last executing test programs: 6m36.219844438s ago: executing program 1 (id=122): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000100}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff008a36000000000000000000000008001c00cd000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000020300000000000000010000840000000400000000010000000e0000000000000000000004"], 0x0, 0x4a}, 0x20) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffff8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x1, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0xffffffff, 0x2000, 0x109, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0xfffffffd, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x8000, 0x2000002, 0x20, 0x0, 0xfffffffe, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x8000000, 0x3c63, 0x9, 0x0, 0x0, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0xb5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffedb6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x7, 0x0, 0xe, 0x2245, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003000)={{r4}, &(0x7f0000002ec0), &(0x7f0000002fc0)=r5}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5, r4}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "6962b9ab41289230a29e7855c8c19caf5d2cf62581b6a49c93dd9c6a84bb6551", "bcba4bfb6a5fb37fa2ebdc704096371b01f201c16828c4b6bc0679a731e0f78f", "51504326588355baaac0e5c0ba4b80dc99a5cd44b4e3d7c681bb6ae4eca16e05", "ef08a8cccdbf4e87505732cb65744e9b1f83f9a48059cc2312069f039e53bebd", "e3ab2cff89e4a7147aa122fda24bc215f7ee41ebeef4d0e84c60690732ad9c5b", "ec8899b8a0a61022e12593f5", 0x1, 0x4, 0xe9a2, 0xb, 0x5bbc}}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = timerfd_create(0x8, 0x0) timerfd_settime(r9, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lc\x00', 0x1, 0x9d3f, 0x6a}, 0x2c) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m36.091803416s ago: executing program 1 (id=123): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000050000/0x4000)=nil, 0x4000}, 0x6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m36.041198733s ago: executing program 1 (id=124): mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000440)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}, 0x3a}], [], 0x2f}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x4000001) r1 = accept(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) sendmsg$AUDIT_USER(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0xa8, 0x3ed, 0x10, 0x70bd2c, 0x25dfdbfe, "a75a84377075fad701b5e2ace7aac214e8ee60ae2eb1826d37cccf2734e6163cd555f8e5e0ab324120df2b31589edf7c71832a55f15546a1c47f4ac3a1e3e1e8f94de3e2f54f8dc2315fcdbc1e65b0f891e4ab37616820b49dcfe876a94a3c614f807ab4e6edb5a135feb3044a83bdf7025c9cb0f53d3e5188d77055bbb4604cd3377da15e46bc15818138242136150532a1e5bbb15dea54", ["", ""]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 6m35.980580258s ago: executing program 1 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00005ed000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=relative'}}}]}) 6m35.601358742s ago: executing program 1 (id=133): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r0, &(0x7f0000002140)=ANY=[@ANYBLOB="100000000000000005ee80886d46369f"], 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000021c0), 0x404001, 0x0) (rerun: 32) write$P9_RSTAT(r2, &(0x7f0000002280)={0xdc, 0x7d, 0x1, {0x0, 0xd5, 0x4, 0xd, {0x2, 0x2, 0x6}, 0x24110000, 0x8, 0x4, 0x6, 0x97, '%\x80k\xc3]v\x8d.\t\x9b\x03\x8a\xb9\xd5Q\x0e\xd5\t\xf7\xab\x022\x0e\xeb\x9c\xf5b\x9a\xd8\x83\xbd\xfb\xed8\xd6\xd8\x9fT\xe4\x98\xfc\xcf\xbc\xb5\xee\xd4+\xb0\xc5tQ\a\x0f\xcc\x93-\x82\xd5\x01w\x84\x9c\x06Yf1\x9doT\xb1\x82\xde\xf7\xc9\xf0\xc4\xa8cN\xd5\xd2\x8fX\x97Tz\x87\xf3\x12\xd0>\x0f*q\xe7\xdekz\x9a\xa2\'\xfdz\xa4!\xbf\xe1\x06R\x00\'\xe4\x0e\xda\x8f\xa2\xadZ\x1a\xc6R\xe4\xdffe&\xe9\xb8\xdf\xfc\xaf\x83N\xbf\xc7\xb6\xa7*\x0eTW=\xa7\x03\f.\x00\x00\xec\x11W', 0x1, '\x00', 0x7, 'status\x00', 0x3, '.:\\'}}, 0xdc) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', &(0x7f0000002180)={0x4000, 0xc4, 0x4}, 0x18) fanotify_mark(r1, 0x1, 0x4000003e, r3, 0x0) (async) getitimer(0x2, &(0x7f0000000000)) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) (async) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/456], 0x1c8) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') 6m35.520261376s ago: executing program 1 (id=137): creat(&(0x7f00000000c0)='./file0\x00', 0xc5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x73, 0x6, 0x8, 0xb, 0x10000, 0x81}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x41}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x254600, 0x41, 0x12}, 0x18) 6m20.437780632s ago: executing program 32 (id=137): creat(&(0x7f00000000c0)='./file0\x00', 0xc5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x73, 0x6, 0x8, 0xb, 0x10000, 0x81}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x41}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x254600, 0x41, 0x12}, 0x18) 5m21.901313755s ago: executing program 2 (id=725): userfaultfd(0x80801) (async, rerun: 32) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r1, 0x7}}, 0x48) (async, rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) lseek(r3, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 5m21.736116504s ago: executing program 2 (id=729): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x0, 0x21) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) write(r1, &(0x7f0000000200)="000000001200fbe40a000000020000000000cb7d7d61c8850b986141ea1530c70630e005650913b0715b82fa1642e9a3ebb123a9960188f5da7d1d42b2a18ccfbe5ab80aaad0bae15a1f7db5adda5880a1e8ab900d2957992a123ff5dd461c8ed1f02bf4a3e61d18ae5b", 0xff65) write(r0, 0x0, 0x66) 5m21.651516038s ago: executing program 2 (id=730): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, &(0x7f0000000000)={0xa00}) (async, rerun: 64) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000100)=0xe000) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000000e458a187159f12966fb00200000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000240012800b0001006272696467650000140002800800050001000000080001001c000000"], 0x44}}, 0x0) 5m21.338410156s ago: executing program 2 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000002880)=@known='system.posix_acl_default\x00', 0x0, 0x0) 5m21.15633648s ago: executing program 2 (id=736): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002080)={0x50, 0xffffffffffffffda, r1, {0x7, 0x2d, 0x2451, 0x10006a81, 0xfffa, 0x3, 0x10, 0x1ff, 0x0, 0x0, 0x0, 0x3}}, 0x50) (async) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000002100)={0xd4134d8da75a3cf4, 0xc0, 0x3, 0x6, 0x8001}) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', &(0x7f0000002180)={0x3c16c0, 0x10, 0x4}, 0x18) mkdirat(r2, &(0x7f00000021c0)='./file0\x00', 0x113) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000002200)={0xa, 0x0, 0x0, @private1}, &(0x7f0000002240)=0x1c, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000002380)={r3, &(0x7f0000002280)='/dev/cuse\x00', 0x101000, &(0x7f00000022c0)={@_ha_fsid={[0xff, 0x6a5]}, {0x5, 0x4, 0x6, 0x6}}, 0x1, &(0x7f0000002300)={@_ha_fsid}, &(0x7f0000002340)=0x8}) renameat2(r2, &(0x7f00000023c0)='./file0\x00', r2, &(0x7f0000002400)='./file0\x00', 0x3) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0/file0\x00', &(0x7f0000002480)={0x8040, 0x48, 0x1f}, 0x18) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002540)={'team0\x00', 0x0}) (async) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000002580)={@private0, 0x0}, &(0x7f00000025c0)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000002600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002640)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000002780)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002740)={&(0x7f0000002680)={0x8c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8001}, 0x24080) (async) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000027c0), 0x202, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r9, 0x80044dfe, &(0x7f0000002800)) (async, rerun: 32) syz_open_dev$sndmidi(&(0x7f0000002840), 0x8000000000000001, 0x101a00) (async, rerun: 32) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) write$FUSE_INIT(r10, &(0x7f00000028c0)={0x50, 0x0, r1, {0x7, 0x2d, 0x5bf6, 0x2000, 0x8000, 0x1000, 0x2, 0xf, 0x0, 0x0, 0x1, 0x30a09842}}, 0x50) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000029c0)={{r9, 0xffffffffffffffff}, &(0x7f0000002940), &(0x7f0000002980)='%pS \x00'}, 0x20) (rerun: 64) ioctl$NILFS_IOCTL_GET_CPSTAT(r11, 0x80186e83, &(0x7f0000002a00)) syz_open_dev$dri(&(0x7f0000002a40), 0x4, 0x121481) (async) io_setup(0xeaff, &(0x7f0000002a80)=0x0) r13 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) io_cancel(r12, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x8, 0x9646, r13, &(0x7f0000002b00)="2ee0353a09b0bd1973ef7fab6ad33c3d65ec85ac79060f8a28711ddb63118729ff158335ebecfe712cafa6285307422bfab180205b0ad92affc2b026b2931d77e73f34cfd260181198b82502630db7afdbf3b4b248f5949d500a8b46f636761a46bbb85ca4709c36e01b4c5e20492de8b2b5010ae6df8ae231438e42e2fab2141c162a8abd23eb32a05da4ee054a0e10a7a631bbd0a270844a69115da30e4dea6563d8d47fa0c23b946dffee96c746acc51e392dd0b186052861386840a7273b99727a4e33a04f27d9a8567242dbc5694fd96ea2741e13effb5ea6a67fb814d89bfa4295dda8d111c77948e2cbc5d87a", 0xf0, 0x8, 0x0, 0x1, r3}, &(0x7f0000002c40)) (async) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000002c80)=0x87, 0x4) (async, rerun: 32) write$P9_RREMOVE(r13, &(0x7f0000002cc0)={0x7, 0x7b, 0x2}, 0x7) (async, rerun: 32) bind$netlink(r4, &(0x7f0000002d00)={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) 5m20.791348238s ago: executing program 2 (id=743): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100), 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010027bd78ecd0d6dd8d1756b249"], 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x40804) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r5, 0x0, &(0x7f00000001c0)) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="581000002fb53f3eebc29eb4987f11371595417205e5c4da00"/35, @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040050000400"], 0x58}, 0x1, 0x1000000}, 0x24040840) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="581000002fb53f3eebc29eb4987f11371595417205e5c4da00"/35, @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040050000400"], 0x58}, 0x1, 0x1000000}, 0x24040840) socket$inet6(0xa, 0x3, 0x4) ioctl$COMEDI_SETRSUBD(r0, 0x6410) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000080)=0xa) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000080)=0xa) 5m20.706439982s ago: executing program 33 (id=743): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100), 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010027bd78ecd0d6dd8d1756b249"], 0x14}, 0x1, 0x0, 0x0, 0x4004801}, 0x40804) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r5, 0x0, &(0x7f00000001c0)) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="581000002fb53f3eebc29eb4987f11371595417205e5c4da00"/35, @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040050000400"], 0x58}, 0x1, 0x1000000}, 0x24040840) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="581000002fb53f3eebc29eb4987f11371595417205e5c4da00"/35, @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040050000400"], 0x58}, 0x1, 0x1000000}, 0x24040840) socket$inet6(0xa, 0x3, 0x4) ioctl$COMEDI_SETRSUBD(r0, 0x6410) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000080)=0xa) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r4, 0x40086e81, &(0x7f0000000080)=0xa) 4m20.218435671s ago: executing program 4 (id=1251): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = socket(0x1e, 0x4, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4m19.786712798s ago: executing program 4 (id=1252): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e0000000b0020"], 0x58) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x3b, 0x30, 0x2}, &(0x7f0000000300)=0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m19.591184184s ago: executing program 4 (id=1253): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340), 0xffff, r1}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)}}], 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m19.200744513s ago: executing program 4 (id=1257): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x23e8, 0x3}}) 4m19.089150705s ago: executing program 4 (id=1258): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a0000000000000600"], 0x30}}, 0x4090) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) syz_init_net_socket$ax25(0x3, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 4m18.961145281s ago: executing program 4 (id=1259): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r0) memfd_create(0x0, 0x1) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, 0x0, 0x1b, 0x5f005e4c1fdd0237) msgrcv(0x0, 0x0, 0x0, 0x3, 0x800) socket$netlink(0x10, 0x3, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0xe1, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x7fffffff, 0x4, 0x7ffd]}) 4m3.558161369s ago: executing program 34 (id=1259): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(r0) memfd_create(0x0, 0x1) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'syz_tun\x00', 0x1}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) msgsnd(0x0, 0x0, 0x1b, 0x5f005e4c1fdd0237) msgrcv(0x0, 0x0, 0x0, 0x3, 0x800) socket$netlink(0x10, 0x3, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0xe1, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x7fffffff, 0x4, 0x7ffd]}) 2m37.377051733s ago: executing program 3 (id=1977): openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000080)=[{r0}, {r0}, {r0, 0x869e9c56f58d4429}], 0x3, 0x4) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 2m37.337765437s ago: executing program 3 (id=1979): syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x6, 0x4c0140) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6629}, &(0x7f0000000140)=0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000001380)) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e0102030109022400"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) 2m34.29040547s ago: executing program 3 (id=2004): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1142}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1000}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4f9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x278}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x131b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x99a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9f3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20014084) 2m34.230630995s ago: executing program 3 (id=2005): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000018c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x72c15d29, 0x12) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000100), 0x100000000007, 0x42) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0xfffffffd, 0xb77, 0x2015, 0x0, 0x3, 0x2, 0x2, 0xa4de36948e08189d}}) 2m34.230172971s ago: executing program 3 (id=2006): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prctl$PR_CAPBSET_DROP(0x18, 0xf) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000980)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRES64, @ANYRES8=r2, @ANYBLOB="0a0004000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) ioctl$TUNSETLINK(r4, 0x400454cd, 0x304) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'rose0\x00', @random="30aa97d61147"}) 2m33.900230557s ago: executing program 3 (id=2010): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) read$FUSE(r2, &(0x7f0000000e40)={0x2020}, 0x2020) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000ffffff8700000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000f18d50001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c04"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m18.848013093s ago: executing program 35 (id=2010): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) read$FUSE(r2, &(0x7f0000000e40)={0x2020}, 0x2020) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000ffffff8700000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000f18d50001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c04"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m1.220086303s ago: executing program 5 (id=2981): syz_open_dev$media(&(0x7f0000000000), 0x8, 0x840) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x840) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) recvmsg(r3, &(0x7f0000001480)={&(0x7f0000000140)=@pppol2tp, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/86, 0x56}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/240, 0xf0}], 0x3, &(0x7f0000001380)=""/221, 0xdd}, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001540)=[@text64={0x40, &(0x7f00000014c0)="66ba4300ec0f30440fb7edb8010000000f01d9c7442400f77f0000c744240206000000c7442406000000000f011c24400f00dc0fb17118c744240044000000c744240222000000ff1c24450f01c448b801000000008000000f23d80f21f835c00000e00f23f8", 0x66}], 0x1, 0x5, &(0x7f0000001580)=[@vmwrite={0x8, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3, 0x0, 0x8001}], 0x1) r6 = syz_open_dev$media(&(0x7f00000015c0), 0x4, 0xa4a00) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001cc0)={0x0, 0x6, 0x0, &(0x7f0000001600)=[{}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000001840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000001a80)=[{}, {}, {}, {}], 0xa, 0x0, &(0x7f0000001b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001cc0)={0x0, 0x6, 0x0, &(0x7f0000001600)=[{}, {}, {0x80000000}, {}, {}, {}], 0x5, 0x0, &(0x7f0000001840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000001a80)=[{}, {}, {}, {}], 0xa, 0x0, &(0x7f0000001b00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002280)={0x0, 0x5, 0x0, &(0x7f0000001d40)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000001f40)=[{}, {}, {}], 0x5, 0x0, &(0x7f00000020c0)=[{}, {0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}], 0x5, 0x0, &(0x7f0000002180)=[{}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002700)={0x0, 0x3, 0x0, &(0x7f0000002300)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000002440)=[{}, {}], 0x9, 0x0, &(0x7f0000002540)=[{}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000002680)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000002840)={0x80000000, &(0x7f0000002780), &(0x7f00000027c0)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000002840)={0x80000000, &(0x7f0000002780), &(0x7f00000027c0)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f0000002880)={{r7, r8, 0x2, [0xd38, 0x36]}, {r9, r10, 0x0, [0x3, 0x6]}, 0x0, [0x10001, 0x7]}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000028c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000002980)={{r3}, r11, 0xe, @inherit={0x60, &(0x7f0000002900)={0x1, 0x3, 0x0, 0x0, {0x0, 0x8000000000000000, 0x0, 0xb, 0x2}, [0x4, 0x1000, 