last executing test programs: 2.549843334s ago: executing program 1 (id=59): r0 = socket(0x10, 0x5, 0xfffffffd) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @remote}}}, &(0x7f0000000040)=0x84) listen(r1, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x1, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40408d4}, 0x20004800) 2.4278194s ago: executing program 1 (id=60): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x20000000) listen(r0, 0xc) (async) listen(r0, 0xc) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r3, 0x8010aebb, &(0x7f0000000140)={0xa000, 0x1c000}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000100) read$char_usb(r5, &(0x7f0000000000)=""/172, 0xac) (async) read$char_usb(r5, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r4) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7e}, {0xd, 0x24, 0xf, 0x1, 0x4008002, 0xf, 0x4, 0xb}, {0x6, 0x24, 0x1a, 0x3, 0x13}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x7, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0xbd, 0x63}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x9, 0x6}}}}}}}]}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) times(0xfffffffffffffffe) (async) times(0xfffffffffffffffe) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 1.907831769s ago: executing program 3 (id=66): getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x5ab, 0x72, 0x9, 0x8, 0x2]}, &(0x7f0000000080)=0x78) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001400)={0x0, 0x5, 0xfffffff9, 0x9}, &(0x7f0000001440)=0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, 0x0, 0x4004000) r2 = fanotify_init(0x20, 0x800) quotactl_fd$Q_SETINFO(r2, 0x1, r1, &(0x7f00000000c0)={0x8, 0xfffffffffffffff3, 0x0, 0x5}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001700)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @isdn={0x22, 0x36, 0x6d, 0x3, 0x8b}, @l2tp={0x2, 0x0, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)='pim6reg1\x00', 0x6, 0x3ff, 0x8}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x4008084) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000019c0)={0x0, 'vlan0\x00', {0x2}, 0x6}) 1.830676666s ago: executing program 3 (id=68): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x6}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) r1 = socket(0xa, 0x3, 0xff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000fedbdf2500000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000500000000000000ffffffffffffffff000000000000000000800000000000000000000000000000fdffffffffffff7ffeffffffff7f40000200000000000008000000000000000001000001000000004400050000000000000000000000000000000000000000002b"], 0xfc}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="00000000000000420000009b7a000100e813c5d46adcd8eba4ae721f98420900db6a00000000fff74ec1d8a5a91157439586c7d2ff44bccf2d59283d69959c8c329fb5cb24da0170920848852acd085d43ffb0e0f996f5fdeb5860ac345c563ebf4b7c863a213077f52cfa235626c727cefb140455c724a67c2ebdf299a1f6684eb47af7d2153fa6678031e2c654d012a89730494364e9de0242188d2b8cba0dcab2043c528075075f6418fa6aae31b4dec86c9fb08d240eb666e930e6d11b2354afe341fd07b72d0cfd070368addfc651eb9a89ce5eb042affb3aa610d3ac5840d77ebb430d21be12ab7c9498f9ce38e807e5973ce127fb74", 0xf9, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 1.760861506s ago: executing program 3 (id=70): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000280)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0xff, '\x00', @p_u8=&(0x7f0000000200)=0x3}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000746000/0x3000)=nil, 0x3000, 0x5f4bd7f24e344398) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0xffff) socket(0x2d, 0x2, 0x0) (async) close(0x3) (async) prctl$PR_SET_THP_DISABLE(0x41, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.760329827s ago: executing program 3 (id=71): r0 = socket$inet6(0x10, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5", 0xa}], 0x1}}], 0x1, 0x24044015) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000000c0)=@secondary) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0xfa, 0x10, 0xfff00002}, {0x16, 0x0, 0xfd}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x800, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) 1.610906342s ago: executing program 3 (id=74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f000022d000/0x1000)=nil, 0x1000, 0x9) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="0000000000000000000000000005", 0x0, 0x7fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.180757311s ago: executing program 3 (id=85): mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fallocate(r2, 0x0, 0x800657, 0x200) ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x6, &(0x7f0000000200)=[{0x13, '\x00', @buffer={"eb4de66fe5a05cc2520bb3cb000722e64dc432bca0ee9d99c7d8751b80c2c208", 