205] usbtmc 5-1:16.0: Unable to send data, error -71 [ 135.644716][T10205] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 7d [ 135.744920][T10208] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 135.754740][T10208] tipc: Started in network mode [ 135.757606][T10208] tipc: Node identity 080211000001, cluster identity 4711 [ 135.761940][T10208] tipc: Enabled bearer , priority 0 [ 135.767946][T10208] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 135.770434][T10208] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 135.850242][ T5957] usb 5-1: USB disconnect, device number 17 [ 135.987213][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.154986][T10216] netlink: 'syz.5.1201': attribute type 10 has an invalid length. [ 136.164448][T10216] team0: Cannot enslave team device to itself [ 136.258749][T10218] macsec1: entered promiscuous mode [ 136.290105][T10220] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 136.293029][T10220] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 136.708152][ T40] audit: type=1400 audit(1771911109.706:664): avc: denied { getopt } for pid=10225 comm="syz.0.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 136.878294][ T5957] tipc: Node number set to 134418688 [ 136.936510][T10248] netlink: 'syz.0.1211': attribute type 10 has an invalid length. [ 137.035740][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.185322][ T5938] Bluetooth: hci4: command 0x0406 tx timeout [ 137.356249][T10260] __nla_validate_parse: 1 callbacks suppressed [ 137.356267][T10260] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1216'. [ 137.363118][T10260] bond0: entered allmulticast mode [ 137.365518][T10260] bond_slave_0: entered allmulticast mode [ 137.367403][T10260] bond_slave_1: entered allmulticast mode [ 137.369226][T10260] bridge0: entered allmulticast mode [ 137.402679][T10267] netlink: 'syz.0.1215': attribute type 3 has an invalid length. [ 137.454362][ T40] audit: type=1400 audit(1771911110.446:665): avc: denied { accept } for pid=10270 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 137.623344][T10281] overlayfs: failed to resolve './file1': -2 [ 137.908448][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.065691][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.386567][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.442495][T10306] Cannot find set identified by id 65534 to match [ 138.679753][ T40] audit: type=1400 audit(1771911111.676:666): avc: denied { listen } for pid=10320 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.697921][T10321] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1235'. [ 139.025662][T10332] evm: overlay not supported [ 139.108393][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.108744][T10344] Bluetooth: hci0: load_link_keys: too big key_count value 9472 [ 139.185361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.298908][T10356] sp0: Synchronizing with TNC [ 139.311006][T10355] [U] [ 139.419512][ T40] audit: type=1400 audit(1771911112.416:667): avc: denied { append } for pid=10357 comm="syz.4.1246" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 139.455798][ T40] audit: type=1400 audit(1771911112.456:668): avc: denied { checkpoint_restore } for pid=10365 comm="syz.4.1247" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.475126][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 139.475166][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 139.625122][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 139.628980][ T34] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.633270][ T34] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.639793][ T34] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.643924][ T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.644384][ T10] usb 5-1: config 0 has no interfaces? [ 139.647631][ T34] usb 10-1: Product: syz [ 139.651169][ T34] usb 10-1: Manufacturer: syz [ 139.652495][ T10] usb 5-1: config 0 has no interfaces? [ 139.653198][ T34] usb 10-1: SerialNumber: syz [ 139.657526][ T10] usb 5-1: config 0 has no interfaces? [ 139.668085][ T10] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 139.671980][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 139.676791][ T10] usb 5-1: Product: syz [ 139.678615][ T10] usb 5-1: Manufacturer: syz [ 139.681029][ T10] usb 5-1: SerialNumber: syz [ 139.684628][ T10] usb 5-1: config 0 descriptor?? [ 139.727246][ T6016] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 139.747535][ T40] audit: type=1400 audit(1771911112.746:669): avc: denied { write } for pid=10377 comm="syz.3.1251" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 139.835833][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.870426][T10349] smc: net device bond0 applied user defined pnetid SYZ2 [ 139.873924][T10349] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1242'. [ 139.882532][ T6016] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.886118][ T6016] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.888673][ T6016] usb 9-1: Product: syz [ 139.890020][ T6016] usb 9-1: Manufacturer: syz [ 139.891699][ T6016] usb 9-1: SerialNumber: syz [ 139.896844][ T6016] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.904511][T10349] smc: removing net device bond0 with user defined pnetid SYZ2 [ 139.909089][T10354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.913537][T10349] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 139.915387][T10354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.919343][ T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.921497][T10349] bond0 (unregistering): Released all slaves [ 139.939739][T10384] geneve3: entered promiscuous mode [ 139.941863][T10384] geneve3: entered allmulticast mode [ 139.944197][ T103] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.948679][ T103] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.980889][ T103] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.984848][ T34] usb 10-1: 0:2 : does not exist [ 139.985342][ T103] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 139.990625][ T1463] usb 5-1: USB disconnect, device number 18 [ 140.054784][ T34] usb 10-1: USB disconnect, device number 3 [ 140.088375][ T5927] udevd[5927]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.129107][ T1028] usb 9-1: USB disconnect, device number 7 [ 140.145881][ T8079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.201701][T10388] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 140.273717][T10393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.278376][T10393] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 140.476242][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.607201][ T40] audit: type=1400 audit(1771911113.606:670): avc: denied { getopt } for pid=10413 comm="syz.0.