0x5]}}, @name="5ce7f44fce740fc23ade641fa5287b6ce9f213eebf787d550194053b7ae5bb94d76fadbd80e761a503c90e9a00c515114fe86ad9dd84f098a593498f5d9fcf4156fa3dc871c6552db341337264b1f64b356a8aa738dcd46a8924332b4933bb6ef92cafd164ca37056168987d7a3bbc00e752ef99a45fee260734d2a4f81f789a26598f8e8bf068a6b3e4a1257912f1a21b1f456e28467389f558285a512759b137999d6f4b14e960401dce842865b0afe2de6f4316fd85287026fa40879c5d2bae535f30d759516cb916b0f6d121ec4012f59ef96393a23a5b910590d24b460705d71a0f5ea54a47668ba499d2bdd5e6a035eed85461cd128d06e1fbdbc9187effb90f3b72d7a19e20b4a28545b266fa5d025e3a4b57a0a7bb807fbcaf90e732be7c58f7b79a66650b503d7771a48e33e97296b6762dafcc1ace4bd19c2429c276fc4972ca32d8348a7d18416738332158674bae3648b32042f5cab0c25bc353ad4745c1a6cbbc035c3c2729968aed9d71693745b0609c3cd3ad3482829dae69e2f6b6272048c92655df29a9b8df331c82ca86e4034ab0ac175e04af28af1300c7e4dc338c2f42bd7cd4c21e08863cc55ade6954a4019d9da4507a23914caa30a93230a5629f5c7b7422b21bb63baa0ca01c927f6b2af11424d26ac6c16937fd9d521e55ced3134f147f5473dc4d5a174d72ddb61d64b2485fe02ad6f24437bd0608ec75930a8b0911c54a199396da5dfc992cb66c587c3ab4b66c1f0ef2ca4158dd559878e4d268a375c57abce712ebabe6147975ec55645e21db96f6ed328d0b5763d7bfe1707e9807096beb7a49f69cd051c06c678283faf906eb1630638f094db61a23460aedfea61570d93ec7ac46c036043a2320bd986277a20f521ec40c1e26b82c1205a006e148354798aefd514ccf94ac11e06eba9e6f864987218916bf93f8aa587764ee4bd168601ffb496a528b1410619acce1b0000b52c4f536f20aafce1fdb07fe053ccdf45e4d4d928299cbd40550c664af47c6ab3b2ed6d1652fab1d70d3d0a4f9c5f7e4d8b30b531de2c1479b415c08a83cd9a59a36ff92b0eae129cb07c4f3652e64523ba2f31a9b754c02731832fc2f0b06d2b6f1c289b15bc90410bec4355164ad3e40fa33dd36f6d7b92c1b1f2ef9a80597c502ef18c2c5f6721fbf34bbf002bbad53cbd4d3c3fa2fb8388cf3fd847a03e43403f849afac0bc4970d06a3389d7f4b9d7d2ac19267870171c3eec66e7e63c400c07086299fb8ed9ea1892b0ed6d9e8479d860837a3d59de5dcde1f6e51b2e459705b25f99bbe9ac784466aebd2e0d7bf7ca879f1626ec9405d78b959b8fb93c32372a891af1432dfcc64f60809d997964061679f2a4f602ebb17daac3abe50910cb62f8838c0ec1cce761b44d8f07e8a6e4b599ceb14ae682180e803fd742094ecb3d338f9164d77defed9dd6a5be22bd7fc59701a3e852a68a46943df51f69fe6d29c4ccb1baea2cf94a71ee226bd0e61fd62a643db352e01d2e908bc2b6fa778f8d030554ca58d3f6a33ad4d1be2e51f1a3c8a9f7c13d7d207939c1ad8adf18a89dadcaf6fc3c2c49604c3ce93977b0f61f4e3dc63781c1448ba5aa5bc8d3d68bf829ee80000e6442b913c33f81fac13ac1b6c3d192dd9f306e74dea6ccfd6792b915f9b7a947e565a772778bc9e5ea367f7f64b5b2b024a084064f2bdf607220cb2c6a77d91104b4b77606e29d5d18bd0b969c7b44e56008afd5880abe8e9b5046e86c5e37c72345b1dbcf46f06e9400a077c58cd6cfdfc3c31bab35f3906abf862192fe3be06e0856e33d565d43f90351e25c30e27ae11abdf89de76ada6200dee6320e95e613167a9a611d4af43ec785435179f20ff683343efe58d61ece432629251614c09ffa6cbae00a10322b2cc15b2f19ce7e7ea48127087f3b618e4b2cb266bc8471a9cc56dc2016d1450e5a4255028b1e2dcf5c0c610caa04a883e991250ade07337e14a9a1e07e3fd877045f57975a12c1b0672253a42cbbd229b2b6ee162b038ec0eaff6ea0997bf9baa4dee8b8f53b3217254def12b5df0a257ed16a4020ff33908ed41dde33e5a7332e39e194ea9ee55fe11baf5c33329954211f95821b453f0df2c98d33269f2866fbd3c125b62c9585154ca6e6fd8c977446604a33bf395f1446728039a8a1eb6af25eac488f8231c7f9adf272f6829f8b238c6ce39f6eef41308b3e962750ced0887ac18b2801819780c13e3656265bcfa1c018df604bcef7684781cdf6418d0373ece4da6ffca6d8ae8aac8222035f0d685040fc93e13c6e5c3257dcb691e8d143d22e665f1f3b0bf05094c13f70dfb2281f1f06cd753b2709cdfa83687aeab85a13f562ce20f7509ca525649768a757f40764bc51a2e6b86391f735624b0dd3cd8b50e5e76870bf4a14c11c3b6894a2484299dfb531677b77618ad85c2d800034bd0f2077a2c0782c247e69a717bc232b582861a4f9032818f4deeeee3e03c425e7e37714f8e46f6c6798240013f6cb1001cd78cefe11fb2c97b422b0d376cde3b5c4ffe66f5dffa84cc1bc0909241c261ec91411a086e68f6fa4e50043ab4c96ba28e82884cee7e106134944b5fc1f2770d72fc2ef34c7596c807536b4ba6c70298595b6302b82ba73e2b7c196ac4c99958fd306506aaf3f91c7f2ef760c525f4abc71ef1ed2571c54c04f379103f9b03a042cfc352251868ab1b20c33af97377b609908dd7bce6b48cc536987393dde73391b778ec0f1cd57852f74d993d4195f368e8ad0219b399aaa7660c3c949007ff21d6a69123d161644d7ed7066eef4ad5524edd2f0b387d86e24ecf4b169a159c7dd37bb10e521ce14fc997f9ec08282ef728476a96a4a7ca8fb9ac057b68b040e1e7aa3b9cf6edb1821aff9deaba9f8cac2b3f10537391bba79f1caf8e5af5e05e5ff1a0fdcc3c62b0591b04c425617b3a3b3070067f22ecbe817a9a7dc5c2c4c442d5782b1a17e4939e87d1ce7e2f8969d5c58744a13f0537e01ce38f0ccba5d34df055462054aad8b69acf1ae9b35ee1f653828544d2204be857f013feecc2e5bd0de5002d25aeaf7a006719c7471c53c3e8ddcb312b4c117d868035167405ac0d4d7c4d405ed06c294e69abd2ac35da9181e676f7c69e9b732d3d6fc345a5bda7fb73e7dcd9167610859a51d2b2ee6413ca565029daae77448cd229f0e03b412aa2909fa81825bd69fc7ad1b8d96cc860e2f1bbd8a4732bc5540c792d7f73f41257b3f0d0c41b20b3698a42541ebe9e576fb5303e43fe7439a44ac26ee33c88ff41b7c8ca8b3e4169781cb3da2be8e7d98bf922bf1422fc21d5de3779a7e7958acb62f196cd10dba162b7dcdb44f93513d11c6ff2949a2494def482cf9b061658b6e43a0e1d8130451889c2cb691aa33a42cf50caec706b6948dc927bd545a0fbffc2eb7c3f21714f230bb97ea07a456d09fb64118e5943fbd9c25a90d5ba1882b6355261f9339f7cc82c4737aece60100f06a8f47f894d85941232442baa6540972bda6f1346cc93d3f263646e0dc3ae9420e5ad29de0aef21c4355472f5bd2865ef6fb9d5f5cf3b7f8546a1a7eacbce015e765334dd5b56dd9058b9eb6b23414cf10d9151f76a785f914e0e21e75ba1147067897a6b812df0fe1a4a533f9544e9938691a2907d4c40133a0c44368b652e4df045516d8c10b58fb6c977a8bb638b994b3fa163ec931ac2e75fa79f0fdcf4620798615dca87a7de1f8c1b25e1df4f6e135da316b42432c8ae225c483256690a57cbc9c4214cf5a7e3b8abc77a95da409b8c2c9dc9876d0c01f3f71080d06b06420e68fda3eceaa0d17b4365bd1be635167bf521f8cbcda74189193e8fdd0afbd691673113bb60573912dc821c51655526fc9f573fe855aefce6a30ca0b9c31c70ad905e2e2383e6f14f2753cbd094954e0a5cd9580a573a8c7d71c6b8a60530209a05e67355bbb49cbba653f7184a4e9fd424a007aabf896304eec6fca527c3e9d42fed6a97b6ce5594b3df8e5715fc4c40a0f07c07c742d0cd38b8535f9b3abc61401ad5091f6a031b4785602ef6cef5086b0ed7898b864790353f099e554672f0b2cc2840a093ef67d39bb2668fe532cbb382113411e9323d4bba7d51947fac565b1850596ef437925ee448740d31d4e30a0a2d9969a8820ea093a1068ffd00afae29be9e66a585a9db8c9a4c335c9d0f1f439f05a3c67c167578788e375628ab1519b6d6c04f77dc902f9746c14409f31397772c452223a22d80bc5e20b520136c0bc187c4e72ad22b43079f7bae99afce02ae522f3c6592ca6cc1d5ccf8a6dc649fd431ccb1ca613789496fdc58921acea5633b8202ec4a890764071ef2431e5e71269cbdf1ce8eae540793d10132fc1bfb803e8a1933c3a2778d2378faaa761eaae09dccfd9743c2f6e0b84e0af391560f55548f650baa051354618d6c2229e6c764b51ae33f33fc5981569062d7c4e71c4487d2efa2114e2f3dc6d7f66fad3735af02322c33857de1fe66e41b114fe7d964906ca8007bc8ea4a77c1fe772551971be3282071f9b75cf62c9fda3ca1139abcd9604e042d48eb698fae3bf5fe6de9cb46e3c253973b5758c7fc4bb3cbc2ca3ee89e6f71d325c28500501910d2b834e46cd328dbce6aa716979fbc414cb036932f94c5db21e2ac1473a6bdbc01ac71ee98f201b8a8f78788a80be3739cfe5c6ba1d90d3be49fc767536ab2e9f94be161c393bc15c9cda558c95c45efe3769e597b4ab9d8719b4f0dcab041aec35b4a1e03257c695a176d4821b8c704064f77b537d8587a08097b9ce6e96fa5f977ca6510092b20b2fefd2c9fb02c4147caed71243e7de82df9f8fea819793707b152b4fb56278456f0dd8752c323370f9db43c774403f96b3dd0419aa1a17c516abce283fa70c3480129184045b707e2342920a6696fb1a639c1fa4b7312caee6d3bda5d6d50b5d8c9fa51f975e007a9807e1ddd3016ff9f51b8a9ed47a9a20ee31223acddd601d0b86d37933224fc1adde6ce4d1455377b610bada594a06cf0766fd4f9d41a6fb6ae7df847cf43cddb454b76915f6e172e216f16bffe338e89b6b4332bf150eacb14360e289773a6fd91c30ea6e6b65f424a8904787e7c595cee37261e63758b03b4a2ef897849f07dc50a9c4e408b0e34c7d943141a5fa368a624a881e9a3b9b29253eb783e7b89739fdb05e713f576aab962044b92f44a9fb9f0892e160c0c9781008bcfaa4c76530232903f158aea26cd7e00004d6d9956ba7e510974db46bc621e888fa59532d361bf1171e8061bc95b568ba5ad67e0edaa99de3b8aa8a3adffba178bae4bd7b20bb2c3ac4d0f62030707c129f0e48d3edf30804f09649b7c80501f8d0858f989e748a39055de51cabb02e4f892aa4a4eb2f8c9f66e864fefd758384d80d1417f8a32483547d947b7a1170da683c5413bc511925a53b20652867937130bb1ff5153f49dd29b63240f8e9a375f42a7465e32752fe1cfc184c9ea6020a435c0c909928167bae43e976eafc9159547354b9deeb3a38f4ff93405bc4f814ef88efba2c511c6818f24875979f9a6552b2875d555009e99a329bf434f112c609081d7c13e136cd4e8ee7ea7e78fca3c11590fd19d2135b5bb7ee4029415a0b8c75273e9cd6fb62a61efe35038fe0472ff4b8eaa9dc6d01b9d08b81ac687f53bd1eeafabda1b"}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000003980)={{0x1, 0x1, 0x18, r6, {0x81}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000003980)={{0x1, 0x1, 0x18, r6, {0x81}}, './file0\x00'}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f00000039c0)=0x1) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f00000039c0)=0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000003a00)={0x0, 0x1, r12}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r12, 0xc02864c3, &(0x7f0000003a80)={&(0x7f0000003a40)=[0x0, r13, 0x0], 0x10, 0x3}) ftruncate(r3, 0x2) (async) ftruncate(r3, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000003ac0)={0x0, 0x1, 0xc3, 0x1}) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000003ac0)={0x0, 0x1, 0xc3, 0x1}) ioctl$KVM_GET_MSR_INDEX_LIST(r12, 0xc004ae02, &(0x7f0000003b00)={0x2, [0x0, 0x0]}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000003b40)=0x20) ioctl$GIO_FONT(r12, 0x4b60, &(0x7f0000003b80)=""/118) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000003d00)={&(0x7f0000003c00)=[0x0, 0x0, 0x0], &(0x7f0000003c40)=[0x0, 0x0], &(0x7f0000003c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x2, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r12, 0xc03064b7, &(0x7f0000003dc0)={0x0, r14, 0x0, 0xd4d, 0x5, 0x5, 0x8, 0x0, 0x0, 0x7, 0x0, 0x93}) 1m0.97060255s ago: executing program 5 (id=2984): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000003980)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @ethernet={0x306, @remote}, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x9, 0xfff, 0xff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000c00)={0x2, 0xffff, "e32dd9", 0x8, 0x9}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, r2, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @string=&(0x7f0000000080)=0xfb}}) 1m0.920106484s ago: executing program 5 (id=2985): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000019040)=""/102390, &(0x7f0000000000)=0xffffffc5) 53.279601184s ago: executing program 5 (id=2986): mkdir(&(0x7f0000000340)='./file0\x00', 0x9b) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800100, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) utimes(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x47e00, 0x19) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x1000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x4c}}, 0x884) 53.216633898s ago: executing program 5 (id=3034): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000002840)={0x80000000, 0x6, 0x10001, 0x9, 0x92, "2ea468089ad0c9043d6e07b9f3c1bebdb0c261", 0x1ff, 0x4697}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000004c0)={r4, 0x203, 0x400000, 0x3, 0x3, [], [0x800020, 0xfffffffc, 0x20, 0x2], [0x10011, 0x9, 0xfffffffd, 0x9a7d], [0x6, 0x20000, 0x6, 0x9]}) 51.530364952s ago: executing program 5 (id=3057): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) lseek(r3, 0xfff7ffffffffff73, 0x1) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000d042ab970010100002500000000", @ANYRES32=0x0, @ANYBLOB="a4000600400000001c0012800c0001006d6163766c616e000c0002800800090001000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 51.53002404s ago: executing program 36 (id=3057): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r1, 0x0, 0x1, 0x4}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) lseek(r3, 0xfff7ffffffffff73, 0x1) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000d042ab970010100002500000000", @ANYRES32=0x0, @ANYBLOB="a4000600400000001c0012800c0001006d6163766c616e000c0002800800090001000000140035006d6163766c616e300000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 3.290376312s ago: executing program 0 (id=3548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r2, 0x0) ftruncate(r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x300, 0x70bc2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008850}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 3.208786052s ago: executing program 0 (id=3550): mmap$xdp(&(0x7f00009e6000/0x2000)=nil, 0x2000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.205505447s ago: executing program 0 (id=3551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) getuid() (async, rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4000800) (async, rerun: 32) write$P9_RGETLOCK(r1, &(0x7f0000000000)=ANY=[], 0x200002e6) (rerun: 32) fcntl$setpipe(r1, 0x407, 0x7000000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.007790285s ago: executing program 0 (id=3552): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty=0xe00, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x60}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x31f, 0x3) 2.898133601s ago: executing program 0 (id=3553): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 2.725689437s ago: executing program 0 (id=3554): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "c668d0c1"}]}}, 0x0}, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000081, 0x0, 0xaf66}]}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) 1.289507479s ago: executing program 7 (id=3565): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'syzkaller1\x00', @ifru_data=0x0}}) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0xa}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@private=0xa010101, @private=0xa010100}, 0xc) socket$xdp(0x2c, 0x3, 0x0) 1.219341329s ago: executing program 7 (id=3566): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffff2d6, 0x200ffffd, 0x7, 0xdfffffaf, 0xfc, "4d6b5ccb0000000000000000000000000000e7", 0x8, 0x6}) readv(r0, &(0x7f0000003a00)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r3 = socket(0x11, 0x3, 0x0) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe80, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001200)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=@getchain={0x3c, 0x66, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x7}, {0x1, 0x15}, {0xfff2, 0x9}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x4}]}, 0x3c}}, 0x4000000) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000340031b70000118400"], &(0x7f00000000c0)='GPL\x00', 0x800, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 1.218569753s ago: executing program 6 (id=3567): openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 64) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x7, 0x8, 0x6, 0x10001, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xa, 0x501fd39008c44cf2, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x1c, 0x3, 0x4}]}}}}}) socket(0x1a, 0x0, 0x9) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r3, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f00000006c0)={{0x4000, 0x58000, 0x9, 0xfd, 0x9, 0xd, 0x6, 0x8, 0xf9, 0x7, 0x1, 0x5}, {0xb582d90f66ec6eb5, 0x3000, 0xb, 0x0, 0x96, 0x81, 0x4, 0xa, 0x7, 0x6, 0x7, 0x2}, {0x0, 0xffffffff, 0xf, 0xa, 0x15, 0x6, 0xf9, 0x8, 0x2, 0x9f, 0x5, 0x8}, {0x7000, 0x52000, 0x10, 0x80, 0x0, 0x1, 0xfb, 0x7, 0x4c, 0x7, 0x0, 0x6}, {0x60000, 0x30000, 0x0, 0xc, 0xfc, 0x50, 0x8, 0x5, 0x2, 0x3, 0xf, 0x1}, {0x2000, 0x5000, 0xa, 0x6, 0x81, 0x5, 0x7, 0x7, 0x2, 0x9, 0x7, 0x7}, {0x2, 0xdddd0000, 0xb, 0x6f, 0x8, 0x5, 0xca, 0x8, 0xa, 0x9, 0x8, 0x9}, {0xd000, 0x200000, 0xc, 0x5, 0x5, 0x3, 0x68, 0x7, 0x1, 0x6, 0x8, 0x10}, {0x60000, 0x400}, {0xdddd1000, 0x200}, 0x32, 0x0, 0xb000, 0x0, 0x3, 0x801, 0xeeebc000, 0x0, [0x8, 0x46, 0x2, 0x4]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f00000001c0)={r6, r6, 0x0, 0x0, 0x2}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.159693334s ago: executing program 8 (id=3568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r1) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r2, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x88800}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x40000) 1.099946749s ago: executing program 6 (id=3569): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="56c78e3c733d76696e65459beb1fb664f6ce6c0c7274696f7874656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x11, 0x4) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x8d) 1.020050473s ago: executing program 8 (id=3570): personality(0xf) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeeb, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000040)=0x1f) 949.072117ms ago: executing program 8 (id=3571): r0 = syz_clone(0x280400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000140)) (async) r4 = syz_pidfd_open(r0, 0x0) fcntl$setlease(r4, 0x400, 0x1) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0xfffffe40, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800000010071756f74610000001c0002800c00044000000000000000050c00014000000000000000050900010073797a30000000000900020073797a3200001410822fa60000140000001100010000000000000000000000000a"], 0x84}}, 0x0) (async) syz_pidfd_open(r0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x20) (async, rerun: 64) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) (rerun: 64) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) (rerun: 64) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) (async, rerun: 64) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f045}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r11 = syz_open_dev$video4linux(&(0x7f0000000180), 0xdf, 0x10002) ioctl$VIDIOC_QBUF(r11, 0xc058560f, &(0x7f0000000240)=@overlay={0x3, 0x4, 0x4, 0x4000, 0x1, {0x0, 0xea60}, {0x3, 0x0, 0x3, 0x3, 0x7, 0x0, "a470f2b6"}, 0x0, 0x3, {}, 0x5}) socket(0x10, 0x80002, 0x0) 870.031672ms ago: executing program 6 (id=3572): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r2, &(0x7f0000003e80)=[{0x0}, {&(0x7f0000000b00)="3bca", 0x2}], 0x2) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 868.977212ms ago: executing program 7 (id=3573): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYRESOCT=r0], 0x6f4}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x18481) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x74, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x100000001, 0x0, 0x3c, 0x40, 0x0, 0x4, 0x2004cb, 0x4000000000000000, 0x9, 0xffffffffffbfff24, 0x0, 0x1, 0xfffffffffffffffe, 0x6, 0x8000000000000201, 0x3a74], 0x80a0000, 0x5001}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 566.245313ms ago: executing program 8 (id=3574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x2d, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000300)={0x2d, 0x1, 0x4001}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xffffff09, 0x3a, 0xff, @dev, @loopback, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) getsockopt(r2, 0x9, 0x8, &(0x7f0000000440)=""/155, &(0x7f0000000500)=0x9b) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001714010025bd7000fedbff250900020073797a310000f3ff9301e267080005007369770014", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 479.514097ms ago: executing program 7 (id=3575): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f150000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x40140921, 0x200000000005) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000080), 0x850000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',nodevmap,noextend,version=9p2000.u,noxattr,privport,loose,version=9p2000,subj_user=\x00,uid>', @ANYRESDEC=r3, @ANYBLOB="2c646f6e745f010000000000000b7e06796ed7a16b5edc1050256d61636b66736465663d2c2c6f626a5f74", @ANYRESDEC=r4, @ANYBLOB=',fsmagic=0xffffffffffffffff,smackfsroot=GPL\x00,permit_directio,\x00']) 477.715652ms ago: executing program 6 (id=3576): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0xad27, 0x4) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 474.990704ms ago: executing program 8 (id=3577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xa2}, @TCA_PIE_ALPHA={0x8, 0x4, 0x5}]}}]}, 0x48}}, 0xc040010) 420.203205ms ago: executing program 6 (id=3578): mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=virtio,afid=0x0000000000004875,msize=0x0000000000008000,posixacl,loose']) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 419.935536ms ago: executing program 7 (id=3579): personality(0xf) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeeb, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000040)=0x1f) 360.092499ms ago: executing program 8 (id=3580): ftruncate(0xffffffffffffffff, 0xc17a) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="1800"], 0x48}], 0x1, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1000, 0x100, 0x0, 0xa, 0xe0, 0x0, 0x1}, 0x6e6bb1}}, 0x50}, 0x1, 0x0, 0x0, 0x4082}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0xa8681, 