0x20}, 0x6}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fcffffff000000002f000000100003800400040008000200fd7f000018000180140002006d61637674617030"], 0x3c}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e8901fc03010902120001085440010904"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000001c0)={0xcd0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f00000002c0)={0x0, r7}) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x1, &(0x7f0000000040)={0x8, "a144b717396101d16e30b08b0737e8ff6c1ce1e8fe3c10568d49b254bdbb4038f4"}}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000180), 0x200, 0x0) ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000000c0)={&(0x7f0000001780)=[{0x50, 0x2a01, 0x0, 0x0}], 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x2040, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x18, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x2d}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0x40040) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.178889274s ago: executing program 2 (id=86): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r1, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1) readv(r1, &(0x7f0000001980)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) timer_getoverrun(r0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}]}, 0x20}}, 0x4000000) 1.048574394s ago: executing program 2 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffff0300000000000000020000009500"/64], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) 1.047660957s ago: executing program 2 (id=88): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x44040) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f0000000140)='IPVS\x00', 0x200800, &(0x7f0000000180)={@align=0x7, {0x401, 0x1eb0, 0x7, 0x7fff}}, 0x1, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1}, 0x1, &(0x7f0000000340)=[{0x1, 0x6, &(0x7f0000000240)='[\x00', &(0x7f0000000280)="1ea18e716e42d5cda5aa1c9559c5e30e905d33787d2af077acf91c4016d1bb985c55786e4704c4918c8afe5d367e3d87e827cc70f4c38461bd8a99340260ce79499cac29e41b39b15f94455d9071b5713f24a01690bde15356f19ce4e686eb832301109bccd5c27b49f46122e71e128179ff1d3c1ba5359d0c9ee7bc157040b591a8b848013a256b519c7800afafa51795e6a68dde92ebe0e494", 0x9a, 0x30}]}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000400)={0x1, 0x7, 0x7}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x40, 0x8, 0x80000, 0x6, {{0x1a, 0x4, 0x1, 0x3, 0x68, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x2f, 0x1, [{0x1, 0x9, "29ecb620af0f72"}, {0x5, 0x6, "57c66a01"}, {0x2, 0x7, "0116a39a94"}, {0x2, 0xc, "594a7842ed4813c5ee7f"}, {0x5, 0x7, "3077295b13"}]}, @timestamp_prespec={0x44, 0x24, 0xe0, 0x3, 0x1, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010100, 0x5}, {@multicast1, 0x4}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@mpls_newroute={0x2c, 0x18, 0x200, 0x70bd28, 0x25dfdbfe, {0x1c, 0x80, 0x14, 0x4, 0xfc, 0x0, 0xc8, 0x9, 0x2800}, [@RTA_DST={0x8}, @RTA_OIF={0x8, 0x4, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000010) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000640)={0x0, 0x0, 0x30, 0x100000001, 0x7f}, &(0x7f0000000680)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000006c0)={r4, 0x800, 0x0, 0xeb9}, &(0x7f0000000700)=0x10) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=r5, 0xd, 0x1, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@cgroup=r2, r5, 0x2a, 0x2012, 0xffffffffffffffff, @value=r2, @void, @void, @void, r7}, 0x20) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000940)=""/171, &(0x7f0000000a00)=0xab) ioctl$SG_SET_TIMEOUT(r6, 0x2201, &(0x7f0000000a40)=0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b40)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000a80)="9070b0bdd9604a8be5a031a3403a95fd4fbd75e6b0d080cf022927e759031d15f5ec7dcd53d549e7d390bfdde53445c28dd5303417cf491a8fc0c119454c053cac9e1305b1a439ce90cf30d741f10a97ba9ab91db7eba4e93cc1a1ff3e0c55fd514d1d9a4d40eee1ba6d4ffa4c441be5d440baa494688a8b1fa2de3ee7ed959a04cd5c147e", 0x85, r0}, 0x68) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x44000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x144, r1, 0x73530f8ce58a505e, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xae}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xbf28d565e353a01}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000010c0), r0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8045}, 0x11) sendmsg$nl_netfilter(r6, &(0x7f00000023c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002380)={&(0x7f0000001200)={0x1174, 0x6, 0x7, 0x301, 0x70bd26, 0x25dfdbff, {0x1, 0x0, 0x1}, [@typed={0xc, 0x12f, 0x0, 0x0, @u64=0xff}, @nested={0x1008, 