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 140.756647][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'. [ 140.945279][ T10] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 140.946835][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1264'. [ 140.948377][ T10] ath9k_htc: Failed to initialize the device [ 140.964406][ T40] audit: type=1400 audit(1771911113.956:671): avc: denied { bind } for pid=10439 comm="syz.5.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.977068][ T1028] usb 9-1: ath9k_htc: USB layer deinitialized [ 141.030665][T10448] batadv_slave_1: entered promiscuous mode [ 141.115621][ T212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.125865][T10450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.173812][T10452] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 141.198439][T10453] batadv_slave_1: left promiscuous mode [ 141.211705][T10462] overlayfs: overlapping lowerdir path [ 141.277412][T10469] overlayfs: upper fs does not support file handles, falling back to index=off. [ 141.311175][T10473] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1275'. [ 141.315730][T10473] nbd: must specify at least one socket [ 141.320647][T10467] program syz.5.1272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.459875][ T40] audit: type=1400 audit(1771911114.456:672): avc: denied { map } for pid=10483 comm="syz.3.1279" path="/dev/tty27" dev="devtmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 141.471559][ T40] audit: type=1400 audit(1771911114.456:673): avc: denied { execute } for pid=10483 comm="syz.3.1279" path="/dev/tty27" dev="devtmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 141.477152][T10476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10476 comm=syz.4.1276 [ 141.560692][T10493] netlink: 'syz.0.1281': attribute type 8 has an invalid length. [ 141.581005][T10493] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 141.609576][T10493] bond2: (slave geneve2): making interface the new active one [ 141.612886][T10493] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 141.617961][ T103] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 141.620795][ T103] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 141.624111][ T103] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 141.633460][ T103] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 141.709470][T10510] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1286'. [ 141.759661][T10518] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 141.764623][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 141.764633][ T40] audit: type=1400 audit(1771911114.756:679): avc: denied { relabelto } for pid=10504 comm="syz.4.1284" name="285" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 141.780933][T10518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1284'. [ 141.784498][ T40] audit: type=1400 audit(1771911114.756:680): avc: denied { associate } for pid=10504 comm="syz.4.1284" name="285" dev="tmpfs" ino=1538 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 141.794721][T10518] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 141.798205][T10518] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 141.803400][ T40] audit: type=1400 audit(1771911114.796:681): avc: denied { add_name } for pid=10504 comm="syz.4.1284" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 141.812162][ T40] audit: type=1400 audit(1771911114.796:682): avc: denied { associate } for pid=10504 comm="syz.4.1284" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.813731][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1290'. [ 141.977707][T10533] nfs4: Unknown parameter '7@%}V +zS֖*fd-v00Oсzɤ%/h lP0|#u.+}' [ 142.164114][T10541] fuse: Bad value for 'user_id' [ 142.166767][T10541] fuse: Bad value for 'user_id' [ 142.219991][T10544] netlink: 'syz.3.1297': attribute type 9 has an invalid length. [ 142.225682][T10544] netlink: 'syz.3.1297': attribute type 8 has an invalid length. [ 142.225728][ T34] net_ratelimit: 4 callbacks suppressed [ 142.225738][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.228293][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'. [ 142.349856][T10546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.395185][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.502194][ T40] audit: type=1400 audit(1771911115.496:683): avc: denied { remove_name } for pid=6591 comm="syz-executor" name="file0" dev="tmpfs" ino=1543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 142.515209][ T40] audit: type=1400 audit(1771911115.506:684): avc: denied { rmdir } for pid=6591 comm="syz-executor" name="file0" dev="tmpfs" ino=1543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 142.524053][ T40] audit: type=1400 audit(1771911115.516:685): avc: denied { rmdir } for pid=6591 comm="syz-executor" name="285" dev="tmpfs" ino=1538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 142.703521][ T40] audit: type=1400 audit(1771911115.696:686): avc: denied { append } for pid=10554 comm="syz.0.1302" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.713633][ T40] audit: type=1400 audit(1771911115.696:687): avc: denied { append } for pid=10554 comm="syz.0.1302" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.746725][T10551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.754817][T10551] netlink: 'syz.5.1301': attribute type 10 has an invalid length. [ 142.794130][T10561] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1300'. [ 142.861768][T10568] qnx6: unable to set blocksize [ 142.909346][T10571] fuse: Bad value for 'user_id' [ 142.911027][T10571] fuse: Bad value for 'user_id' [ 143.031566][T10595] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1312'. [ 143.048788][ T5935] Bluetooth: hci0: unexpected event for opcode 0x204e [ 143.060013][ T5935] Bluetooth: hci1: unexpected subevent 0x19 length: 24 < 28 [ 143.109049][T10606] tmpfs: Unknown parameter 'L' [ 143.109602][T10605] trusted_key: encrypted_key: master key parameter is missing [ 143.219998][ T8065] syz_tun (unregistering): left allmulticast mode [ 143.265481][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.855626][T10613] netlink: 'syz.5.1318': attribute type 8 has an invalid length. [ 143.998704][T10623] NILFS (nullb0): couldn't find nilfs on the device [ 144.145382][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.305920][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.311360][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 144.315530][T10634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'. [ 144.401518][T10644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.447803][T10646] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.925160][ T833] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 145.087224][ T833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.090576][ T833] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.096017][ T833] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.099701][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.310689][ T833] usb 5-1: usb_control_msg returned -32 [ 145.312759][ T833] usbtmc 5-1:16.0: can't read capabilities [ 145.345647][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.435338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.015454][T10664] netlink: 'syz.0.1335': attribute type 30 has an invalid length. [ 146.071382][T10665] netlink: 'syz.0.1335': attribute type 30 has an invalid length. [ 146.386160][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.465232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.429005][ T6018] net_ratelimit: 2 callbacks suppressed [ 147.429022][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.465748][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 147.501594][T10673] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.506364][T10673] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.509387][T10673] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.511776][T10673] UDF-fs: Scanning with blocksize 512 failed [ 147.515220][T10673] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.518394][T10673] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.521356][T10673] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.523802][T10673] UDF-fs: Scanning with blocksize 1024 failed [ 147.526144][T10673] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.529181][T10673] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.532820][T10673] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.535500][T10673] UDF-fs: Scanning with blocksize 2048 failed [ 147.538060][T10673] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 147.541534][T10673] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 147.544887][T10673] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 147.547776][T10673] UDF-fs: Scanning with blocksize 4096 failed [ 147.549774][T10673] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 147.689971][ T10] usb 5-1: USB disconnect, device number 19 [ 147.733118][T10687] fuse: Bad value for 'fd' [ 148.465503][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.506126][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.905516][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.545657][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.585462][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.985695][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.995475][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.626183][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.665655][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.905764][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.545595][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.705617][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.026369][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.746160][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.786411][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.107437][ T212] veth0_to_bridge: left allmulticast mode [ 157.109386][ T212] veth0_to_bridge: left promiscuous mode [ 157.111697][ T212] bridge0: port 3(veth0_to_bridge) entered disabled state [ 157.126681][ T212] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.130388][ T212] bridge_slave_0: left allmulticast mode [ 157.132223][ T212] bridge_slave_0: left promiscuous mode [ 157.134141][ T212] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.244303][ T212] dvmrp0 (unregistering): left allmulticast mode [ 157.271676][ T212] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 157.274608][ T212] bridge0 (unregistering): left allmulticast mode [ 157.491156][ T212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.494832][ T212] bond_slave_0: left allmulticast mode [ 157.498072][ T212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.501097][ T212] bond_slave_1: left allmulticast mode [ 157.503030][ T212] bond0 (unregistering): Released all slaves [ 157.508531][ T212] bond1 (unregistering): (slave veth3): Releasing active interface [ 157.511511][ T212] bond1 (unregistering): Released all slaves [ 