0x0) signalfd4(r4, &(0x7f0000000180), 0x8, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) r7 = getuid() sendmsg$nl_xfrm(r5, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="080000000000000004000000000000000800000000000000030000000000000008000000000000000300000000000000010000000000000004000000000000000600000000000000060000000000000003000000000000000300000000000000d50b0000b46b6e000000e6030000000008000c0004000000080018006200000008001d00c20900000c000f000800000000000000db000100626c616b6532622d323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098040000d5aa6d418b558bd28c62817b2e26de223fa4e8667df0f3b1a6faf21b1f57ae67313f76622515d36450037514f823839a9b9eab07b2d83db0d9ba49638bd9d94a262ce1f5221952b3f35d5745e927efc8ea6389ff7c7888dc0b1c673243e3ac105433f66da9ddeb5dfd46b32237479c11ba3f8643f33f4d5403d78dcef6deb3ed16d7e9571768da39c3087cc2a1619ccb1d23bf0044010500ac1414bb000000000000000000000000000004d33c00000002000000ff010000000000000000000000000001ff340000010100000900000008000000030000007f000001000000000000000000000000000004d36c00000008000000ac1e01010000000000000000000000000635000000010d00080000000600000007000000fe8000000000000000000000000000bb000004d4ff00000008000000ac1414120000000000000000000000000335000000020100030000000400000000000000ffffffff000000000000000000000000000004d53c0000000a000000e000000100000000000000000000000005350000010204000c000000010000000200000000000000000000000000000000000000000004d33200000002000000ff010000000000000000000000000001000000000402ff00800000008db400000600000008001800090000000c00150000b8590005000000"], 0x310}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 358.387069ms ago: executing program 6 (id=3581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, r3, {0x7, 0x2b, 0x10, 0x1c20040, 0xffff, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x48, 0x80002, 0x7, {0xfffffffffffffffe, 0x0, 0x200000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0x108, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r4, r5, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1c5202, 0x2) pwritev2(r6, 0x0, 0x0, 0x3, 0x4, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="48b804000000000000000f23d80f21f835000000d00f23f866420f3a0ad098c44215ba82e6000000b9a9080000b804000000ba000000000f3048b800a00000000000000f23c00f21f83501000d000f23f80f01c50f01c2679f66470ff36200c4c3fd084a695a", 0x66}], 0x1, 0x44, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000180), 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, &(0x7f0000000200)) ioctl$KVM_CAP_XEN_HVM(r10, 0x4068aea3, &(0x7f0000000300)={0x26, 0x0, 0x50}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0xffffffffffffff24, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @sit={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x0, 0xe, 0xc4d5}, @IFLA_IPTUN_FLAGS={0x0, 0x8, 0x20}, @IFLA_IPTUN_LINK={0x0, 0x1, r7}, @IFLA_IPTUN_PROTO={0x0, 0x9, 0x29}]}}}]}, 0x27}, 0x1, 0x0, 0x0, 0x690}, 0x811) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r14], 0x54}}, 0x0) 0s ago: executing program 7 (id=3582): modify_ldt$write2(0x11, &(0x7f0000000000)={0x4, 0x0, 0x1000, 0x1, 0x2, 0x1, 0x0, 0x1}, 0x10) r0 = syz_clone(0x84000080, &(0x7f0000000040)="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", 0x1000, &(0x7f0000001040), &(0x7f0000001080), &(0x7f00000010c0)="165b955e2760d218dbba96be99407824ad0185fe88363063baa11debb523869164601ab28c0da6cf3c880fa95b421d7a7547519d1bf5db79e79ac764950ab1d984751577935570342bdf3e3d70cd42b7d21e46d702881151300a32f5d4e1e7fdf4bad7f7f77ea88cf15b586768dadbe67f9d672290331fc315a683c9c185225f62c7782b219cbe83") modify_ldt$write(0x1, &(0x7f0000001180)={0x48, 0xffffffffffffffff, 0x400, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000011c0)={0x6, 0x20001000, 0x2000, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000001200), 0x2241, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001240)={'ip_vti0\x00', 0x100}) modify_ldt$write2(0x11, &(0x7f0000001280)={0x4, 0x1000, 0x1000, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x10) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000012c0)=""/103) gettid() (async) r2 = gettid() ptrace$peeksig(0x4209, r2, &(0x7f0000001340)={0x5013, 0x0, 0x6}, &(0x7f0000001380)=[{}, {}, {}, {}, {}, {}]) syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r1) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x70, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x27}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x6000080}, 0x40) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x70, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x27}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x6000080}, 0x40) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001800)={'\x00', 0xce24, 0x4, 0x5, 0x3, 0x8001, r2}) ptrace$setsig(0x4203, r4, 0x6, &(0x7f0000001880)={0x1b, 0x0, 0x7ff}) sched_setaffinity(r0, 0x8, &(0x7f0000001900)=0xe) openat$fuse(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000001980)={0xfffffff4, 0xfe9528b3e40817d4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) waitid(0x2, r0, 0x0, 0x40000000, &(0x7f00000019c0)) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) waitid$P_PIDFD(0x3, r5, &(0x7f0000001ac0), 0x40000000, &(0x7f0000001b40)) (async) waitid$P_PIDFD(0x3, r5, &(0x7f0000001ac0), 0x40000000, &(0x7f0000001b40)) setpriority(0x1, r0, 0x3) (async) setpriority(0x1, r0, 0x3) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000001d00)={&(0x7f0000001c00)=[0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001cc0)=[0x0, 0x0], 0x2, 0x5, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000001d40)={r6, 0x401, 0x5, 0x3, 0x2, [], [0x35, 0x9, 0x6aa6, 0x7], [0x1ff, 0x8000, 0x2, 0x3], [0x80000001, 0x5, 0x920, 0x5]}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) (async) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000001dc0)={0xd, 0xd4, 0xfc5}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01864c2, &(0x7f0000001e00)={0x0, 0x0, r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01864c2, &(0x7f0000001e00)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000001e40)={0x0, r7, 0x9, 0x0, 0x1}) syz_open_pts(r5, 0x20202) pipe(&(0x7f0000001e80)) (async) pipe(&(0x7f0000001e80)={0xffffffffffffffff}) sendmmsg$alg(r8, &(0x7f0000001f40)=[{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001ec0)="19331b2bd049cc4198431c8c9b7502ded9b7bc8881c789df7840f6f825850d3047", 0x21}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x20000041) kernel console output (not intermixed with test programs): oved. [ 400.819606][ T7980] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.906745][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2895'. [ 400.939749][T16469] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16469 comm=syz.0.2895 [ 400.956320][T16470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16470 comm=syz.0.2895 [ 400.956873][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2895'. [ 401.253064][ T6020] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 401.427792][ T6020] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 401.431109][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 401.434978][ T6020] usb 5-1: Product: syz [ 401.436416][ T6020] usb 5-1: Manufacturer: syz [ 401.436426][ T6020] usb 5-1: SerialNumber: syz [ 401.439366][ T6020] usb 5-1: config 0 descriptor?? [ 401.452949][ T6020] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 401.456415][ T6020] dvb-usb: bulk message failed: -22 (2/0) [ 401.464654][ T6020] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.468460][ T6020] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 401.471565][ T6020] usb 5-1: media controller created [ 401.486286][ T6020] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.654327][T16474] dvb-usb: bulk message failed: -22 (5/0) [ 401.659955][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.665682][T16490] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 401.666505][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.690327][ T6020] cxusb: set interface failed [ 401.692955][ T6020] dvb-usb: bulk message failed: -22 (1/0) [ 401.725257][ T6020] DVB: Unable to find symbol mt352_attach() [ 401.728917][ T6020] dvb-usb: bulk message failed: -22 (5/0) [ 401.731526][ T6020] zl10353_read_register: readreg error (reg=127, ret==-121) [ 401.734893][ T6020] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 401.786056][T16495] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2902'. [ 401.793053][ T6020] rc_core: IR keymap rc-dvico-mce not found [ 401.795104][ T6020] Registered IR keymap rc-empty [ 401.801301][ T6020] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 401.806968][ T6020] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input45 [ 401.811932][ C2] net_ratelimit: 3 callbacks suppressed [ 401.811951][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 401.813082][ T6020] dvb-usb: schedule remote query interval to 100 msecs. [ 401.830485][ T6020] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 401.836447][ T6020] usb 5-1: USB disconnect, device number 43 [ 401.905004][ T6020] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 401.958270][ T40] audit: type=1400 audit(1776459321.149:1238): avc: denied { write } for pid=16506 comm="syz.6.2906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 402.020983][ T5297] usbhid 12-1:0.0: can't add hid device: -71 [ 402.024515][ T5297] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 402.034032][ T5297] usb 12-1: USB disconnect, device number 15 [ 402.087957][ T40] audit: type=1400 audit(1776459321.279:1239): avc: denied { listen } for pid=16510 comm="syz.7.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 402.097261][ T40] audit: type=1400 audit(1776459321.289:1240): avc: denied { accept } for pid=16510 comm="syz.7.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 402.241902][ T5982] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 402.322038][ T7130] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 402.410778][T16527] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 402.415188][ T5982] usb 11-1: Using ep0 maxpacket: 32 [ 402.422987][ T5982] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 402.429622][ T5982] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 402.434479][ T5982] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 402.437960][ T5982] usb 11-1: Product: syz [ 402.439842][ T5982] usb 11-1: Manufacturer: syz [ 402.442369][ T5982] usb 11-1: SerialNumber: syz [ 402.446913][ T5982] usb 11-1: config 0 descriptor?? [ 402.450382][T16509] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 402.455728][ T5982] hub 11-1:0.0: bad descriptor, ignoring hub [ 402.458171][ T5982] hub 11-1:0.0: probe with driver hub failed with error -5 [ 402.481836][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2914'. [ 402.483275][ T7130] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 402.496194][ T7130] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.500778][ T7130] usb 10-1: Product: syz [ 402.506977][ T7130] usb 10-1: Manufacturer: syz [ 402.508879][ T7130] usb 10-1: SerialNumber: syz [ 402.594055][T16537] smc: adding net device bond0 with user defined pnetid SYZ2 [ 402.633003][ T40] audit: type=1400 audit(1776459321.829:1241): avc: denied { bind } for pid=16539 comm="syz.7.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 402.723047][T16505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.736502][T16505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.774256][ T6030] usb 11-1: USB disconnect, device number 24 [ 402.851916][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 402.978737][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2925'. [ 403.156228][ T7130] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 403.170006][ T7130] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 403.174382][ T7130] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 403.178098][ T7130] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 403.186021][ T7130] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 403.192723][ T7130] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 403.198554][ T7130] usb 10-1: USB disconnect, device number 29 [ 403.659043][T16595] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2933'. [ 403.715882][T16600] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2933'. [ 403.719619][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2933'. [ 403.891928][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 403.958855][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 403.958868][ T40] audit: type=1400 audit(1776459323.149:1247): avc: denied { append } for pid=16609 comm="syz.7.2937" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 404.194645][ T40] audit: type=1400 audit(1776459323.389:1248): avc: denied { getopt } for pid=16616 comm="syz.0.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 404.217009][ T40] audit: type=1400 audit(1776459323.409:1249): avc: denied { connect } for pid=16616 comm="syz.0.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 404.244820][T16615] bridge_slave_0: default FDB implementation only supports local addresses [ 404.249588][T16615] netlink: 'syz.6.2939': attribute type 5 has an invalid length. [ 404.308820][ T40] audit: type=1400 audit(1776459323.499:1250): avc: denied { associate } for pid=16621 comm="syz.6.2941" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 404.391865][ T7159] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 404.501401][ T40] audit: type=1400 audit(1776459323.689:1251): avc: denied { bind } for pid=16629 comm="syz.0.2944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 404.544767][ T7159] usb 12-1: Using ep0 maxpacket: 8 [ 404.547811][ T7159] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 404.548740][ T40] audit: type=1400 audit(1776459323.739:1252): avc: denied { map } for pid=16631 comm="syz.0.2945" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 404.556900][ T7159] usb 12-1: config 179 has no interface number 0 [ 404.569442][ T40] audit: type=1400 audit(1776459323.739:1253): avc: denied { call } for pid=16631 comm="syz.0.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 404.569477][ T7159] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 404.601659][ T7159] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 404.606258][ T7159] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 404.610027][ T7159] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 404.614634][ T7159] usb 12-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 404.619474][ T7159] usb 12-1: config 179 interface 65 has no altsetting 0 [ 404.622317][ T7159] usb 12-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 404.625251][ T7159] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.640053][ T7159] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input47 [ 404.692090][ T5332] input input47: unable to receive magic message: -110 [ 404.715515][ T5332] input input47: unable to receive magic message: -32 [ 404.722440][ T5332] input input47: unable to receive magic message: -32 [ 404.733226][ T5332] input input47: unable to receive magic message: -32 [ 404.736654][ T5332] input input47: unable to receive magic message: -32 [ 404.833693][ C1] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 404.838048][ T7159] usb 12-1: USB disconnect, device number 16 [ 404.932378][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 405.175723][ T40] audit: type=1400 audit(1776459324.369:1254): avc: denied { getopt } for pid=16647 comm="syz.6.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 405.183947][T16648] xt_hashlimit: size too large, truncated to 1048576 [ 405.238147][ T40] audit: type=1400 audit(1776459324.429:1255): avc: denied { ioctl } for pid=16647 comm="syz.6.2949" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 405.310424][T16651] netlink: 'syz.6.2949': attribute type 1 has an invalid length. [ 405.416472][T16653] 8021q: adding VLAN 0 to HW filter on device bond10 [ 405.438156][T16648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=16648 comm=syz.6.2949 [ 405.452088][T16653] bond9: (slave bond10): making interface the new active one [ 405.455404][T16653] bond9: (slave bond10): Enslaving as an active interface with an up link [ 405.464826][ T40] audit: type=1400 audit(1776459324.659:1256): avc: denied { accept } for pid=16647 comm="syz.6.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 405.612629][T16660] __nla_validate_parse: 3 callbacks suppressed [ 405.612642][T16660] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2952'. [ 405.702118][ T6030] usb 11-1: new low-speed USB device number 25 using dummy_hcd [ 405.871908][ T6030] usb 11-1: Invalid ep0 maxpacket: 64 [ 405.971865][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 406.002086][ T6030] usb 11-1: new low-speed USB device number 26 using dummy_hcd [ 406.152114][ T6030] usb 11-1: Invalid ep0 maxpacket: 64 [ 406.155027][ T6030] usb usb11-port1: attempt power cycle [ 406.491862][ T6030] usb 11-1: new low-speed USB device number 27 using dummy_hcd [ 406.512723][ T6030] usb 11-1: Invalid ep0 maxpacket: 64 [ 406.642027][ T6030] usb 11-1: new low-speed USB device number 28 using dummy_hcd [ 406.662802][ T6030] usb 11-1: Invalid ep0 maxpacket: 64 [ 406.665072][ T6030] usb usb11-port1: unable to enumerate USB device [ 406.724369][T16667] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2954'. [ 406.817590][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2954'. [ 406.824799][T16667] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2954'. [ 407.021869][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 408.061869][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 408.648489][T16695] sp0: Synchronizing with TNC [ 408.671250][T16693] kvm: kvm [16692]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 408.674633][T16693] kvm: kvm [16692]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 408.765728][T16697] 8021q: adding VLAN 0 to HW filter on device bond12 [ 408.798114][T16693] kvm: kvm [16692]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 408.831843][ T7130] libceph: connect (1)[c::]:6789 error -101 [ 408.835179][ T7130] libceph: mon0 (1)[c::]:6789 connect error [ 408.885193][T16693] kvm: kvm [16692]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 408.888520][T16693] kvm: kvm [16692]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 408.978545][T16704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.094559][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 409.159708][ T7130] libceph: connect (1)[c::]:6789 error -101 [ 409.173192][ T7130] libceph: mon0 (1)[c::]:6789 connect error [ 409.206565][T16710] openvswitch: netlink: Duplicate key (type 6). [ 409.233833][T16710] netlink: 'syz.6.2967': attribute type 3 has an invalid length. [ 409.238928][T16712] syz_tun: left allmulticast mode [ 409.241883][T16712] syz_tun: left promiscuous mode [ 409.244736][T16712] bridge0: port 3(syz_tun) entered disabled state [ 409.251165][T16712] bridge_slave_1: left allmulticast mode [ 409.253888][T16712] bridge_slave_1: left promiscuous mode [ 409.256256][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.261396][T16712] bridge_slave_0: left allmulticast mode [ 409.263693][T16712] bridge_slave_0: left promiscuous mode [ 409.265780][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.281381][T16712] bridge0 (unregistering): left promiscuous mode [ 409.485478][T16715] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2969'. [ 409.567357][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2971'. [ 409.570462][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2971'. [ 409.654537][T16701] ceph: No mds server is up or the cluster is laggy [ 409.710109][T16725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=16725 comm=syz.5.2972 [ 409.730921][T16722] wg1 speed is unknown, defaulting to 1000 [ 409.746200][ T40] audit: type=1400 audit(1776459328.939:1257): avc: denied { shutdown } for pid=16723 comm="syz.6.