0x121, 0x0, 0x1, [@generic="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", @nested={0x4, 0x12}]}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x137, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x9a, 0x0, 0x0, @str='ip_vti0\x00'}, @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x6}, @generic="a2b3e1eda7e5d254030739f27b86c5ac4b3b8764a8175b7329d972be0e8505aa02b2a86245eb4a0570d1047e45a51ad741c83bcf32564f31309b7131f9977d899710f22a2fdb560c4f9d10a8b03f8112cfc55b207cd5634d9139012333b2214cb2c13160227f1f9c53755d465be35d652af422ca8295", @typed={0x8, 0x14f, 0x0, 0x0, @fd=r6}, @generic="5d4d5d899484ddac792e26fc364c197c920f45b6b2a3f3", @nested={0x8c, 0x55, 0x0, 0x1, [@typed={0x4, 0x136}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x14b}, @typed={0x67, 0x6b, 0x0, 0x0, @binary="05f59f1aa16288591e3f4da5957dd643d42c7570cddc07069a2fb5dd8f93d2e9a3a6b44af72922aece1b62b62987742449c8e3307b0226fc84cd1f4aa4f1b305677a134e36f881c6c83c7a0976b32382ce837181d5f99580892a96ffcbc8da0551d67c"}, @nested={0x4, 0x110}]}]}, 0x1174}, 0x1, 0x0, 0x0, 0x24000044}, 0x0) recvmsg$unix(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002400)=""/125, 0x7d}, {&(0x7f0000002480)=""/84, 0x54}, {&(0x7f0000002500)=""/28, 0x1c}, {&(0x7f0000002540)=""/242, 0xf2}, {&(0x7f0000002640)=""/164, 0xa4}, {&(0x7f0000002700)=""/65, 0x41}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/192, 0xc0}], 0x8, &(0x7f00000038c0)=[@cred={{0x1c}}], 0x20}, 0x2023) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000003980), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000003a40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, r12, 0xd00, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x7, 0x4, 0x4, 0x5f}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000003a80)=0xd, 0x4) pwritev2(r6, &(0x7f0000003f40)=[{&(0x7f0000003ac0)="7d4b0f9e244c3d4d3f6cf7f8f4355c7d5fcfc610481a639a8497043a0ad1fe2ba45a8186f0d2ad45c095ed30ee8e5062254f5e50d847de6a6b16659f1ba678585472048fd30473762a235a8fd5dcabbfe31783cc36ef926b43be40", 0x5b}, {&(0x7f0000003b40)="95c0fb600f91c29288faa89727ed8ca89f474d8b049cef20bf0bb671e327656b1aa76bc3da09e7e27f6f50e9ff18052ffc7d39cc36e90661607848c80c8764df82874f778592c29e09862e7734dfe25d539e6397d0c47a080b255244e0195aac87d02eee63656d702acf3337dbe50c9905513a1348c4d6eee65011eb73efa384dc79842d15b98cc0a271ff4fe307de369faa2695f472", 0x96}, {&(0x7f0000003c00)}, {&(0x7f0000003c40)="6c6c10a172e57fd7492514df933d55b450fc62d87d1aea101ef941cb018844698fa6c70f9813a6e743ea5911fe931687bd01bfd8f148cf950e87ee6ae6fb7bb917b4f92b085ad9d873e11e5bb9604065ace628463d77231d4d0ae1aa81e82a8e44faa0aec5d8d11372f749fe1f266944d697c33f8ea506faec3926acdff50f66c7a6b8ea24ecf3f400068f1087669f520e44faa3e94be3c0c7ab260edb712f6e8de22d47897cf013d8f7a01b98cf1c84", 0xb0}, {&(0x7f0000003d00)="a3c813d185199b4559f90e731be0a8cb085e2ce1ce26ce05662228931c63f150a4b220b5150bc34eadc37f5f61f4f204e601fea5b4f1446b5afdc18b1202b1d6147506a18d5a2fe56675ea7fe1fbf44000062735345c598b4b612f251c6f237a68c2eadb755a7908f5936586ed981c7b7e56b9476cd633d3e164bc2a6cd487b10e9caceef91e79732aeb1edbda208e00c1869b89dfe940ab6d9334e08fab79d9391563ccbb1726feebe390a9362d56ad65a1bac333bb72571ef7c05422873930fd2c25a89723bb12ac99a4bd6e7fe068c16a32008780dd0cd3f2a08afd", 0xdd}, {&(0x7f0000003e00)="084c493c5245d84e6e7bf37d05f129eb72fc3ebee8509baf9a85059489fe63bfd9066d9373df0fe63387dc8e5cd0d2887364c374", 0x34}, {&(0x7f0000003e40)="2dce54a1a69a086d516b4fabb7e66a16efc471d9997744c95d6b4c1ee38f1ef2a6ce1d13695f79f92201633acadc9ef8a6ccd3468a98996690589cc47e271f1ccdeeeca462b3c0de52949f6abe05f9d6619671b4730636c9d00138f1d83fdac7e933c4c79c62d3a5b580cf91cd9031ac21ba3275a79d5c780b8d8720da04b2ab3a159cea6dbfe1fec49f6cac307d5143686f065ee44cfcbb1b4c1f953a16e02c0691283945f9338f2e2b7f8ccbe12cfd3d58a73b2ae3c84e48c911d30ceb817dcc1040af2c7b703eb85a0a3ac80f0f6e47f2cf6e59a2b28fe13d63", 0xdb}], 0x7, 0x5a, 0x9, 0x1a) 980.779269ms ago: executing program 2 (id=89): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) r2 = socket$inet6(0xa, 0x2, 0x0) recvfrom(r2, 0x0, 0x0, 0x22, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000680)="00000000000600000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x9, 0x2, 0x80, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0xce0d, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x6e6bbf, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in6=@remote, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x9, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e1d, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e22, 0xfffffff7, @mcast2, 0x74}}}, &(0x7f0000000280)=0x84) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x5607, 0x12) ioctl$VT_ACTIVATE(r8, 0x5606, 0x4) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) 