157.518729][ T212] bond2 (unregistering): Released all slaves [ 157.525211][ T212] bond3 (unregistering): Released all slaves [ 157.755405][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.825679][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.873087][ T212] hsr_slave_0: left promiscuous mode [ 157.875357][ T212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.878407][ T212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.938614][ T212] team0 (unregistering): Port device team_slave_1 removed [ 157.950168][ T212] team0 (unregistering): Port device team_slave_0 removed [ 158.865357][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.906173][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.785526][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.945620][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.955311][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.328277][ T40] audit: type=1400 audit(1771911134.326:688): avc: denied { accept } for pid=10725 comm="syz.0.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 161.329157][T10727] gfs2: path_lookup on b::: returned error -2 [ 161.342328][ T40] audit: type=1400 audit(1771911134.336:689): avc: denied { ioctl } for pid=10725 comm="syz.0.1342" path="socket:[43506]" dev="sockfs" ino=43506 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 161.404238][T10731] program syz.5.1345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.421111][T10735] fuse: Unknown parameter 'f$' [ 161.428577][T10735] Bluetooth: hci0: invalid len left 7, exp >= 86 [ 161.472569][ T5938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.485852][ T5938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.491455][ T5938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.497625][ T5938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.501293][ T5938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.508436][ T40] audit: type=1400 audit(1771911134.506:690): avc: denied { bind } for pid=10740 comm="syz.3.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 161.551186][T10747] fuse: Bad value for 'fd' [ 161.675661][T10737] chnl_net:caif_netlink_parms(): no params data found [ 161.720603][T10751] program syz.0.1351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.745474][T10737] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.749595][T10737] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.752844][T10737] bridge_slave_0: entered allmulticast mode [ 161.757035][T10737] bridge_slave_0: entered promiscuous mode [ 161.761834][T10737] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.765334][T10737] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.768386][T10737] bridge_slave_1: entered allmulticast mode [ 161.776855][T10737] bridge_slave_1: entered promiscuous mode [ 161.818307][T10737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.826958][T10737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.871788][T10737] team0: Port device team_slave_0 added [ 161.880791][T10737] team0: Port device team_slave_1 added [ 161.906696][T10737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.909495][T10737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.918671][T10737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.924987][T10737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.927303][T10737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.936785][T10737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.964875][T10737] hsr_slave_0: entered promiscuous mode [ 161.967788][T10737] hsr_slave_1: entered promiscuous mode [ 161.970338][T10737] debugfs: 'hsr0' already exists in 'hsr' [ 161.972226][T10737] Cannot create hsr debugfs directory [ 161.996526][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.055960][ T5957] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 162.095355][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 162.205574][ T5957] usb 10-1: Using ep0 maxpacket: 32 [ 162.211011][ T5957] usb 10-1: too many configurations: 150, using maximum allowed: 8 [ 162.216827][ T5957] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 162.220147][ T5957] usb 10-1: can't read configurations, error -61 [ 162.275089][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 162.278989][ T10] usb 5-1: config 2 interface 0 has no altsetting 0 [ 162.283818][ T10] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 162.287992][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.291439][ T10] usb 5-1: Product: syz [ 162.293293][ T10] usb 5-1: Manufacturer: syz [ 162.295428][ T10] usb 5-1: SerialNumber: syz [ 162.345149][ T5957] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 162.493859][T10737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.495092][ T5957] usb 10-1: Using ep0 maxpacket: 32 [ 162.501769][T10737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.508822][T10737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.509098][T10771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.509196][ T5957] usb 10-1: too many configurations: 150, using maximum allowed: 8 [ 162.511858][ T5957] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 162.519095][T10771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.519987][T10737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.520872][ T5957] usb 10-1: can't read configurations, error -61 [ 162.531190][ T5957] usb usb10-port1: attempt power cycle [ 162.541642][ T10] usb 5-1: USB disconnect, device number 20 [ 162.556393][T10737] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.559570][T10737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.562889][T10737] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.566020][T10737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.615549][T10737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.627987][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.631640][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.650463][T10737] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.660194][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.663325][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.672918][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.676038][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.837701][T10737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.876155][ T5957] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 162.896741][ T5957] usb 10-1: Using ep0 maxpacket: 32 [ 162.898947][ T5957] usb 10-1: too many configurations: 150, using maximum allowed: 8 [ 162.902736][ T5957] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 162.905706][ T5957] usb 10-1: can't read configurations, error -61 [ 162.996256][T10737] veth0_vlan: entered promiscuous mode [ 163.003144][T10737] veth1_vlan: entered promiscuous mode [ 163.021882][T10737] veth0_macvtap: entered promiscuous mode [ 163.026544][T10737] veth1_macvtap: entered promiscuous mode [ 163.036620][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.038674][ T5957] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 163.048071][T10737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.057987][ T5957] usb 10-1: Using ep0 maxpacket: 32 [ 163.058094][T10737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.060733][ T5957] usb 10-1: too many configurations: 150, using maximum allowed: 8 [ 163.074341][ T5957] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 163.075148][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.082314][ T5957] usb 10-1: can't read configurations, error -61 [ 163.083485][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.085674][ T5957] usb usb10-port1: unable to enumerate USB device [ 163.095306][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.104982][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.164429][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.168242][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.180026][T10831] bond0: (slave bridge0): Releasing backup interface [ 163.183680][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.187022][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.204033][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.207665][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.216451][ T40] audit: type=1400 audit(1771911136.206:691): avc: denied { mounton } for pid=10737 comm="syz-executor" path="/syzkaller.qpW1T1/syz-tmp" dev="sda1" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 163.360859][T10844] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.366381][T10844] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 163.370553][T10844] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 163.374046][T10844] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 163.434440][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 163.438269][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1357'. [ 163.442317][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'. [ 163.446399][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1357'. [ 163.515369][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.595271][ T5938] Bluetooth: hci2: command tx timeout [ 163.642092][T10860] binder: 10855:10860 ioctl 8004587d 0 returned -22 [ 163.738292][T10865] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 163.742054][T10865] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 163.749299][T10865] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 163.755086][ T40] audit: type=1400 audit(1771911136.746:692): avc: denied { firmware_load } for pid=10864 comm="syz.0.1362" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 163.783645][ T40] audit: type=1400 audit(1771911136.776:693): avc: denied { ioctl } for pid=10866 comm="syz.4.1363" path="socket:[46255]" dev="sockfs" ino=46255 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.792666][ T40] audit: type=1400 audit(1771911136.776:694): avc: denied { getopt } for pid=10866 comm="syz.4.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 163.922901][ T212] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.067651][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.294078][T10896] tipc: Started in network mode [ 164.296514][T10896] tipc: Node identity a6cfd8dc7279, cluster identity 4711 [ 164.299541][T10896] tipc: Enabled bearer , priority 0 [ 164.303000][T10896] syzkaller0: entered promiscuous mode [ 164.305730][T10896] syzkaller0: entered allmulticast mode [ 164.325955][T10896] tipc: Resetting bearer [ 164.336970][T10895] tipc: Resetting bearer [ 164.350420][T10895] tipc: Disabling bearer [ 164.447156][T10898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 164.447588][ T40] audit: type=1400 audit(1771911137.446:695): avc: denied { setopt } for pid=10897 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.590982][T10909] x_tables: duplicate underflow at hook 1 [ 164.596139][ T40] audit: type=1400 audit(1771911137.596:696): avc: denied { write } for pid=10908 comm="syz.4.1373" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 164.665717][ T40] audit: type=1400 audit(1771911137.666:697): avc: denied { setopt } for pid=10919 comm="syz.4.