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 409.762658][ T40] audit: type=1400 audit(1776459328.939:1258): avc: denied { read } for pid=16723 comm="syz.6.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 409.797876][ T40] audit: type=1326 audit(1776459328.989:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16729 comm="syz.7.2975" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f245779c819 code=0x0 [ 409.859249][T16735] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 409.881476][T16734] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 410.003803][ T40] audit: type=1400 audit(1776459329.199:1260): avc: denied { setattr } for pid=16739 comm="syz.7.2976" name="/" dev="9p" ino=81264753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 410.024535][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2976'. [ 410.116655][T16744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2976'. [ 410.131917][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 410.151072][T16744] sit1: entered allmulticast mode [ 410.869811][T16755] syzkaller0: entered promiscuous mode [ 410.883918][T16755] syzkaller0: entered allmulticast mode [ 411.022643][T16781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.035837][ T40] audit: type=1400 audit(1776459330.229:1261): avc: denied { execute } for pid=16782 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 411.096429][ T40] audit: type=1400 audit(1776459330.289:1262): avc: denied { execute_no_trans } for pid=16782 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 411.172456][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 412.211936][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 413.251967][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 414.301966][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 415.238640][ T40] audit: type=1400 audit(1776459334.429:1263): avc: denied { setopt } for pid=16788 comm="syz.7.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 415.245377][ T5957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.260149][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.265737][ T5957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.270326][ T5957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.278278][ T5957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.293835][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.302085][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.312201][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.313297][T16790] bridge5: entered promiscuous mode [ 415.315595][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.319702][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.323692][T16790] bridge5: entered allmulticast mode [ 415.330399][T16790] team0: Port device bridge5 added [ 415.333732][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 415.346972][ T40] audit: type=1400 audit(1776459334.539:1264): avc: denied { mounton } for pid=16784 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 415.370088][T16791] bridge6: entered promiscuous mode [ 415.374021][T16791] bridge6: entered allmulticast mode [ 415.378854][T16791] team0: Port device bridge6 added [ 415.420255][T16803] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2991'. [ 415.424880][T16803] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 415.429362][T16803] netlink: 'syz.0.2991': attribute type 21 has an invalid length. [ 415.434279][T16803] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.438270][T16784] wg1 speed is unknown, defaulting to 1000 [ 415.447227][ T40] audit: type=1400 audit(1776459334.639:1265): avc: denied { connect } for pid=16800 comm="syz.6.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 415.490120][T16805] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2993'. [ 415.496637][T16807] binder: 16806:16807 ioctl c0306201 0 returned -14 [ 415.629858][T16814] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2995'. [ 415.639468][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2995'. [ 415.819736][T16838] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3001'. [ 415.868120][T16784] chnl_net:caif_netlink_parms(): no params data found [ 415.885161][ T40] audit: type=1400 audit(1776459335.079:1266): avc: denied { ioctl } for pid=16839 comm="syz.0.3002" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 415.890377][T16835] wg1 speed is unknown, defaulting to 1000 [ 415.952719][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 415.975122][T16784] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.976255][T16848] program syz.0.3004 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.978437][T16784] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.984361][ T40] audit: type=1400 audit(1776459335.179:1267): avc: denied { map } for pid=16847 comm="syz.0.3004" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 415.984443][T16784] bridge_slave_0: entered allmulticast mode [ 415.997395][T16784] bridge_slave_0: entered promiscuous mode [ 416.031629][T16784] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.034961][T16784] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.038426][T16784] bridge_slave_1: entered allmulticast mode [ 416.043377][T16784] bridge_slave_1: entered promiscuous mode [ 416.064913][T16784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.070844][T16784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.135620][T16851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'. [ 416.204328][T16784] team0: Port device team_slave_0 added [ 416.209794][T16784] team0: Port device team_slave_1 added [ 416.262440][ T6030] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 416.271530][T16784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.275283][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.287208][T16784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.297362][T16784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.300683][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.312560][T16784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.372018][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 416.389037][T16784] hsr_slave_0: entered promiscuous mode [ 416.399208][T16784] hsr_slave_1: entered promiscuous mode [ 416.402918][T16784] debugfs: 'hsr0' already exists in 'hsr' [ 416.405295][T16784] Cannot create hsr debugfs directory [ 416.412343][ T6030] usb 12-1: Using ep0 maxpacket: 16 [ 416.426081][ T6030] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.437774][ T6030] usb 12-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 416.443156][ T6030] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.473160][ T6030] usb 12-1: config 0 descriptor?? [ 416.479278][T16857] sctp: [Deprecated]: syz.0.3007 (pid 16857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.479278][T16857] Use struct sctp_sack_info instead [ 416.512746][ T6030] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 416.774356][T16784] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.785345][T16784] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.913547][T16784] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.918665][T16784] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.997025][T16860] sctp: [Deprecated]: syz.6.3008 (pid 16860) Use of int in maxseg socket option. [ 416.997025][T16860] Use struct sctp_assoc_value instead [ 417.004942][T16860] tmpfs: Cannot change global quota limit on remount [ 417.026715][T16784] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.033147][T16784] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.130934][T16784] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.136863][T16784] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.303610][T16869] netlink: 'syz.6.3012': attribute type 3 has an invalid length. [ 417.342213][ T5957] Bluetooth: hci2: command tx timeout [ 417.411555][ T40] audit: type=1400 audit(1776459336.599:1268): avc: denied { append } for pid=16875 comm="syz.6.3015" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 417.411873][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 417.425607][T16874] netlink: 'syz.0.3014': attribute type 10 has an invalid length. [ 417.456859][T16874] netlink: 'syz.0.3014': attribute type 3 has an invalid length. [ 417.464448][T16876] netlink: 'syz.6.3015': attribute type 1 has an invalid length. [ 417.468786][T16876] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3015'. [ 417.521394][T16784] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 417.538627][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.543423][T16784] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 417.559735][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.575691][T16784] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 417.589881][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.594536][T16784] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 417.601605][T16784] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.638211][T16883] openvswitch: netlink: Missing valid actions attribute. [ 417.648521][T16883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.655887][ T40] audit: type=1400 audit(1776459336.849:1269): avc: denied { watch } for pid=16881 comm="syz.6.3017" path="/450/file0" dev="tmpfs" ino=2395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 417.702045][ T40] audit: type=1400 audit(1776459336.889:1270): avc: denied { ioctl } for pid=16891 comm="syz.0.3018" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 417.758528][T16784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.776195][T16784] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.788555][ T7979] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.791457][ T7979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.805997][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.806500][T16895] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=16895 comm=syz.6.3020 [ 417.808883][ T7979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.893220][ T40] audit: type=1400 audit(1776459337.079:1271): avc: denied { setattr } for pid=16898 comm="syz.0.3021" path="socket:[71970]" dev="sockfs" ino=71970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 417.972462][T16909] netlink: 'syz.0.3023': attribute type 10 has an invalid length. [ 417.991011][T16909] netlink: 'syz.0.3023': attribute type 3 has an invalid length. [ 418.043776][T16784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.046849][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 418.258090][T16784] veth0_vlan: entered promiscuous mode [ 418.264774][T16784] veth1_vlan: entered promiscuous mode [ 418.287089][T16934] x_tables: duplicate underflow at hook 2 [ 418.290416][T16784] veth0_macvtap: entered promiscuous mode [ 418.296059][T16784] veth1_macvtap: entered promiscuous mode [ 418.322754][T16784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.343035][T16784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.365869][ T8609] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.369787][ T8609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.374953][ T8609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.379055][ T8609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.451981][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 418.489691][ T8609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.493033][ T8609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.558315][ T7980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.562445][ T7980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.574056][ T40] audit: type=1400 audit(1776459337.769:1272): avc: denied { mounton } for pid=16784 comm="syz-executor" path="/syzkaller.SFs21m/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 418.618749][T16945] netlink: 'syz.0.3033': attribute type 10 has an invalid length. [ 418.636671][T16945] netlink: 'syz.0.3033': attribute type 3 has an invalid length. [ 418.644307][T16947] netlink: 'syz.5.2986': attribute type 1 has an invalid length. [ 418.776077][T16952] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3036'. [ 418.829461][T16952] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 419.025192][ T54] usb 12-1: USB disconnect, device number 17 [ 419.128237][T16958] kvm: kvm [16957]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 419.133643][T16958] kvm: kvm [16957]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 419.156171][T16958] kvm: kvm [16957]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 419.184949][T16958] kvm: kvm [16957]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 419.189716][T16958] kvm: kvm [16957]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 419.249412][T16980] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 419.254886][T16980] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 419.367902][T16986] bond6 (unregistering): Released all slaves [ 419.481712][T16995] afs: Unknown parameter 'dyn' [ 419.484309][T16995] kAFS: No cell specified [ 419.501975][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 419.512021][ T54] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 419.661966][ T54] usb 12-1: Using ep0 maxpacket: 8 [ 419.666926][ T54] usb 12-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 138, changing to 7 [ 419.732308][T13847] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 419.882167][T13847] usb 11-1: Using ep0 maxpacket: 16 [ 419.888621][T13847] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.895712][T13847] usb 11-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 419.901877][T13847] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.914585][T13847] usb 11-1: config 0 descriptor?? [ 419.929089][T13847] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 419.944454][T17009] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=17009 comm=syz.0.3054 [ 420.306715][ T8613] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.506160][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.517942][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.530833][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.533141][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 420.539033][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.542777][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.590590][T17020] wg1 speed is unknown, defaulting to 1000 [ 420.812801][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 420.812870][ T40] audit: type=1400 audit(1776459339.999:1283): avc: denied { read write } for pid=17024 comm="syz.0.3058" name="file0" dev="tmpfs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 420.854437][ T40] audit: type=1400 audit(1776459339.999:1284): avc: denied { open } for pid=17024 comm="syz.0.3058" path="/264/file0" dev="tmpfs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 420.865913][ T40] audit: type=1400 audit(1776459339.999:1285): avc: denied { ioctl } for pid=17024 comm="syz.0.3058" path="/264/file0" dev="tmpfs" ino=1394 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 420.888669][T17020] chnl_net:caif_netlink_parms(): no params data found [ 420.966420][T17020] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.969803][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.973356][T17020] bridge_slave_0: entered allmulticast mode [ 420.977586][T17020] bridge_slave_0: entered promiscuous mode [ 420.983937][T17020] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.986583][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.989647][T17020] bridge_slave_1: entered allmulticast mode [ 420.993155][T17020] bridge_slave_1: entered promiscuous mode [ 421.019708][T17020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.026572][T17020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.047609][T17020] team0: Port device team_slave_0 added [ 421.051324][T17020] team0: Port device team_slave_1 added [ 421.071396][T17020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.074379][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.083003][T17020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.088976][T17020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.091303][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.100029][T17020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.129485][T17020] hsr_slave_0: entered promiscuous mode [ 421.132669][T17020] hsr_slave_1: entered promiscuous mode [ 421.135406][T17020] debugfs: 'hsr0' already exists in 'hsr' [ 421.138022][T17020] Cannot create hsr debugfs directory [ 421.321541][T17020] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 421.328359][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.331308][T17020] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 421.336955][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.340232][T17020] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 421.346288][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.349437][T17020] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 421.355271][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.442868][T17020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.458929][T17020] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.474718][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.478040][ T7980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.492647][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.495372][ T7980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.571959][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 421.705710][T17020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.872189][T17020] veth0_vlan: entered promiscuous mode [ 421.881566][T17020] veth1_vlan: entered promiscuous mode [ 421.907277][T17020] veth0_macvtap: entered promiscuous mode [ 421.923035][T17020] veth1_macvtap: entered promiscuous mode [ 421.941379][T17020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.958684][T17020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.972768][ T7979] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.976408][ T7979] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.979344][ T7979] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.983814][ T7979] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.124102][ T8613] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.192539][ T7979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.196159][ T7979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.204567][ T54] usb 12-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice= 0.40 [ 422.214321][ T54] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.222013][ T54] usb 12-1: Product: 㢰嗋ꗮ⚘敋á£ã•„á—¬é¤’ë¿ [ 422.227154][ T54] usb 12-1: Manufacturer: 戱巺☺ç®ã²”î¦¿á‚æ…£ãž¢ã™‹î­€å¹ªé£¶ì®¤æ•ªé¨¯ÞŽä…蘽蠗媩ሸﻹ鹟Ⓗì–䖣摥䢪漣⋠솃ℓ渠뼕挫땼蹨 [ 422.236587][ T8613] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.262264][ T54] usb 12-1: can't set config #1, error -71 [ 422.286344][ T54] usb 12-1: USB disconnect, device number 18 [ 422.384306][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.393901][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.404842][T17061] validate_nla: 3 callbacks suppressed [ 422.404859][T17061] netlink: 'syz.7.3063': attribute type 10 has an invalid length. [ 422.434215][T17061] netlink: 'syz.7.3063': attribute type 3 has an invalid length. [ 422.468969][T13847] usb 11-1: USB disconnect, device number 29 [ 422.477949][T17064] __nla_validate_parse: 