896.78976ms ago: executing program 1 (id=90): syz_emit_ethernet(0x11e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 896.249325ms ago: executing program 1 (id=91): mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) flock(0xffffffffffffffff, 0xa422928b49da8f63) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726974792e7365637572697482e11ae2f5d7adebac44"], &(0x7f00000000c0)='D&[}\x00', 0x5, 0x3) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x1, 0x18020, 0x0) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@known='security.selinux\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) (async) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x2, 0x0, 0x0) (async) flock(0xffffffffffffffff, 0xa422928b49da8f63) (async) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726974792e7365637572697482e11ae2f5d7adebac44"], &(0x7f00000000c0)='D&[}\x00', 0x5, 0x3) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000040)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) shutdown(r1, 0x0) (async) listen(r1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) (async) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x1, 0x18020, 0x0) (async) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@known='security.selinux\x00', 0x0, 0x0) (async) 810.147848ms ago: executing program 1 (id=92): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad56b6c5820fae6dcd539f06d1991c7bb6bb2266e3fa850fe341000000ef915d564c90c20000a1eb3fda2d6368ac1863a17814179fe70951d84637ad", 0x3c) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000005c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (async) r3 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x66, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, "acd0c4c8999fd7e5"}, 0x6}}]}, 0x2c}}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) 802.93772ms ago: executing program 1 (id=93): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x3, 0x2}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) memfd_create(&(0x7f0000000900)='\x103q}2\x9a\xce\xaf\x85\x81\xd0\xe1b\xdd\xb6^\x04\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\r\xfe\xfc\xa0\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83l\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\f2\x98\xd1y#\xfb@\x03\xc4s\xb3>gV\x16}\xa0I\x7f\x12\xc9\x1dX\x8a\x7f\nc\r}F\xe2e\xb5)l\xbb\x02\xfa\xb7\xb6EEF\xa2C\xa0]\xda8\xc2~\x1c \x91\a\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x93S\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2>\x9f\xef\xf7\xf7\x9c8\xbd\x88\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p(\xf8\xa6\xaa&Q\x00\x00\x00\x00\x00\x00\x00\x02\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\xe9\xec&\x0e\xcd5:D\x83\x10\xa9\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9M=\xe0^\xa8\xed)\xe8Z\xe8\x99\xb9\x83!\xb3\t\xaa\xd8\xd6\xd5p\xe6\x06\x9f\f]\xf5&-O\xc9WC:\x89\xd0qG\xcb\xc4\x8b\xf7\xb8#K\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\x01\x00\x00\x006\xd0\x87y\xc6T\x93\xae\xd5l\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\xbd,\x16\x84\xcd\xd1\xd8\xe1P}\xbf0\xd8\x8d%Yh\xb5\xb4\"\xe5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x8fQ\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfc\x00\x00\x00\x00\x00\x00\x00\x00', 0x7) (async) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)=0x2b1b1983) (async) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x7, 0x714) syz_emit_ethernet(0xa5, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaac87be69708990800460c00970000000000069078ac1414bbe00000010100000000004001", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYRES32=r1], 0x0) (async) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x4, 0x0, 0x4}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000240)=0x2) (async) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x2) (async) mount$cgroup2(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='memory_hugetlb_Zyaccounting,memory_recursiveprot,\x00', @ANYBLOB="e955a6a35a460f916407cf10371623145ff539fa0b51882c2eac20e21798b02bc7296fdeda0bb6266e9075691ee1d9061a40a1dd4dcd4e0b3e8334eb45535732d57776fb29f80c2a3eaa3b894cd92117e3c6a095b9ec8a1498feb6e6a3861afce45349d9bff72e72324919091482e67591536f"]) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000300), 0x4) 540.682247ms ago: executing program 0 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x3]}, 0x8, 0x80000) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000140), 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f00000002c0)={0x3, 0x2, 0x703, 0x0, 0x9}) (async, rerun: 64) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000100)) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x1, 0x2d259eaa, 0xfffffffe, 0x10, 0x8, 