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 164.684784][T10923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1377'. [ 164.769791][T10928] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 164.904378][T10921] kvm: kvm [10919]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe962 [ 164.912153][T10942] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 164.959022][T10942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.997626][T10946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.007077][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1383'. [ 165.049870][T10951] fuse: Bad value for 'group_id' [ 165.052012][T10951] fuse: Bad value for 'group_id' [ 165.105444][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.470376][T10964] fuse: Unknown parameter 'use00000000000000000000' [ 165.474885][T10965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1391'. [ 165.587178][T10969] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 165.591218][T10969] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 165.594003][T10969] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 165.665275][ T5938] Bluetooth: hci2: command tx timeout [ 165.720038][T10982] new mount options do not match the existing superblock, will be ignored [ 165.721434][T10979] team0: Device gtp0 is of different type [ 165.764684][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'. [ 165.776645][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1399'. [ 165.790652][T10984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.794215][T10984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.797978][T10984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.891064][T10990] fuse: Unknown parameter 'use00000000000000000000' [ 166.099499][T11003] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 166.160080][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.207525][T11011] netlink: 'syz.4.1407': attribute type 4 has an invalid length. [ 166.220508][T11007] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 166.488856][ T6009] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 166.563156][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.635650][ T6009] usb 5-1: Using ep0 maxpacket: 32 [ 166.640100][ T6009] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 166.644622][ T6009] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 166.650245][ T6009] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.654972][ T6009] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 166.663262][ T6009] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 166.671509][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.675144][ T6009] usb 5-1: Product: syz [ 166.677026][ T6009] usb 5-1: Manufacturer: syz [ 166.679095][ T6009] usb 5-1: SerialNumber: syz [ 166.701207][ C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 166.709057][ T6009] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input17 [ 166.937356][ T6009] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 166.940379][ T6009] (id 0x00) [ 166.985279][ T6009] rc_core: IR keymap rc-imon-pad not found [ 166.987328][ T6009] Registered IR keymap rc-empty [ 166.989142][ T6009] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 166.993746][ T6009] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 167.003786][T11047] netlink: 'syz.4.1418': attribute type 10 has an invalid length. [ 167.007900][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.011485][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.022594][T11047] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.024993][T11047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.028262][T11047] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.031329][T11047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.038733][T11047] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 167.079012][T11051] loop8: detected capacity change from 0 to 8 [ 167.085280][T10769] Dev loop8: unable to read RDB block 8 [ 167.087126][T10769] loop8: unable to read partition table [ 167.089062][T10769] loop8: partition table beyond EOD, truncated [ 167.096654][T11051] Dev loop8: unable to read RDB block 8 [ 167.099024][T11051] loop8: unable to read partition table [ 167.101581][T11051] loop8: partition table beyond EOD, truncated [ 167.104247][T11051] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 167.129208][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 167.129242][ T40] audit: type=1400 audit(1771911140.126:701): avc: denied { remount } for pid=11048 comm="syz.5.1419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 167.135878][ T6009] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 167.146247][ T6009] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input18 [ 167.153146][ T6009] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:21> initialized [ 167.182815][T11051] Dev loop8: unable to read RDB block 8 [ 167.185819][T11051] loop8: unable to read partition table [ 167.188660][T11051] loop8: partition table beyond EOD, truncated [ 167.191226][T11051] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 167.314250][T11054] imon:display_open: display port is already open [ 167.337652][ T34] usb 5-1: USB disconnect, device number 21 [ 167.339897][T11057] binder: 11056:11057 unknown command 0 [ 167.342768][T11057] binder: 11056:11057 ioctl c0306201 200000000300 returned -22 [ 167.388526][T11057] tipc: Started in network mode [ 167.393825][T11057] tipc: Node identity ac1414aa, cluster identity 4711 [ 167.397738][T11057] tipc: New replicast peer: 10.1.1.2 [ 167.400602][T11057] tipc: Enabled bearer , priority 10 [ 167.415768][T11060] fuse: Unknown parameter 'user_i00000000000000000000' [ 167.533624][ T40] audit: type=1400 audit(1771911140.526:702): avc: denied { read } for pid=11068 comm="syz.0.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.583129][T11075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.688664][ T40] audit: type=1400 audit(1771911140.686:703): avc: denied { ioctl } for pid=11068 comm="syz.0.1426" path="socket:[45565]" dev="sockfs" ino=45565 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.808329][T11079] overlayfs: overlapping lowerdir path [ 167.812412][T11079] overlayfs: overlapping lowerdir path [ 167.900346][T11084] fuse: Unknown parameter 'user_i00000000000000000000' [ 167.992537][T11086] dlm: non-version read from control device 0 [ 168.214231][T11119] : renamed from vlan0 (while UP) [ 168.230204][ T34] net_ratelimit: 4 callbacks suppressed [ 168.230219][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.300969][T11107] binder: 11104:11107 ioctl c0306201 200000000640 returned -22 [ 168.510739][T11129] __nla_validate_parse: 5 callbacks suppressed [ 