2 callbacks suppressed [ 422.477969][T17064] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3062'. [ 422.517464][T17068] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 422.523743][T17068] Error validating options; rc = [-22] [ 422.560648][ T8613] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.611894][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 422.614487][ T5957] Bluetooth: hci1: command tx timeout [ 422.642720][T17073] xt_l2tp: v2 doesn't support IP mode [ 422.676626][T17084] hpfs: Bad magic ... probably not HPFS [ 422.790874][ T8613] bridge_slave_1: left allmulticast mode [ 422.793680][ T8613] bridge_slave_1: left promiscuous mode [ 422.796334][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.808549][ T40] audit: type=1400 audit(1776459341.989:1286): avc: denied { mount } for pid=17089 comm="syz.0.3074" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 422.824066][ T8613] bridge_slave_0: left allmulticast mode [ 422.826979][ T8613] bridge_slave_0: left promiscuous mode [ 422.829688][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.913995][T13847] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 422.930601][T17097] netlink: 'syz.0.3076': attribute type 58 has an invalid length. [ 423.049059][ T8613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.054767][ T8613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.059352][ T8613] bond0 (unregistering): Released all slaves [ 423.083849][T13847] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.088617][T13847] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.095632][T13847] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.099681][T13847] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.106911][T13847] usb 13-1: config 0 descriptor?? [ 423.176625][ T40] audit: type=1400 audit(1776459342.359:1287): avc: denied { mounton } for pid=17091 comm="syz.6.3075" path="/proc/1448/task/1449/net/stat" dev="proc" ino=4026534091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 423.257956][T17107] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3077'. [ 423.331056][ T5649] 8021q: adding VLAN 0 to HW filter on device eth14 [ 423.537663][T13847] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 423.651900][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 423.705503][ T8613] hsr_slave_0: left promiscuous mode [ 423.717673][T13847] usb 13-1: USB disconnect, device number 2 [ 423.720529][T17127] hfs: can't find a HFS filesystem on dev sr0 [ 423.721309][T17130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.727351][ T8613] hsr_slave_1: left promiscuous mode [ 423.733597][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.739312][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.747246][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.753423][ T8613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.762406][ T8613] veth1_macvtap: left promiscuous mode [ 423.764668][ T8613] veth0_macvtap: left promiscuous mode [ 423.766566][ T8613] veth1_vlan: left promiscuous mode [ 423.768384][ T8613] veth0_vlan: left promiscuous mode [ 423.939230][ T8613] team0 (unregistering): Port device team_slave_1 removed [ 423.952641][ T8613] team0 (unregistering): Port device team_slave_0 removed [ 424.042597][ T5649] 8021q: adding VLAN 0 to HW filter on device eth15 [ 424.046110][T17138] netlink: 'syz.0.3085': attribute type 12 has an invalid length. [ 424.101895][ T40] audit: type=1400 audit(1776459343.289:1288): avc: denied { setopt } for pid=17142 comm="syz.6.3086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 424.116665][T17146] netlink: 'syz.0.3087': attribute type 10 has an invalid length. [ 424.161620][T17146] netlink: 'syz.0.3087': attribute type 3 has an invalid length. [ 424.279931][ T40] audit: type=1400 audit(1776459343.469:1289): avc: denied { read write } for pid=17155 comm="syz.0.3089" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 424.296473][ T40] audit: type=1400 audit(1776459343.469:1290): avc: denied { open } for pid=17155 comm="syz.0.3089" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 424.328453][ T5649] 8021q: adding VLAN 0 to HW filter on device eth16 [ 424.487227][T17179] netlink: 'syz.8.3096': attribute type 10 has an invalid length. [ 424.530059][T17179] team0: Failed to send options change via netlink (err -105) [ 424.534251][T17179] team0: Port device dummy0 added [ 424.559336][T17179] netlink: 'syz.8.3096': attribute type 3 has an invalid length. [ 424.561580][ T40] audit: type=1400 audit(1776459343.749:1291): avc: denied { load_policy } for pid=17185 comm="syz.0.3098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 424.561693][T17186] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 424.563052][T17186] SELinux: failed to load policy [ 424.580406][ T5649] 8021q: adding VLAN 0 to HW filter on device eth17 [ 424.585196][T17186] xt_l2tp: v2 doesn't support IP mode [ 424.596857][T17182] 0xfffffffffffffffb-0x000000022003 : "" [ 424.605637][T17194] ./cgroup: Can't lookup blockdev [ 424.616527][T17182] mtd: partition "" is out of reach -- disabled [ 424.657124][T17182] ftl_cs: FTL header not found. [ 424.668776][T17203] netlink: 'syz.8.3103': attribute type 1 has an invalid length. [ 424.674939][T17203] 8021q: VLANs not supported on wg2 [ 424.691855][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 424.696511][ T5957] Bluetooth: hci1: command tx timeout [ 424.800639][T17210] netlink: 'syz.7.3105': attribute type 1 has an invalid length. [ 424.807621][T17210] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3105'. [ 424.910340][T17222] (syz.8.3109,17222,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 424.913724][T17222] (syz.8.3109,17222,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 425.071262][T17239] x_tables: duplicate underflow at hook 2 [ 425.123021][T17240] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3112'. [ 425.126649][T17241] xt_TPROXY: Can be used only with -p tcp or -p udp [ 425.222470][ T54] IPVS: starting estimator thread 0... [ 425.322119][T17248] IPVS: using max 43 ests per chain, 103200 per kthread [ 425.734897][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 425.952328][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'. [ 425.985107][T17233] Process accounting resumed [ 426.086427][T17267] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3122'. [ 426.128730][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3123'. [ 426.135480][ T40] audit: type=1400 audit(1776459345.329:1292): avc: denied { getopt } for pid=17268 comm="syz.7.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 426.342749][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3124'. [ 426.559110][T17293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3128'. [ 426.580674][T17291] 8021q: VLANs not supported on ip_vti0 [ 426.689043][ T40] audit: type=1400 audit(1776459345.879:1293): avc: denied { map } for pid=17287 comm="syz.6.3129" path="socket:[77035]" dev="sockfs" ino=77035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 426.700863][ T40] audit: type=1400 audit(1776459345.889:1294): avc: denied { read accept } for pid=17287 comm="syz.6.3129" path="socket:[77035]" dev="sockfs" ino=77035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 426.773936][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 426.777355][ T5957] Bluetooth: hci1: command tx timeout [ 426.982168][ T6030] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 427.051714][T17333] /dev/sg0: Can't lookup blockdev [ 427.131990][ T6030] usb 12-1: Using ep0 maxpacket: 16 [ 427.146866][ T6030] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.160863][ T6030] usb 12-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 427.172274][ T6030] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.187880][ T6030] usb 12-1: config 0 descriptor?? [ 427.199820][T17339] netlink: 212328 bytes leftover after parsing attributes in process `syz.6.3142'. [ 427.203521][T17339] netlink: Unknown conntrack attr (type=2304, max=9) [ 427.217183][ T6030] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 427.704004][ T40] audit: type=1400 audit(1776459346.899:1295): avc: denied { getopt } for pid=17358 comm="syz.8.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 427.770831][ T40] audit: type=1400 audit(1776459346.959:1296): avc: denied { ioctl } for pid=17358 comm="syz.8.3147" path="socket:[77968]" dev="sockfs" ino=77968 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 427.812010][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 428.041167][T17370] __nla_validate_parse: 2 callbacks suppressed [ 428.041191][T17370] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3150'. [ 428.186831][T17374] validate_nla: 4 callbacks suppressed [ 428.186854][T17374] netlink: 'syz.8.3151': attribute type 10 has an invalid length. [ 428.198860][T17374] netlink: 'syz.8.3151': attribute type 3 has an invalid length. [ 428.422530][T17382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 428.585762][T17378] program syz.6.3153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.807736][T17390] netlink: 'syz.6.3155': attribute type 64 has an invalid length. [ 428.811451][T17390] netlink: 'syz.6.3155': attribute type 4 has an invalid length. [ 428.814959][T17390] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3155'. [ 428.861869][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 428.865520][ T5957] Bluetooth: hci1: command tx timeout [ 429.251011][T17399] netlink: 'syz.6.3160': attribute type 10 has an invalid length. [ 429.267553][T17399] netlink: 'syz.6.3160': attribute type 3 has an invalid length. [ 429.379202][T17405] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3159'. [ 429.386416][ T40] audit: type=1400 audit(1776459348.579:1297): avc: denied { bind } for pid=17403 comm="syz.8.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 429.586170][T17416] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3163'. [ 429.658969][ T7159] usb 12-1: USB disconnect, device number 19 [ 429.743796][T17423] bond0: Error: Cannot enslave bond to itself. [ 429.743793][ T40] audit: type=1400 audit(1776459348.939:1298): avc: denied { ioctl } for pid=17422 comm="syz.7.3165" path="socket:[76225]" dev="sockfs" ino=76225 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 429.891955][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 430.139505][T17441] netlink: 'syz.6.3169': attribute type 10 has an invalid length. [ 430.149761][T17441] netlink: 'syz.6.3169': attribute type 3 has an invalid length. [ 430.253920][ T40] audit: type=1400 audit(1776459349.449:1299): avc: denied { read append } for pid=17446 comm="syz.8.3172" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 430.277370][ T40] audit: type=1400 audit(1776459349.449:1300): avc: denied { open } for pid=17446 comm="syz.8.3172" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 430.297583][ T40] audit: type=1400 audit(1776459349.469:1301): avc: denied { ioctl } for pid=17446 comm="syz.8.3172" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 430.368469][T17450] wg1: entered promiscuous mode [ 430.381901][T17450] wg1: entered allmulticast mode [ 430.554502][T17455] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.556934][T17455] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3173'. [ 430.685116][T17463] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 430.764858][T17468] xt_cgroup: xt_cgroup: no path or classid specified [ 430.769350][T17462] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 430.931986][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 430.985296][T17472] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 431.191214][T17484] netlink: 'syz.0.3182': attribute type 11 has an invalid length. [ 431.201963][T17484] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3182'. [ 431.208032][ T40] audit: type=1326 audit(1776459350.399:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17479 comm="syz.7.3181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245779c819 code=0x7ffc0000 [ 431.218552][ T40] audit: type=1326 audit(1776459350.399:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17479 comm="syz.7.3181" exe="/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f245779c819 code=0x7ffc0000 [ 431.357587][T17491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25361 sclass=netlink_route_socket pid=17491 comm=syz.7.3181 [ 431.372142][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3181'. [ 431.375364][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3181'. [ 431.378535][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3181'. [ 431.382083][T17491] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3181'. [ 431.462374][T17488] bridge1: left promiscuous mode [ 431.483722][T17488] macsec0: left promiscuous mode [ 431.520621][ T7980] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.526782][ T7980] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.532487][ T7980] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.541907][ T7980] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.622770][T17499] netlink: 'syz.8.3187': attribute type 10 has an invalid length. [ 431.629695][T17499] netlink: 'syz.8.3187': attribute type 3 has an invalid length. [ 431.749315][T17505] binder: BINDER_SET_CONTEXT_MGR already set [ 431.754048][T17505] binder: 17504:17505 ioctl 4018620d 200000004a80 returned -16 [ 431.759694][T17505] binder: 17504:17505 unknown command 0 [ 431.762353][T17505] binder: 17504:17505 ioctl c0306201 200000000040 returned -22 [ 431.766543][T17505] binder: BINDER_SET_CONTEXT_MGR already set [ 431.786373][T17505] binder: 17504:17505 ioctl 4018620d 2000000003c0 returned -16 [ 431.968595][ T40] audit: type=1400 audit(1776459351.159:1304): avc: denied { setopt } for pid=17517 comm="syz.0.3193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 431.971923][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 431.981349][T17518] pimreg: entered allmulticast mode [ 431.989709][T17518] pimreg: left allmulticast mode [ 432.075356][T17518] delete_channel: no stack [ 432.078941][T17518] delete_channel: no stack [ 432.186962][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.205079][T17541] romfs: unable to set blocksize [ 432.205079][T17541] [ 432.212805][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.216953][T17541] romfs: unable to set blocksize [ 432.216953][T17541] [ 432.220137][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.224271][T17541] romfs: unable to set blocksize [ 432.224271][T17541] [ 432.227291][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.238643][T17541] romfs: unable to set blocksize [ 432.238643][T17541] [ 432.243149][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.247386][T17541] romfs: unable to set blocksize [ 432.247386][T17541] [ 432.256859][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.268553][T17541] romfs: unable to set blocksize [ 432.268553][T17541] [ 432.278971][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.286830][T17549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.296217][T17541] romfs: unable to set blocksize [ 432.296217][T17541] [ 432.297790][T17551] sp0: Synchronizing with TNC [ 432.301839][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.304559][T17550] [U] aè [ 432.315252][T17541] romfs: unable to set blocksize [ 432.315252][T17541] [ 432.318610][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.346548][T17541] romfs: unable to set blocksize [ 432.346548][T17541] [ 432.353332][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.361263][T17541] romfs: unable to set blocksize [ 432.361263][T17541] [ 432.382615][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.387531][T17556] bond0: (slave macvlan2): Opening slave failed [ 432.390090][T17541] romfs: unable to set blocksize [ 432.390090][T17541] [ 432.397409][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.414476][T17541] romfs: unable to set blocksize [ 432.414476][T17541] [ 432.418648][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.465025][T17541] romfs: unable to set blocksize [ 432.465025][T17541] [ 432.469630][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.474903][T17541] romfs: unable to set blocksize [ 432.474903][T17541] [ 432.478405][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.484127][T17541] romfs: unable to set blocksize [ 432.484127][T17541] [ 432.487897][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.494540][T17541] romfs: unable to set blocksize [ 432.494540][T17541] [ 432.498522][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.504512][T17541] romfs: unable to set blocksize [ 432.504512][T17541] [ 432.508200][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.513378][T17541] romfs: unable to set blocksize [ 432.513378][T17541] [ 432.516675][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.520825][T17541] romfs: unable to set blocksize [ 432.520825][T17541] [ 432.524746][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.528951][T17541] romfs: unable to set blocksize [ 432.528951][T17541] [ 432.534864][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.543926][T17541] romfs: unable to set blocksize [ 432.543926][T17541] [ 432.551519][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.559801][T17541] romfs: unable to set blocksize [ 432.559801][T17541] [ 432.566652][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.575791][T17541] romfs: unable to set blocksize [ 432.575791][T17541] [ 432.580472][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.585622][T17541] romfs: unable to set blocksize [ 432.585622][T17541] [ 432.589302][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.591213][ T40] audit: type=1400 audit(1776459351.769:1305): avc: denied { firmware_load } for pid=17548 comm="syz.7.3202" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 432.597714][T17541] romfs: unable to set blocksize [ 432.597714][T17541] [ 432.606274][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.611469][T17541] romfs: unable to set blocksize [ 432.611469][T17541] [ 432.615386][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.619807][T17541] romfs: unable to set blocksize [ 432.619807][T17541] [ 432.625217][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.630820][T17541] romfs: unable to set blocksize [ 432.630820][T17541] [ 432.635325][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.639465][T17541] romfs: unable to set blocksize [ 432.639465][T17541] [ 432.643183][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.647897][T17541] romfs: unable to set blocksize [ 432.647897][T17541] [ 432.652399][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.656629][T17541] romfs: unable to set blocksize [ 432.656629][T17541] [ 432.660169][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.665667][T17541] romfs: unable to set blocksize [ 432.665667][T17541] [ 432.669007][T17541] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 432.682416][T17541] romfs: unable to set blocksize [ 432.682416][T17541] [ 432.915468][T17588] program syz.0.3216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 433.011946][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 433.076827][T17598] nvme_fabrics: missing parameter 'transport=%s' [ 433.089731][T17598] nvme_fabrics: missing parameter 'nqn=%s' [ 433.141422][T17598] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 433.201260][ T40] audit: type=1400 audit(1776459352.389:1306): avc: denied { accept } for pid=17609 comm="syz.6.