0x100011}) r4 = memfd_secret(0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800c372", @ANYRES16=r5, @ANYBLOB="00042dbd7000fcdbdf251200000008003c000900000008003a000900000008002c000400000008000b008000000005002d0001000000080039008100000005002a000100000005002f000100000005002e0001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x7e24161014299f61}, 0x80) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) (async) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) (async) r8 = socket(0x23, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r8, 0x89ee, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x20, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 391.03202ms ago: executing program 0 (id=96): eventfd2(0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000c80), 0x1ff, 0x200800) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0x5}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x2000094, &(0x7f0000000040)=ANY=[]) (async, rerun: 32) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f00000043c0)={0x2020}, 0x2020) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="66b8007800000f23d00f21f866353000000c0f23f80f019c0825642e0fc72a6766c7442400b41bb5ad6766c74424024d0000006766c744240600000000670f011c243e64260f01c4baa00066b8a39d000066ef66902680d706baf80c66b8ece20f8f66efbafc0cb8dd00ef0fe87350", 0xffffffd9}], 0x1, 0x3b, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000300)=@tipc=@name, 0x80, &(0x7f0000000740), 0x0, &(0x7f00000007c0)=""/54, 0x36}, 0x43) (async) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x2, 0x0, 0x0) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000840)={"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"}) (async) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xffff1000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x2}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x6, 0xd, 0xf, '\x00', 0x1}, {0x99, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x81, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x8, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0x0, 0x87, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x3, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0x5, 0x1, '\x00', 0x21}, {0x5, 0xec, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) (async) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"f7c18106feff20528f054e75ce66af1f8cec1f3a622abf949a66d0f2bc39ffe23a43c89c9b7b56cadd87d141f60192308fef2a04294f9899c01e3d7ba1b52fe39c4dade4f47dd88ffb1d2bef4744b74c93c9e635dd1e6f1922530b90fe045627adfa3e8c5f097c667d565500808da08a8db9625b899d731f446efcb99bd940c8d45f88af33717b264ec81f01be2d054ef2fe5cc742f15f1b37f7498cbf21d8266a03009c34492e1372b85d6629814582ba03cc402bbd1ad83e6090a67b9ebe837cdd7a81cb309a2d4fb111827d8d91cc64081c3fca32f152260c6548890613178d928c8de28e5827e39aea1eede5d99981ff9c8d46c3b16e4d067d19e3142d8771c82cb9ed9794ece2140498a3f3afe9e04875da5350b382e0a8531c612c2e0ee60bf3bfe1218fa375328f7e5c39517053ab1a5340d956af5a0a1867a7380a0a094587d283598bc2f43db5c3004039704da2f4f046741b1920a931aca0a973e69e00bdd00d6668b6134bdc76b8bdf90cb9baa12e68a074e0ab70c9b82686795d3a353c0c04701603659a3948e8329ee1ef3995c9ef45a7b24a44638b1bbcae9397956067039972308abf7b17f5e9cc75dbbd85f8c3f618f17686596314841fc74e77487c6d05512cdbad146e8096ce8c5766dc52494ab50875d5da7c00ddcda731925933c02a9a3ddf80eff7d619b4c341eef2f8fce8cd5b482534bb3c4fd1879eae1566596a5de88da164877733dbc8582e4147149db0ba5ccbc0170f64ca31d8168d30701dd74e7fd42310e9ab7f494dc669d408caaf5b55ed9ed05cef279ffccf712c2d0a47c4692a187e69e0c8d5a2e1be36cf38b61604e700e080feb43032cea8f2f067c6ab1e6f1eff124fc9ffd2bd3b1ffbccfa031ce43e98afb79f344f81573da9bf6b52687cb1bfbab9b6084c643a655b9c0ad622a215dafe18153a2f9d1d8a46c8d4a3cf7634abcfd309425d7ecb3e8672b2948496507a1c4b10796f194ae4013f5c9547cb87d9f1b40fad80b1d3d21ae025959bd866af48c15ea2ecdf1510c4c57003d194d698aa052cbfa68d5a9c241f46d234280cae19af3f1ec7418b26412bfc4013a68b5d3c81d28c8a6aee412374439b481d47e02536b658a5d3af0c78aeca006c6e4d3ea4a1302e3af4565862616ffe5be51cac16fdc20cdcda534c6361f193f6400c8cb63688a89e995cb8f0df7995cbe743fb9396683a9ecf9baccd6325982b087fa3d32fe89579a8a9fb42a4e9a753718c802c405db00ac67d1d418a707035ac629ad10128f3df6ad49716006ec65c80e459f7c4c4c04ed437bebfe75efe13d865161a378863dc238e64fe62e1f54c0122d45542b9a7431a4ed8a4ef28c6e0600c08371657c9341047b385762008051183ad606a1149e2bdbdd74230e48a2fd4214fe1e6a34edb82a905556c77bb48341ff1555999c3"}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, &(0x7f0000000100), 0x1, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 390.868024ms ago: executing program 0 (id=97): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8000) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x13}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0xffffffff, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, 