168.510751][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'. [ 168.521977][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'. [ 168.528481][ T5957] tipc: Node number set to 2886997162 [ 168.636349][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.731422][T11148] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 168.950338][ T5938] Bluetooth: hci2: command tx timeout [ 169.097784][T11180] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1460'. [ 169.103711][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1460'. [ 169.253799][ T5957] e1000 0000:00:06.0 eth0: Reset adapter [ 169.266286][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.276126][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.366329][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 169.440323][T11198] kvm: emulating exchange as write [ 169.627253][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 169.631049][T11211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1466'. [ 170.306276][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.346312][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.426609][ T5957] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 172.315535][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.389010][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.425650][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.467456][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.026273][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.036214][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.505491][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.825361][ T5938] Bluetooth: hci0: command 0x1407 tx timeout [ 176.545568][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.595657][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.066139][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.625760][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.865540][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 179.665596][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.146162][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.707517][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.746789][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.065649][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.719090][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.795422][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.909715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 182.909740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 182.909919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.012102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.012282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.114594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.114648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.954474][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.996384][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.400853][ T1463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.912577][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.473678][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.751542][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1480'. [ 186.767231][T11282] syz_tun: entered promiscuous mode [ 186.769865][T11282] macvtap1: entered promiscuous mode [ 186.772098][T11282] macvtap1: entered allmulticast mode [ 186.774391][T11282] syz_tun: entered allmulticast mode [ 186.916469][ T40] audit: type=1400 audit(1771911159.896:704): avc: denied { watch } for pid=11286 comm="syz.0.1479" path="/409/file0" dev="tmpfs" ino=2196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.926052][ T40] audit: type=1400 audit(1771911159.896:705): avc: denied { watch_sb } for pid=11286 comm="syz.0.1479" path="/409/file0" dev="tmpfs" ino=2196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 187.784726][ T6018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.131585][T11297] ------------[ cut here ]------------ [ 188.133664][T11297] enable_ept && !allow_smaller_maxphyaddr [ 188.133674][T11297] WARNING: arch/x86/kvm/vmx/vmx.c:5444 at handle_exception_nmi+0xa6e/0x1bb0, CPU#2: syz.3.1483/11297 [ 188.139686][T11297] Modules linked in: [ 188.141559][T11297] CPU: 2 UID: 0 PID: 11297 Comm: syz.3.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.146655][T11297] Tainted: [L]=SOFTLOCKUP [ 188.148724][T11297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.152337][T11297] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 188.154560][T11297] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d b6 ac 39 0f 31 ff 44 89 ee e8 e1 fc 68 00 45 84 ed 0f 85 b5 0e 00 00 e8 83 02 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 25 fd 68 00 45 85 e4 0f 85 7f 0b 00 00 [ 188.162920][T11297] RSP: 0018:ffffc900035cf9d8 EFLAGS: 00010287 [ 188.165691][T11297] RAX: 0000000000076577 RBX: ffff88804948a9c0 RCX: ffffc9000dc21000 [ 188.168535][T11297] RDX: 0000000000080000 RSI: ffffffff819f9cdd RDI: ffff88802daba480 [ 188.171321][T11297] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 188.174297][T11297] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 188.178067][T11297] R13: 0000000000000000 R14: ffff888035681000 R15: ffff88804948aa98 [ 188.181757][T11297] FS: 00007f293c7b36c0(0000) GS:ffff8880d654a000(0000) knlGS:0000000000000000 [ 188.185170][T11297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.187491][T11297] CR2: 000000000f6632eb CR3: 00000000519fe000 CR4: 0000000000352ef0 [ 188.190507][T11297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000020 [ 188.193767][T11297] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 188.197431][T11297] Call Trace: [ 188.199096][T11297] [ 188.200529][T11297] ? __pfx_handle_exception_nmi+0x10/0x10 [ 188.203272][T11297] vmx_handle_exit+0x84d/0x1f40 [ 188.205434][T11297] vcpu_run+0x34cf/0x5ca0 [ 188.206995][T11297] ? __pfx_vcpu_run+0x10/0x10 [ 188.208747][T11297] ? rcu_is_watching+0x12/0xc0 [ 188.210501][T11297] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 188.213231][T11297] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 188.215859][T11297] kvm_vcpu_ioctl+0x730/0x1730 [ 188.218095][T11297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.220504][T11297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.223302][T11297] ? do_vfs_ioctl+0x226/0x13e0 [ 188.225127][T11297] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 188.227399][T11297] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 188.229942][T11297] ? __fget_files+0x215/0x3d0 [ 188.231699][T11297] ? hook_file_ioctl_common+0x146/0x410 [ 188.233770][T11297] ? selinux_file_ioctl+0x139/0x290 [ 188.236195][T11297] ? selinux_file_ioctl+0xb4/0x290 [ 188.238500][T11297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.240869][T11297] __x64_sys_ioctl+0x18e/0x210 [ 188.243025][T11297] do_syscall_64+0x106/0xf80 [ 188.245313][T11297] ? clear_bhb_loop+0x40/0x90 [ 188.247447][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.249835][T11297] RIP: 0033:0x7f293b99c629 [ 188.251461][T11297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.258560][T11297] RSP: 002b:00007f293c7b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.261575][T11297] RAX: ffffffffffffffda RBX: 00007f293bc16090 RCX: 00007f293b99c629 [ 188.264439][T11297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 188.267419][T11297] RBP: 00007f293ba32b39 R08: 0000000000000000 R09: 0000000000000000 [ 188.270951][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.274524][T11297] R13: 00007f293bc16128 R14: 00007f293bc16090 R15: 00007ffe489152a8 [ 188.278127][T11297] [ 188.279550][T11297] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 188.282797][T11297] CPU: 2 UID: 0 PID: 11297 Comm: syz.3.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.287660][T11297] Tainted: [L]=SOFTLOCKUP [ 188.289361][T11297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.292959][T11297] Call Trace: [ 188.294231][T11297] [ 188.295316][T11297] dump_stack_lvl+0x100/0x190 [ 188.297072][T11297] vpanic+0x552/0x970 [ 188.298527][T11297] ? __pfx_vpanic+0x10/0x10 [ 188.300217][T11297] panic+0xd1/0xe0 [ 188.301588][T11297] ? __pfx_panic+0x10/0x10 [ 188.303253][T11297] check_panic_on_warn.cold+0x19/0x34 [ 188.305216][T11297] ? handle_exception_nmi+0xa6e/0x1bb0 [ 188.307184][T11297] __warn.cold+0x191/0x348 [ 188.309100][T11297] __report_bug+0x296/0x3d0 [ 188.311158][T11297] ? handle_exception_nmi+0xa6e/0x1bb0 [ 188.313619][T11297] ? __pfx___report_bug+0x10/0x10 [ 188.315885][T11297] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 188.318670][T11297] ? kvm_pmu_trigger_event.isra.0+0x789/0xc00 [ 188.321404][T11297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.324057][T11297] ? handle_exception_nmi+0xa6e/0x1bb0 [ 188.326513][T11297] report_bug+0xb2/0x220 [ 188.328434][T11297] ? handle_exception_nmi+0xa6e/0x1bb0 [ 188.330868][T11297] handle_bug+0x166/0x2a0 [ 188.332827][T11297] exc_invalid_op+0x17/0x50 [ 188.334885][T11297] asm_exc_invalid_op+0x1a/0x20 [ 188.337083][T11297] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 188.339808][T11297] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d b6 ac 39 0f 31 ff 44 89 ee e8 e1 fc 68 00 45 84 ed 0f 85 b5 0e 00 00 e8 83 02 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 25 fd 68 00 45 85 e4 0f 85 7f 0b 00 00 [ 188.347659][T11297] RSP: 0018:ffffc900035cf9d8 EFLAGS: 00010287 [ 188.350009][T11297] RAX: 0000000000076577 RBX: ffff88804948a9c0 RCX: ffffc9000dc21000 [ 188.353569][T11297] RDX: 0000000000080000 RSI: ffffffff819f9cdd RDI: ffff88802daba480 [ 188.357071][T11297] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 188.360644][T11297] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 188.364279][T11297] R13: 0000000000000000 R14: ffff888035681000 R15: ffff88804948aa98 [ 188.367981][T11297] ? handle_exception_nmi+0xa6d/0x1bb0 [ 188.370604][T11297] ? handle_exception_nmi+0xa6d/0x1bb0 [ 188.373270][T11297] ? __pfx_handle_exception_nmi+0x10/0x10 [ 188.376017][T11297] vmx_handle_exit+0x84d/0x1f40 [ 188.378408][T11297] vcpu_run+0x34cf/0x5ca0 [ 188.380563][T11297] ? __pfx_vcpu_run+0x10/0x10 [ 188.382851][T11297] ? rcu_is_watching+0x12/0xc0 [ 188.385192][T11297] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 188.387934][T11297] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 188.390631][T11297] kvm_vcpu_ioctl+0x730/0x1730 [ 188.392970][T11297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.395241][T11297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.397556][T11297] ? do_vfs_ioctl+0x226/0x13e0 [ 188.399319][T11297] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 188.401164][T11297] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 188.403645][T11297] ? __fget_files+0x215/0x3d0 [ 188.405370][T11297] ? hook_file_ioctl_common+0x146/0x410 [ 188.407371][T11297] ? selinux_file_ioctl+0x139/0x290 [ 188.409266][T11297] ? selinux_file_ioctl+0xb4/0x290 [ 188.411124][T11297] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 188.413069][T11297] __x64_sys_ioctl+0x18e/0x210 [ 188.414842][T11297] do_syscall_64+0x106/0xf80 [ 188.416550][T11297] ? clear_bhb_loop+0x40/0x90 [ 188.418254][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.420389][T11297] RIP: 0033:0x7f293b99c629 [ 188.421999][T11297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.429774][T11297] RSP: 002b:00007f293c7b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.432862][T11297] RAX: ffffffffffffffda RBX: 00007f293bc16090 RCX: 00007f293b99c629 [ 188.435731][T11297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 188.438565][T11297] RBP: 00007f293ba32b39 R08: 0000000000000000 R09: 0000000000000000 [ 188.441429][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.444951][T11297] R13: 00007f293bc16128 R14: 00007f293bc16090 R15: 00007ffe489152a8 [ 188.448771][T11297] [ 188.451016][T11297] Kernel Offset: disabled [ 188.453121][T11297] Rebooting in 86400 seconds..