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 433.248061][T17622] validate_nla: 8 callbacks suppressed [ 433.248083][T17622] netlink: 'syz.8.3225': attribute type 8 has an invalid length. [ 433.262222][T17622] __nla_validate_parse: 10 callbacks suppressed [ 433.262241][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3225'. [ 433.292881][T17622] bond0: entered promiscuous mode [ 433.294877][T17622] bond_slave_0: entered promiscuous mode [ 433.296882][T17622] bond_slave_1: entered promiscuous mode [ 433.304318][ T40] audit: type=1400 audit(1776459352.489:1307): avc: denied { setattr } for pid=17625 comm="syz.0.3226" name="NETLINK" dev="sockfs" ino=76435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 433.305893][T17622] gretap0: entered promiscuous mode [ 433.324010][T17622] veth1_to_bond: entered promiscuous mode [ 433.333327][T17622] debugfs: 'hsr1' already exists in 'hsr' [ 433.336101][T17622] Cannot create hsr debugfs directory [ 433.338560][T17622] hsr1: entered promiscuous mode [ 433.376911][T17628] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 433.482426][T17628] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.486363][T17628] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.541475][T17645] netlink: 'syz.8.3232': attribute type 1 has an invalid length. [ 433.577045][T17628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.587246][T17628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.692901][T17651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17651 comm=syz.0.3229 [ 433.843217][T17648] mkiss: ax0: crc mode is auto. [ 433.859734][ T1247] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 433.866506][ T1247] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.052782][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 434.131020][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3239'. [ 434.162977][ T1247] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 434.169219][ T1247] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.173669][ T1247] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 434.177305][ T1247] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.187335][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3239'. [ 434.198511][ T7981] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 434.202081][ T7981] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.209119][ T40] audit: type=1400 audit(1776459353.399:1308): avc: denied { create } for pid=17673 comm="syz.6.3238" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 434.240550][ T40] audit: type=1400 audit(1776459353.419:1309): avc: denied { connect } for pid=17673 comm="syz.6.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 434.252150][ T40] audit: type=1400 audit(1776459353.419:1310): avc: denied { setopt } for pid=17673 comm="syz.6.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 434.267317][ T40] audit: type=1400 audit(1776459353.459:1311): avc: denied { unlink } for pid=10934 comm="syz-executor" name="file0" dev="tmpfs" ino=2777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 434.438016][T17695] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3248'. [ 434.559443][T17711] netlink: 'syz.0.3251': attribute type 1 has an invalid length. [ 434.575942][T17711] bond6: entered promiscuous mode [ 434.577814][T17711] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.613753][T17711] 8021q: adding VLAN 0 to HW filter on device bond6 [ 434.616477][T17711] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 434.620055][T17711] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 434.637651][T17711] bond6: (slave ip6gre1): making interface the new active one [ 434.640745][T17711] ip6gre1: entered promiscuous mode [ 434.645525][T17711] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 435.091914][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 435.550828][T17786] syz.0.3265 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 435.715178][ T9017] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 435.883165][ T9017] usb 11-1: Using ep0 maxpacket: 16 [ 435.888223][ T9017] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 435.893221][ T9017] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 435.899643][ T9017] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 435.905353][ T9017] usb 11-1: config 0 interface 0 has no altsetting 0 [ 435.910003][ T9017] usb 11-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 435.913528][ T9017] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.916394][ T9017] usb 11-1: Product: syz [ 435.918106][ T9017] usb 11-1: Manufacturer: syz [ 435.920027][ T9017] usb 11-1: SerialNumber: syz [ 435.930754][ T9017] usb 11-1: config 0 descriptor?? [ 436.071961][ T6030] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 436.142354][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 436.151255][ T9017] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input49 [ 436.175942][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.191111][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.197473][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.213810][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.225555][T16796] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.250396][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.252840][ T6030] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 436.257879][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.261120][ T6030] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 436.266518][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.270597][ T5332] synaptics_usb 11-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 436.271101][ T6030] usb 12-1: Product: syz [ 436.283604][ T6030] usb 12-1: Manufacturer: syz [ 436.289215][ T6030] usb 12-1: SerialNumber: syz [ 436.300570][ T6030] usb 12-1: config 0 descriptor?? [ 436.307673][ T6030] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 436.311263][ T6030] dvb-usb: bulk message failed: -22 (2/0) [ 436.324010][ T6030] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 436.328801][ T6030] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 436.333406][ T6030] usb 12-1: media controller created [ 436.346174][ T6030] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.350781][ T9017] usb 11-1: USB disconnect, device number 30 [ 436.361714][T17819] netlink: 'syz.8.3273': attribute type 10 has an invalid length. [ 436.417756][T17819] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 436.426098][T17819] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 436.509735][T17816] cxusb: i2c wr: len=80 is too big! [ 436.509735][T17816] [ 436.825322][ T6030] cxusb: set interface failed [ 436.828316][ T6030] dvb-usb: bulk message failed: -22 (1/0) [ 436.885024][ T6030] DVB: Unable to find symbol mt352_attach() [ 436.888287][ T6030] dvb-usb: bulk message failed: -22 (5/0) [ 436.890507][ T6030] zl10353_read_register: readreg error (reg=127, ret==-121) [ 436.894388][ T6030] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 436.894530][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 436.894608][ T40] audit: type=1400 audit(1776459356.089:1316): avc: denied { map } for pid=17834 comm="syz.8.3276" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 436.935853][T17838] UHID_CREATE from different security context by process 1633 (syz.6.3277), this is not allowed. [ 436.948663][T17840] netlink: 'syz.8.3278': attribute type 21 has an invalid length. [ 436.954706][ T6030] rc_core: IR keymap rc-dvico-mce not found [ 436.957133][ T6030] Registered IR keymap rc-empty [ 436.960996][ T6030] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 436.975593][ T6030] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input50 [ 436.995054][ T40] audit: type=1400 audit(1776459356.189:1317): avc: denied { setattr } for pid=17841 comm="syz.6.3279" name="TIPC" dev="sockfs" ino=79892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.006879][ T6030] dvb-usb: schedule remote query interval to 100 msecs. [ 437.015030][ T6030] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 437.030753][ T6030] usb 12-1: USB disconnect, device number 20 [ 437.046854][T17846] fuse: Bad value for 'fd' [ 437.108154][ T6030] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 437.172990][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 437.428735][ T40] audit: type=1400 audit(1776459356.609:1318): avc: denied { getattr } for pid=17852 comm="syz.6.3284" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 437.432407][T17856] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 437.471443][ T40] audit: type=1400 audit(1776459356.659:1319): avc: denied { accept } for pid=17852 comm="syz.6.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.484341][T17870] netlink: 'syz.0.3286': attribute type 11 has an invalid length. [ 437.487989][T17870] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3286'. [ 438.002081][ T6030] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 438.115621][T17896] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3290'. [ 438.156615][ T6030] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 438.165139][ T6030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.172206][ T6030] usb 5-1: Product: syz [ 438.174008][ T6030] usb 5-1: Manufacturer: syz [ 438.182536][ T6030] usb 5-1: SerialNumber: syz [ 438.225469][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 438.456870][ T6030] rtl8150 5-1:1.0: couldn't reset the device [ 438.459791][ T6030] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 438.471230][ T6030] usb 5-1: USB disconnect, device number 44 [ 438.482195][ T50] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 438.641894][ T50] usb 13-1: Using ep0 maxpacket: 32 [ 438.647641][ T50] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 438.665969][ T50] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 438.669987][ T50] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 438.673073][ T50] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.676253][ T50] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 438.679752][ T50] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 438.690255][ T50] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 438.700189][T17902] netlink: 'syz.7.3292': attribute type 21 has an invalid length. [ 438.706476][ T50] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.707169][T17902] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3292'. [ 438.712407][ T50] usb 13-1: config 0 descriptor?? [ 439.077783][T17916] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3297'. [ 439.141526][ T50] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 439.165944][ T50] usb 13-1: USB disconnect, device number 3 [ 439.189862][ T50] usblp0: removed [ 439.212029][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3299'. [ 439.215124][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3299'. [ 439.218789][T17929] netlink: 'syz.7.3299': attribute type 12 has an invalid length. [ 439.222739][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3299'. [ 439.252036][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 439.304809][T17933] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3301'. [ 439.378540][T17933] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17933 comm=syz.7.3301 [ 439.448068][ T9017] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 439.462595][ T9017] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 439.753815][T17948] overlayfs: failed to resolve './file1': -2 [ 439.754433][T17949] overlayfs: failed to resolve './file1': -2 [ 439.943818][ T40] audit: type=1326 audit(1776459359.139:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 439.946748][T17955] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 439.956820][T17956] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 439.960387][ T40] audit: type=1326 audit(1776459359.139:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 439.969765][T17956] netlink: 'syz.7.3307': attribute type 1 has an invalid length. [ 439.974418][ T40] audit: type=1326 audit(1776459359.139:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 439.986318][ T40] audit: type=1326 audit(1776459359.139:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 439.995275][T17956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.008613][ T40] audit: type=1326 audit(1776459359.139:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 440.018472][ T40] audit: type=1326 audit(1776459359.139:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 440.027294][T17955] bond4: entered allmulticast mode [ 440.035838][T17955] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 440.062556][T17955] bond4: (slave ip6gretap1): making interface the new active one [ 440.069951][T17955] ip6gretap1: entered allmulticast mode [ 440.074659][T17955] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 440.159524][T17896] Set syz1 is full, maxelem 65536 reached [ 440.269892][T17964] netlink: 'syz.0.3311': attribute type 3 has an invalid length. [ 440.291777][T17968] mkiss: ax0: crc mode is auto. [ 440.301885][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 440.310757][T17962] netlink: 124 bytes leftover after parsing attributes in process `syz.7.3309'. [ 440.440086][T17982] wg1 speed is unknown, defaulting to 1000 [ 440.653284][T17992] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3317'. [ 440.798707][T17992] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17992 comm=syz.7.3317 [ 441.071989][ T9017] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 441.102226][T18008] netlink: 'syz.7.3321': attribute type 5 has an invalid length. [ 441.222319][ T9017] usb 5-1: Using ep0 maxpacket: 8 [ 441.226802][ T9017] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 441.231547][ T9017] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 441.240241][ T9017] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 441.251431][ T9017] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.257900][ T9017] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.263063][ T9017] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 441.268602][ T9017] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 441.278830][ T9017] usb 5-1: config 168 interface 0 has no altsetting 0 [ 441.286718][ T9017] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 441.292533][ T9017] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 441.297972][ T9017] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 441.303688][ T9017] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.308966][ T9017] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.314422][ T9017] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 441.319828][ T9017] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 441.326240][ T9017] usb 5-1: config 168 interface 0 has no altsetting 0 [ 441.331847][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 441.334811][ T9017] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 441.340213][ T9017] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 441.350785][ T9017] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 441.355790][ T9017] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.362604][ T9017] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.367067][ T9017] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 441.371664][ T9017] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 441.382678][ T9017] usb 5-1: config 168 interface 0 has no altsetting 0 [ 441.398285][ T9017] usb 5-1: string descriptor 0 read error: -22 [ 441.400975][ T9017] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 441.405127][ T9017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.426162][ T9017] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 441.671653][ T9017] usb 5-1: USB disconnect, device number 45 [ 441.907628][ T40] kauditd_printk_skb: 10595 callbacks suppressed [ 441.907708][ T40] audit: type=1326 audit(1776459361.089:11921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 441.919931][ T40] audit: type=1326 audit(1776459361.089:11922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 441.932950][ T40] audit: type=1326 audit(1776459361.089:11923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 441.944463][ T40] audit: type=1326 audit(1776459361.089:11924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 441.954069][ T40] audit: type=1326 audit(1776459361.089:11925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 441.963579][ T40] audit: type=1326 audit(1776459361.089:11926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 441.980218][ T40] audit: type=1326 audit(1776459361.089:11927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 441.990875][ T40] audit: type=1326 audit(1776459361.089:11928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 442.001935][ T40] audit: type=1326 audit(1776459361.089:11929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 442.011716][ T40] audit: type=1326 audit(1776459361.089:11930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.8.3306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x50000 [ 442.171988][ T6030] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 442.321829][ T6030] usb 11-1: Using ep0 maxpacket: 16 [ 442.326491][ T6030] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.330899][ T6030] usb 11-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 442.334793][ T6030] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.359079][ T6030] usb 11-1: config 0 descriptor?? [ 442.369046][ T6030] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 442.372659][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 442.496103][T18038] xt_hashlimit: size too large, truncated to 1048576 [ 442.686502][T18042] netlink: 'syz.0.3331': attribute type 6 has an invalid length. [ 442.829267][T18046] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3333'. [ 442.840490][T18046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 443.167475][T18066] atomic_op ffff888030740998 conn xmit_atomic 0000000000000000 [ 443.217003][T18066] wg1 speed is unknown, defaulting to 1000 [ 443.225999][T18067] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 443.422049][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 443.516058][T18078] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.529478][T18078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18078 comm=syz.7.3341 [ 443.536435][T18077] wg1 speed is unknown, defaulting to 1000 [ 443.978645][T18090] l2tp_ppp: sess 2/0: no socket in recv [ 443.982742][T18090] __nla_validate_parse: 2 callbacks suppressed [ 443.982762][T18090] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3344'. [ 443.990245][T18090] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3344'. [ 444.048664][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3345'. [ 444.288028][T18097] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 444.461847][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 444.509459][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3351'. [ 444.632263][T18115] Invalid ELF header magic: != ELF [ 444.652337][ T9017] usb 13-1: new full-speed USB device number 4 using dummy_hcd [ 444.688301][T18116] xt_l2tp: v2 doesn't support IP mode [ 444.823525][ T9017] usb 13-1: not running at top speed; connect to a high speed hub [ 444.826369][ T9017] usb 13-1: too many configurations: 43, using maximum allowed: 8 [ 444.830869][ T9017] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 444.838405][ T9017] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 444.843699][ T9017] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 444.848611][ T9017] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 444.854133][ T9017] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 444.870182][ T9017] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 444.873178][ T7130] usb 11-1: USB disconnect, device number 31 [ 444.875898][ T9017] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 444.894638][ T9017] usb 13-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 444.907143][ T9017] usb 13-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 444.911689][ T9017] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=121 [ 444.916308][ T9017] usb 13-1: Product: syz [ 444.918695][ T9017] usb 13-1: Manufacturer: syz [ 444.921501][ T9017] usb 13-1: SerialNumber: syz [ 445.131520][T18103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.135335][T18103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.147634][ T9017] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 445.155021][ T9017] usb 13-1: MIDIStreaming interface descriptor not found [ 445.205911][ T9017] usb 13-1: USB disconnect, device number 4 [ 445.265953][T16789] udevd[16789]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.491858][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 445.752311][T18151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3364'. [ 445.845180][T18159] kAFS: unparsable volume name [ 445.892847][ T6020] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 446.052541][ T6020] usb 12-1: Using ep0 maxpacket: 16 [ 446.056874][ T6020] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.064351][ T6020] usb 12-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 446.068433][ T6020] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.074631][ T6020] usb 12-1: config 0 descriptor?? [ 446.080667][ T6020] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 446.220722][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.308172][T18193] FAT-fs (loop6): unable to read boot sector [ 446.448641][T18206] program syz.6.3381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.470471][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3382'. [ 446.478789][T18208] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20002 [ 446.487272][T18208] netlink: 'syz.8.3382': attribute type 27 has an invalid length. [ 446.505999][T18210] kAFS: unable to lookup cell 'syz1' [ 446.525740][T18210] xt_cgroup: invalid path, errno=-2 [ 446.528091][T18210] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3383'. [ 446.541876][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 446.578215][T18208] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.582032][T18208] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.611911][ T6030] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 446.649281][T18216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18216 comm=syz.6.3384 [ 446.653918][T18215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18215 comm=syz.6.3384 [ 446.658420][T18208] wg1: left promiscuous mode [ 446.660059][T18208] wg1: left allmulticast mode [ 446.736170][T18208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.742538][ T6030] usb 5-1: device descriptor read/64, error -71 [ 446.750350][T18208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.917356][T18208] hsr1: left promiscuous mode [ 446.946580][ T8357] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.949623][ T8357] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.955121][ T8357] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.960282][ T8357] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.004919][ T6030] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 447.152156][ T6030] usb 5-1: device descriptor read/64, error -71 [ 447.153261][T18226] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 447.200640][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3389'. [ 447.228872][T18230] syzkaller1: entered promiscuous mode [ 447.231442][T18230] syzkaller1: entered allmulticast mode [ 447.262109][ T6030] usb usb5-port1: attempt power cycle [ 447.300689][ T40] kauditd_printk_skb: 8141 callbacks suppressed [ 447.300703][ T40] audit: type=1400 audit(1776459366.489:20072): avc: denied { setattr } for pid=18237 comm="syz.8.3391" name="PPTP" dev="sockfs" ino=82256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 447.401498][T18244] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3392'. [ 447.571837][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 447.622028][ T6030] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 447.642928][ T6030] usb 5-1: device descriptor read/8, error -71 [ 447.773539][ T40] audit: type=1400 audit(1776459366.969:20073): avc: denied { create } for pid=18253 comm="syz.8.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 447.823311][T18254] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3395'. [ 447.894373][ T6030] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 447.905377][ T40] audit: type=1804 audit(1776459367.099:20074): pid=18257 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3396" name="file1" dev="ramfs" ino=80660 res=1 errno=0 [ 447.922734][ T6030] usb 5-1: device descriptor read/8, error -71 [ 447.983214][T18261] tipc: Started in network mode [ 447.985663][T18261] tipc: Node identity ac141424, cluster identity 4711 [ 447.988362][T18261] tipc: New replicast peer: 10.1.1.0 [ 447.990391][T18261] tipc: Enabled bearer , priority 10 [ 448.034439][ T6030] usb usb5-port1: unable to enumerate USB device [ 448.060753][ T40] audit: type=1326 audit(1776459367.249:20075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18267 comm="syz.8.3400" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c1b39c819 code=0x0 [ 448.611930][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 448.647092][ T6030] usb 12-1: USB disconnect, device number 21 [ 448.796216][T18278] bond11: option xmit_hash_policy: invalid value (6) [ 448.800513][T18278] bond11 (unregistering): Released all slaves [ 449.011469][T18297] __nla_validate_parse: 3 callbacks suppressed [ 449.011493][T18297] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3405'. [ 449.038092][T18297] 8021q: adding VLAN 0 to HW filter on device bond11 [ 449.055417][T18297] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3405'. [ 449.101908][ T5982] tipc: Node number set to 2886997028 [ 449.360630][ T40] audit: type=1400 audit(1776459368.549:20076): avc: denied { unmount } for pid=13380 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 449.661874][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 449.772184][ T7130] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 449.932531][ T7130] usb 5-1: Using ep0 maxpacket: 32 [ 449.941112][ T7130] usb 5-1: New USB device found, idVendor=0499, idProduct=101f, bcdDevice= 0.40 [ 449.945355][ T7130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.948349][ T7130] usb 5-1: Product: syz [ 449.950426][ T7130] usb 5-1: Manufacturer: syz [ 449.953471][ T7130] usb 5-1: SerialNumber: syz [ 450.042213][ T6030] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 450.166490][ T7130] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.170441][ T7130] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 450.179113][ T7130] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.183241][ T7130] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 450.192967][ T6030] usb 11-1: Using ep0 maxpacket: 16 [ 450.196067][ T7130] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 450.204199][ T6030] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.215315][ T6030] usb 11-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 450.220857][ T6030] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.231460][ T6030] usb 11-1: config 0 descriptor?? [ 450.239691][ T6030] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 450.264388][ T7130] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 450.286446][T16787] udevd[16787]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.372657][T18311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.376205][T18311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.381599][ T40] audit: type=1400 audit(1776459369.569:20077): avc: denied { shutdown } for pid=18310 comm="syz.0.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 450.394738][ T7130] usb 5-1: USB disconnect, device number 50 [ 450.692019][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 451.473328][T18317] syz.0.3411 (18317): drop_caches: 1 [ 451.577456][T18317] syz.0.3411 (18317): drop_caches: 1 [ 451.731883][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 451.840345][T18284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.224038][T18340] netlink: 'syz.0.3416': attribute type 1 has an invalid length. [ 452.227992][T18340] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.3416'. [ 452.279126][ T40] audit: type=1400 audit(1776459371.469:20078): avc: denied { setattr } for pid=18350 comm="syz.7.3419" name="PF_CAIF" dev="sockfs" ino=82452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 452.408478][ T40] audit: type=1400 audit(1776459371.599:20079): avc: denied { map } for pid=18362 comm="syz.7.3424" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 452.422329][ T40] audit: type=1400 audit(1776459371.599:20080): avc: denied { execute } for pid=18358 comm="syz.0.3422" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 452.514901][ T40] audit: type=1400 audit(1776459371.709:20081): avc: denied { ioctl } for pid=18366 comm="syz.8.3426" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0xae7b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 452.519978][T18359] binder: binder_mmap: 18358 200000ffa000-200000ffd000 bad vm_flags failed -1 [ 452.587172][T18371] ip6t_REJECT: ECHOREPLY is not supported [ 452.593099][T18373] binder: 18372:18373 ioctl c0306201 200000000640 returned -22 [ 452.733804][ T6020] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 452.772471][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 452.786668][ T5982] usb 11-1: USB disconnect, device number 32 [ 452.892304][ T6020] usb 12-1: Using ep0 maxpacket: 16 [ 452.895701][ T6020] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 452.902924][ T6020] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 452.911453][ T6020] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.914473][ T6020] usb 12-1: Product: syz [ 452.916124][ T6020] usb 12-1: Manufacturer: syz [ 452.917679][ T6020] usb 12-1: SerialNumber: syz [ 452.920801][ T6020] usb 12-1: config 0 descriptor?? [ 452.925760][ T6020] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 452.930733][ T6020] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 453.025392][T18402] binder: BINDER_SET_CONTEXT_MGR already set [ 453.027713][T18402] binder: 18401:18402 ioctl 4018620d 200000004a80 returned -16 [ 453.030820][ T40] audit: type=1800 audit(1776459372.219:20082): pid=18400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3435" name="file3" dev="9p" ino=81264797 res=0 errno=0 [ 453.199222][T18406] syzkaller0: entered promiscuous mode [ 453.202406][T18406] syzkaller0: entered allmulticast mode [ 453.212920][ T40] audit: type=1400 audit(1776459372.409:20083): avc: denied { map } for pid=18405 comm="syz.6.3438" path="socket:[82526]" dev="sockfs" ino=82526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 453.526920][ T6020] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 453.811885][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 453.892297][ T50] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 453.986690][ T6020] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 453.996011][ T6020] em28xx 12-1:0.0: board has no eeprom [ 454.072089][ T50] usb 5-1: Using ep0 maxpacket: 16 [ 454.089202][ T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.093655][ T50] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 454.111468][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.116517][ T50] usb 5-1: config 0 descriptor?? [ 454.138609][ T50] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 454.854099][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 455.108388][T18365] em28xx 12-1:0.0: writing to i2c device at 0xfffe failed (error=-5) [ 455.231874][ T6020] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 455.234751][ T6020] em28xx 12-1:0.0: dvb set to bulk mode. [ 455.371115][ T40] audit: type=1804 audit(1776459374.549:20084): pid=18423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.3442" name="/newroot/114/file1" dev="fuse" ino=1 res=1 errno=0 [ 455.371273][ T50] em28xx 12-1:0.0: Binding DVB extension [ 455.396236][ T40] audit: type=1800 audit(1776459374.549:20085): pid=18423 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3442" name="/" dev="fuse" ino=1 res=0 errno=0 [ 455.677137][ T50] em28xx 12-1:0.0: Registering input extension [ 455.901860][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 456.167818][T15385] usb 12-1: USB disconnect, device number 22 [ 456.171275][T15385] em28xx 12-1:0.0: Disconnecting em28xx [ 456.200666][T15385] em28xx 12-1:0.0: Closing input extension [ 456.298750][T18434] input: syz1 as /devices/virtual/input/input53 [ 456.301975][T18434] input: failed to attach handler leds to device input53, error: -6 [ 456.510149][T15385] em28xx 12-1:0.0: Freeing device [ 456.561314][ T5982] usb 5-1: USB disconnect, device number 51 [ 456.942502][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 457.471989][ T9017] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 457.641852][ T9017] usb 5-1: Using ep0 maxpacket: 8 [ 457.645782][ T9017] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 457.648621][ T9017] usb 5-1: config 179 has no interface number 0 [ 457.651511][ T9017] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 457.655827][ T9017] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 457.659544][ T9017] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 457.663443][ T9017] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 457.667188][ T9017] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 457.671446][ T9017] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 457.674966][ T9017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.697983][T18446] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 457.963110][ T9017] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input54 [ 457.963306][T18455] netlink: 'syz.6.3450': attribute type 3 has an invalid length. [ 457.981907][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 458.082637][T18458] fuse: Bad value for 'user_id' [ 458.084351][T18458] fuse: Bad value for 'user_id' [ 458.125895][T18446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 458.170454][T18446] hsr_slave_1 (unregistering): left promiscuous mode [ 458.249065][ T9017] usb 5-1: USB disconnect, device number 52 [ 458.251816][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 458.251851][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 458.263613][T18468] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3454'. [ 458.529140][T18475] bridge6: entered promiscuous mode [ 458.531020][T18475] bridge6: entered allmulticast mode [ 458.538546][T18476] bridge7: entered promiscuous mode [ 458.540412][T18476] bridge7: entered allmulticast mode [ 458.542280][ T5982] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 458.621384][T18483] netlink: 'syz.6.3459': attribute type 3 has an invalid length. [ 458.680700][T18485] ubi31: attaching mtd1 [ 458.686681][T18485] ubi31: scanning is finished [ 458.688243][T18485] ubi31: empty MTD device detected [ 458.690307][T18485] ubi31 error: ubi_early_get_peb: no free eraseblocks [ 458.701871][ T5982] usb 13-1: Using ep0 maxpacket: 8 [ 458.705009][ T5982] usb 13-1: config 0 has no interfaces? [ 458.707018][ T5982] usb 13-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 458.710051][ T5982] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.715055][ T5982] usb 13-1: config 0 descriptor?? [ 458.817195][T18485] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28 [ 458.909355][T18494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 458.923189][ T5982] usb 13-1: USB disconnect, device number 5 [ 458.972017][ T9017] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 459.012077][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 459.113257][ T40] audit: type=1400 audit(1776459378.309:20086): avc: denied { watch_reads } for pid=18509 comm="syz.8.3467" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=3114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 459.132186][ T9017] usb 11-1: Using ep0 maxpacket: 32 [ 459.137495][ T9017] usb 11-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 459.143298][ T9017] usb 11-1: config 0 interface 0 has no altsetting 0 [ 459.146637][ T9017] usb 11-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 459.150308][ T9017] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.157715][ T9017] usb 11-1: config 0 descriptor?? [ 459.210515][T18512] netlink: 'syz.8.3468': attribute type 3 has an invalid length. [ 459.481168][T18518] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 459.650709][T18531] program syz.0.3473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.700759][T18531] wg1 speed is unknown, defaulting to 1000 [ 459.705622][ T40] audit: type=1400 audit(1776459378.899:20087): avc: denied { ioctl } for pid=18534 comm="syz.8.3475" path="socket:[82727]" dev="sockfs" ino=82727 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 459.763060][ T40] audit: type=1400 audit(1776459378.959:20088): avc: denied { map } for pid=18537 comm="syz.8.3476" path="/126/file0/memory.events.local" dev="9p" ino=81264823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 460.051931][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 461.092143][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 461.671473][ T9017] usbhid 11-1:0.0: can't add hid device: -71 [ 461.674685][ T9017] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 461.679823][ T9017] usb 11-1: USB disconnect, device number 33 [ 462.131882][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 462.841602][T18547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.982397][T18595] ubi31: attaching mtd1 [ 463.005384][T18595] ubi31: scanning is finished [ 463.007579][T18595] ubi31: empty MTD device detected [ 463.010040][T18595] ubi31 error: ubi_early_get_peb: no free eraseblocks [ 463.114649][T18606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 463.117437][T18604] syzkaller0: entered promiscuous mode [ 463.124821][T18604] syzkaller0: entered allmulticast mode [ 463.148863][T18608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 463.172131][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 463.208396][T18595] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28 [ 463.292232][T18617] netlink: 'syz.0.3496': attribute type 3 has an invalid length. [ 463.433843][ T40] audit: type=1326 audit(1776459382.629:20089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18619 comm="syz.6.3497" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd306b9c819 code=0x0 [ 463.488732][ T40] audit: type=1400 audit(1776459382.679:20090): avc: denied { open } for pid=18619 comm="syz.6.3497" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=83388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 463.592012][ T5982] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 463.753138][ T5982] usb 12-1: Using ep0 maxpacket: 32 [ 463.762676][ T5982] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 463.769915][ T5982] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 463.776945][ T5982] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 463.788664][ T5982] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 463.793604][ T5982] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 463.797417][ T5982] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 463.802372][ T5982] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 463.816956][ T5982] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.826129][ T5982] usb 12-1: config 0 descriptor?? [ 464.032218][ T5982] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 464.211979][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 464.335343][ C2] usblp0: nonzero read bulk status received: -71 [ 464.336175][ T50] usb 12-1: USB disconnect, device number 23 [ 464.346095][T18624] usblp0: error -71 reading from printer [ 464.392564][T18646] syzkaller0: entered promiscuous mode [ 464.394559][T18646] syzkaller0: entered allmulticast mode [ 464.410392][T18624] usblp0: removed [ 464.568651][T18655] netlink: 'syz.6.3507': attribute type 3 has an invalid length. [ 464.663156][T18661] syzkaller0: entered promiscuous mode [ 464.665232][T18661] syzkaller0: entered allmulticast mode [ 465.024193][ T7130] IPVS: starting estimator thread 0... [ 465.059166][T18669] syzkaller1: entered promiscuous mode [ 465.062176][T18669] syzkaller1: entered allmulticast mode [ 465.122419][T18666] IPVS: using max 27 ests per chain, 64800 per kthread [ 465.251955][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 465.472470][ T7130] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 465.622045][ T7130] usb 13-1: Using ep0 maxpacket: 32 [ 465.628719][ T7130] usb 13-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 465.633234][ T7130] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 465.638098][ T7130] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 465.642969][ T7130] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.650679][ T7130] usb 13-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 465.655274][ T7130] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.659134][ T7130] usb 13-1: Product: syz [ 465.661045][ T7130] usb 13-1: Manufacturer: syz [ 465.663557][ T7130] usb 13-1: SerialNumber: syz [ 465.669678][ T7130] usb 13-1: config 0 descriptor?? [ 465.880689][T18677] netlink: 'syz.8.3513': attribute type 1 has an invalid length. [ 465.889108][T18677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.897023][T18677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.987239][ T7130] usb 13-1: USB disconnect, device number 6 [ 466.099748][ T40] audit: type=1326 audit(1776459385.289:20091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18692 comm="syz.7.3517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245779c819 code=0x7ffc0000 [ 466.112535][ T40] audit: type=1326 audit(1776459385.289:20092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18692 comm="syz.7.3517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245779c819 code=0x7ffc0000 [ 466.122268][ T40] audit: type=1326 audit(1776459385.289:20093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18692 comm="syz.7.3517" exe="/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f245779c819 code=0x7ffc0000 [ 466.153327][T18697] netlink: 'syz.7.3517': attribute type 1 has an invalid length. [ 466.193685][T18697] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3517'. [ 466.218070][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.227868][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.233948][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.249992][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.257457][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.301871][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 466.331473][T18700] wg1 speed is unknown, defaulting to 1000 [ 466.788835][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3523'. [ 466.821377][T18724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18724 comm=syz.0.3523 [ 466.931137][T18728] bridge_slave_1: left allmulticast mode [ 466.935673][T18728] bridge_slave_1: left promiscuous mode [ 466.940236][T18728] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.963649][T18728] bridge_slave_0: left allmulticast mode [ 466.966280][T18728] bridge_slave_0: left promiscuous mode [ 466.969092][T18728] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.043686][T18700] chnl_net:caif_netlink_parms(): no params data found [ 467.142088][T18700] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.144848][T18700] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.147758][T18700] bridge_slave_0: entered allmulticast mode [ 467.150882][T18700] bridge_slave_0: entered promiscuous mode [ 467.155088][T18700] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.157473][T18700] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.159852][T18700] bridge_slave_1: entered allmulticast mode [ 467.163336][T18700] bridge_slave_1: entered promiscuous mode [ 467.203730][T18700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.212097][T18700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.223452][T18744] netlink: 'syz.7.3528': attribute type 19 has an invalid length. [ 467.226175][T18744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3528'. [ 467.234213][T18700] team0: Port device team_slave_0 added [ 467.238218][T18700] team0: Port device team_slave_1 added [ 467.255191][T18700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.257511][T18700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.265991][T18700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.271145][T18700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.273889][T18700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.282458][T18700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.325007][T18700] hsr_slave_0: entered promiscuous mode [ 467.327703][T18700] hsr_slave_1: entered promiscuous mode [ 467.330175][T18700] debugfs: 'hsr0' already exists in 'hsr' [ 467.332287][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 467.335803][T18700] Cannot create hsr debugfs directory [ 467.359996][T18748] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3531'. [ 467.387517][ T40] audit: type=1400 audit(1776459386.579:20094): avc: denied { getattr } for pid=18747 comm="syz.8.3531" path="socket:[85245]" dev="sockfs" ino=85245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 468.132803][T18770] bridge_slave_1: left allmulticast mode [ 468.135702][T18770] bridge_slave_1: left promiscuous mode [ 468.138854][T18770] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.146644][T18770] bridge_slave_0: left allmulticast mode [ 468.148883][T18770] bridge_slave_0: left promiscuous mode [ 468.151224][T18770] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.296903][ T5957] Bluetooth: hci2: command tx timeout [ 468.352345][T18785] netlink: 'syz.8.3541': attribute type 10 has an invalid length. [ 468.366634][T18785] syz_tun: entered promiscuous mode [ 468.372517][T18785] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 468.375442][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 468.435597][T18785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.445806][ T40] audit: type=1400 audit(1776459387.639:20095): avc: denied { accept } for pid=18784 comm="syz.8.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 468.530354][T18802] netlink: 'syz.7.3546': attribute type 2 has an invalid length. [ 468.533259][T18802] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3546'. [ 468.550832][T18799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3547'. [ 468.615682][T18700] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.625100][T18700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.629030][T18700] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.640656][T18700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.648433][T18700] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.657103][T18700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.661120][T18700] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.671670][T18700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.710518][T18816] syzkaller0: left promiscuous mode [ 468.714540][T18816] syzkaller0: left allmulticast mode [ 468.771349][T18700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.794809][T18700] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.805012][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.807614][ T7985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.828244][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.831571][ T7985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.018403][T18700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.119297][T18835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3553'. [ 469.212968][T18700] veth0_vlan: entered promiscuous mode [ 469.219142][T18700] veth1_vlan: entered promiscuous mode [ 469.249576][T18700] veth0_macvtap: entered promiscuous mode [ 469.255441][T18700] veth1_macvtap: entered promiscuous mode [ 469.279488][T18700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.297099][T18700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.316977][ T7985] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.332455][ T7985] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.335629][ T7985] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.343334][ T7985] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.416445][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 469.470846][T15385] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 469.519504][ T7986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.526029][ T7986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.573643][T18844] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3555'. [ 469.578286][T18844] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3555'. [ 469.618719][T18842] wg1 speed is unknown, defaulting to 1000 [ 469.631394][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.637783][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.658490][T15385] usb 5-1: Using ep0 maxpacket: 16 [ 469.667704][T15385] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.673513][T15385] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 469.677590][T15385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.697563][T15385] usb 5-1: config 0 descriptor?? [ 469.712830][T15385] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 469.763633][T18848] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 470.371923][ T5957] Bluetooth: hci2: command tx timeout [ 470.429933][T18870] TCP: TCP_TX_DELAY enabled [ 470.451890][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 470.917884][ T40] audit: type=1804 audit(1776459390.109:20096): pid=18898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.3569" name="/newroot/3/file0/file0" dev="9p" ino=81264759 res=1 errno=0 [ 471.139280][T18907] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.3573'. [ 471.341712][T18912] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 471.344561][T18912] overlayfs: failed to set xattr on upper [ 471.346966][T18912] overlayfs: ...falling back to redirect_dir=nofollow. [ 471.349425][T18912] overlayfs: ...falling back to index=off. [ 471.351185][T18912] overlayfs: ...falling back to uuid=null. [ 471.359172][T18912] overlayfs: maximum fs stacking depth exceeded [ 471.365262][T18911] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 471.375936][ T40] audit: type=1400 audit(1776459390.569:20097): avc: denied { getopt } for pid=18913 comm="syz.8.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 471.428038][T18916] ieee802154 phy0 wpan0: encryption failed: -22 [ 471.485826][T18922] ubi31: attaching mtd0 [ 471.492019][ C2] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 471.513856][T18922] ubi31: scanning is finished [ 471.515476][T18922] ubi31: empty MTD device detected [ 471.792348][ T50] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 471.805035][T18922] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 471.807657][T18922] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 471.810157][T18922] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 471.813437][T18922] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 471.816166][T18922] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 471.818382][T18922] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 471.820980][T18922] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2783663042 [ 471.833533][T18922] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 471.845082][T18927] ubi31: background thread "ubi_bgt31d" started, PID 18927 [ 471.935720][T18932] ------------[ cut here ]------------ [ 471.938147][T18932] !valid_signal(sig) [ 471.938159][T18932] WARNING: kernel/signal.c:2174 at do_notify_parent+0xea8/0x10b0, CPU#3: syz.7.3582/18932 [ 471.943060][T18932] Modules linked in: [ 471.945140][T18932] CPU: 3 UID: 0 PID: 18932 Comm: syz.7.3582 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.948812][T18932] Tainted: [L]=SOFTLOCKUP [ 471.950182][T18932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 471.953646][T18932] RIP: 0010:do_notify_parent+0xea8/0x10b0 [ 471.955590][T18932] Code: f4 ff ff e8 2a d4 3d 00 41 c1 ff 08 c7 84 24 90 00 00 00 01 00 00 00 44 89 bc 24 a0 00 00 00 e9 92 f8 ff ff e8 09 d4 3d 00 90 <0f> 0b 90 45 31 f6 e9 f5 f9 ff ff e8 f8 d3 3d 00 90 0f 0b 90 e9 43 [ 471.962090][T18932] RSP: 0018:ffffc90005ec7ce8 EFLAGS: 00010093 [ 471.964231][T18932] RAX: 0000000000000000 RBX: ffff888050362500 RCX: ffffffff81cae0cb [ 471.967025][T18932] RDX: ffff888050362500 RSI: ffffffff81caeeb7 RDI: ffff888050362500 [ 471.969583][T18932] RBP: 0000000000000080 R08: 0000000000000007 R09: 0000000000000040 [ 471.972018][T18932] R10: 0000000000000080 R11: 0000000000000000 R12: 1ffff92000bd8fa0 [ 471.974628][T18932] R13: dffffc0000000000 R14: 0000000000000080 R15: ffff888052ef4a00 [ 471.977367][T18932] FS: 0000000000000000(0000) GS:ffff8880d65f2000(0000) knlGS:0000000000000000 [ 471.980592][T18932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.982708][T18932] CR2: 00007f86dfaf5d58 CR3: 0000000042d97000 CR4: 0000000000352ef0 [ 471.985229][T18932] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 471.987714][T18932] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 471.990322][T18932] Call Trace: [ 471.991459][T18932] [ 471.992445][T18932] ? __pfx_do_notify_parent+0x10/0x10 [ 471.994205][T18932] ? do_raw_spin_lock+0x128/0x260 [ 471.996047][T18932] ? lockdep_hardirqs_on+0x78/0x100 [ 471.998089][T18932] ? _raw_write_lock_irq+0x45/0x50 [ 472.000105][T18932] do_exit+0x1b05/0x2a60 [ 472.001663][T18932] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 472.004215][T18932] ? find_held_lock+0x2b/0x80 [ 472.005981][T18932] ? __pfx_do_exit+0x10/0x10 [ 472.007581][T18932] __x64_sys_exit+0x42/0x50 [ 472.009061][T18932] x64_sys_call+0x152e/0x1530 [ 472.010664][T18932] do_syscall_64+0x10b/0xf80 [ 472.012152][T18932] ? clear_bhb_loop+0x40/0x90 [ 472.013766][T18932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.015666][T18932] RIP: 0033:0x7f245779c819 [ 472.017124][T18932] Code: Unable to access opcode bytes at 0x7f245779c7ef. [ 472.019479][T18932] RSP: 002b:0000200000000358 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 472.022536][T18932] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f245779c819 [ 472.025295][T18932] RDX: 00007f245779c819 RSI: 0000200000000380 RDI: 000000000000000b [ 472.027821][T18932] RBP: 00007f2457832c91 R08: 00002000000010c0 R09: 7501dc8b09bf4bc1 [ 472.030381][T18932] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000000 [ 472.033082][T18932] R13: 00007f2457a16038 R14: 00007f2457a15fa0 R15: 00007fff5bfd69c8 [ 472.036026][T18932] [ 472.037184][T18932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 472.039584][T18932] CPU: 3 UID: 0 PID: 18932 Comm: syz.7.3582 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.042995][T18932] Tainted: [L]=SOFTLOCKUP [ 472.044863][T18932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 472.048629][T18932] Call Trace: [ 472.049951][T18932] [ 472.051056][T18932] dump_stack_lvl+0x100/0x190 [ 472.052708][T18932] vpanic+0x552/0x970 [ 472.054031][T18932] ? __pfx_vpanic+0x10/0x10 [ 472.055479][T18932] panic+0xd1/0xe0 [ 472.056658][T18932] ? __pfx_panic+0x10/0x10 [ 472.058055][T18932] ? check_panic_on_warn+0x1f/0x90 [ 472.059798][T18932] check_panic_on_warn.cold+0x19/0x34 [ 472.061699][T18932] ? do_notify_parent+0xea8/0x10b0 [ 472.063796][T18932] __warn.cold+0x191/0x328 [ 472.065589][T18932] __report_bug+0x296/0x3d0 [ 472.067163][T18932] ? do_notify_parent+0xea8/0x10b0 [ 472.068782][T18932] ? __pfx___report_bug+0x10/0x10 [ 472.070386][T18932] ? switch_task_namespaces+0x252/0x2c0 [ 472.072228][T18932] ? kasan_save_stack+0x3f/0x50 [ 472.073873][T18932] ? kasan_save_stack+0x30/0x50 [ 472.075364][T18932] ? kasan_save_track+0x14/0x30 [ 472.076990][T18932] ? kasan_save_free_info+0x3b/0x70 [ 472.078760][T18932] ? __kasan_slab_free+0x5f/0x80 [ 472.080589][T18932] ? kmem_cache_free+0x127/0x6c0 [ 472.082712][T18932] ? switch_task_namespaces+0x252/0x2c0 [ 472.084880][T18932] ? do_exit+0x8cd/0x2a60 [ 472.086368][T18932] ? __x64_sys_exit+0x42/0x50 [ 472.087901][T18932] ? x64_sys_call+0x152e/0x1530 [ 472.089535][T18932] ? do_syscall_64+0x10b/0xf80 [ 472.091073][T18932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.092997][T18932] ? do_notify_parent+0xea8/0x10b0 [ 472.094532][T18932] report_bug+0xb2/0x220 [ 472.095938][T18932] ? do_notify_parent+0xea8/0x10b0 [ 472.097733][T18932] handle_bug+0x16a/0x2a0 [ 472.099349][T18932] exc_invalid_op+0x17/0x50 [ 472.101030][T18932] asm_exc_invalid_op+0x1a/0x20 [ 472.102810][T18932] RIP: 0010:do_notify_parent+0xea8/0x10b0 [ 472.104741][T18932] Code: f4 ff ff e8 2a d4 3d 00 41 c1 ff 08 c7 84 24 90 00 00 00 01 00 00 00 44 89 bc 24 a0 00 00 00 e9 92 f8 ff ff e8 09 d4 3d 00 90 <0f> 0b 90 45 31 f6 e9 f5 f9 ff ff e8 f8 d3 3d 00 90 0f 0b 90 e9 43 [ 472.111156][T18932] RSP: 0018:ffffc90005ec7ce8 EFLAGS: 00010093 [ 472.113254][T18932] RAX: 0000000000000000 RBX: ffff888050362500 RCX: ffffffff81cae0cb [ 472.116100][T18932] RDX: ffff888050362500 RSI: ffffffff81caeeb7 RDI: ffff888050362500 [ 472.118977][T18932] RBP: 0000000000000080 R08: 0000000000000007 R09: 0000000000000040 [ 472.121631][T18932] R10: 0000000000000080 R11: 0000000000000000 R12: 1ffff92000bd8fa0 [ 472.124146][T18932] R13: dffffc0000000000 R14: 0000000000000080 R15: ffff888052ef4a00 [ 472.126743][T18932] ? do_notify_parent+0xbb/0x10b0 [ 472.128621][T18932] ? do_notify_parent+0xea7/0x10b0 [ 472.130382][T18932] ? do_notify_parent+0xea7/0x10b0 [ 472.132161][T18932] ? __pfx_do_notify_parent+0x10/0x10 [ 472.133940][T18932] ? do_raw_spin_lock+0x128/0x260 [ 472.135582][T18932] ? lockdep_hardirqs_on+0x78/0x100 [ 472.137445][T18932] ? _raw_write_lock_irq+0x45/0x50 [ 472.139196][T18932] do_exit+0x1b05/0x2a60 [ 472.140670][T18932] ? count_memcg_events_mm.constprop.0+0x109/0x2a0 [ 472.142805][T18932] ? find_held_lock+0x2b/0x80 [ 472.144352][T18932] ? __pfx_do_exit+0x10/0x10 [ 472.145829][T18932] __x64_sys_exit+0x42/0x50 [ 472.147298][T18932] x64_sys_call+0x152e/0x1530 [ 472.148936][T18932] do_syscall_64+0x10b/0xf80 [ 472.150687][T18932] ? clear_bhb_loop+0x40/0x90 [ 472.152320][T18932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.154349][T18932] RIP: 0033:0x7f245779c819 [ 472.155911][T18932] Code: Unable to access opcode bytes at 0x7f245779c7ef. [ 472.158424][T18932] RSP: 002b:0000200000000358 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 472.161295][T18932] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f245779c819 [ 472.163984][T18932] RDX: 00007f245779c819 RSI: 0000200000000380 RDI: 000000000000000b [ 472.166617][T18932] RBP: 00007f2457832c91 R08: 00002000000010c0 R09: 7501dc8b09bf4bc1 [ 472.169405][T18932] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000000 [ 472.172839][T18932] R13: 00007f2457a16038 R14: 00007f2457a15fa0 R15: 00007fff5bfd69c8 [ 472.175852][T18932] [ 472.177687][T18932] Kernel Offset: disabled [ 472.179056][T18932] Rebooting in 86400 seconds..