0x14, "faf98317e5a1149989fc8dbe43ea6acc9663a2503dc3bd3fe37d58328bbad0099cebf225f5d69098c8b534464c512bdd8a0f1901000100", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "6704dae4901802c4dae4162e43ac61b7ad3300", [0x7, 0x6]}}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095", @ANYRESOCT=r0, @ANYBLOB="9a13026248743fd1810daffebd0173895f92cfcb7250271ee448433e19c4d7743370cad8aa627036b0fda130b1547f91474f5a8ab55c36a160c43728dd727d36436a70cf34767c8869f560de2556b260cb3b20"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r3}, 0x94) 308.568676ms ago: executing program 0 (id=98): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pwrite64(r1, &(0x7f0000000180)="eb3c056be1ebd79af3ff49c75e70fefad2dd76830a10c2e9702938fd7cc4344b32c9154f7303459330a1faa5e634397cb75c975718c75d76394d4b5fc92ee3abadb14ecd5dcf0ff6e28d427021161589411f4ba5b70c6acc23d7c63cac5238392063d4e03a5905caaf3cfa634845f10742fc3894ab1c82eced5ea05bd48807e492d73b2bc5024ef4ae2e12e0f046fba7cdba114bc794458eeffe6f6b70faf5ad23f9a6aca7431316e9816446c32b886080696d6399b559c9447440e121c96721e7cd30d55dfe2b94a0649800c6fae11047e94a8f17238c7c76ac5ae53cedb975c2511ca2e7c6d410cf8859de382d24af717a406ec8acf6c58e", 0xf9, 0x3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0}, 0x3400c0c0) 308.387763ms ago: executing program 0 (id=99): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8e, 0x0, 0x100000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000040)={0x1, 0x7ff, 0x4, 0x0, 0x1}) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x1010060, 0x0) 210.838234ms ago: executing program 0 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FIONCLEX(r0, 0x5450) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r2, 0x0, 0x8010) (async) sendmsg$NL80211_CMD_DEL_PMK(r2, 0x0, 0x8010) syz_usb_connect(0x2, 0x42, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x44}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0xe0e0e0e0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x602000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x10002, 0xf, 0x3, 0x0, 0x1, 0x3}, 0x30, 0x0) landlock_restrict_self(r7, 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10) gettid() (async) gettid() r8 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fstat(r8, &(0x7f0000000540)) (async) fstat(r8, &(0x7f0000000540)) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000480)={r10, 0x0, r11, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000480)={r10, 0x0, r11, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400a66c", @ANYRES16=r1, @ANYBLOB="230a29bd7000fbdbdf2531000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400a66c", @ANYRES16=r1, @ANYBLOB="230a29bd7000fbdbdf2531000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 1.154645ms ago: executing program 2 (id=101): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) (async) clock_getres(0x2, &(0x7f0000000380)) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000780), 0xa400, 0x0) (rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, 0x0) (async, rerun: 32) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(xeta-generic)\x00'}, 0x58) (async, rerun: 32) sched_rr_get_interval(0x0, &(0x7f0000000080)) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x19) 0s ago: executing program 2 (id=102): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0xc0000100, 0x0, 0x3}]}) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getgroups(0x27, &(0x7f0000002540)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@getqdisc={0x4c, 0x26, 0x400, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {0xf, 0xfff2}, {0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x28}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24018840}, 0x40d4) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf2502000000060001004e21000006000a004e22000006000a004e24000008000b00", @ANYRES32=r8, @ANYBLOB="14000700fe8000000000000000000000000000aa060001004e230000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x600040, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x100000) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="05f237cefa55af5e229655cef4c04f21474147c7dd015e310e86a0d834db6f3086e5128a0bf215dcbc7e8db03f47da96526a315f4573c97d597985c6e989b6aa9955f5c535addc67431bcde6d14ee69c7c6b39"], 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9403' (ED25519) to the list of known hosts. [ 48.520112][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.520126][ T42] audit: type=1400 audit(1784349508.154:141): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.531696][ T42] audit: type=1400 audit(1784349508.164:142): avc: denied { mount } for pid=5724 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.534877][ T5724] cgroup: Unknown subsys name 'net' [ 48.549301][ T42] audit: type=1400 audit(1784349508.184:143): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.739473][ T5724] cgroup: Unknown subsys name 'cpuset' [ 48.745055][ T5724] cgroup: Unknown subsys name 'rlimit' [ 48.931531][ T42] audit: type=1400 audit(1784349508.564:144): avc: denied { setattr } for pid=5724 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.940789][ T42] audit: type=1400 audit(1784349508.564:145): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.949062][ T42] audit: type=1400 audit(1784349508.564:146): avc: denied { write } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.957342][ T42] audit: type=1400 audit(1784349508.564:147): avc: denied { read } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.965843][ T42] audit: type=1400 audit(1784349508.574:148): avc: denied { mounton } for pid=5724 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.975826][ T42] audit: type=1400 audit(1784349508.574:149): avc: denied { mount } for pid=5724 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.985147][ T42] audit: type=1400 audit(1784349508.584:150): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.999872][ T5728] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.760413][ T5724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.552667][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 54.552685][ T42] audit: type=1400 audit(1784349514.184:158): avc: denied { execmem } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.701000][ T42] audit: type=1400 audit(1784349514.334:159): avc: denied { create } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.707493][ T42] audit: type=1400 audit(1784349514.334:160): avc: denied { read write } for pid=5739 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.715221][ T42] audit: type=1400 audit(1784349514.344:161): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.722738][ T42] audit: type=1400 audit(1784349514.344:163): avc: denied { ioctl } for pid=5739 comm="syz-executor" path="socket:[7197]" dev="sockfs" ino=7197 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.730395][ T42] audit: type=1400 audit(1784349514.344:162): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="socket:[6667]" dev="sockfs" ino=6667 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.753262][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.753263][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.756497][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.756832][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.762400][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.762922][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.763950][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.765632][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.765701][ T5756] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.770077][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.770257][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.770797][ T5756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.772393][ T5752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.772602][ T5756] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.772638][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.773702][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.776542][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.777120][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.803377][ T42] audit: type=1400 audit(1784349514.424:164): avc: denied { read } for pid=5749 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.811701][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.812332][ T42] audit: type=1400 audit(1784349514.424:165): avc: denied { open } for pid=5749 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.814766][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.820774][ T42] audit: type=1400 audit(1784349514.424:166): avc: denied { mounton } for pid=5749 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.820800][ T42] audit: type=1400 audit(1784349514.424:167): avc: denied { module_request } for pid=5749 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 55.380443][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.384034][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.387829][ T5738] bridge_slave_0: entered allmulticast mode [ 55.390764][ T5738] bridge_slave_0: entered promiscuous mode [ 55.413682][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.416901][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.420052][ T5738] bridge_slave_1: entered allmulticast mode [ 55.423890][ T5738] bridge_slave_1: entered promiscuous mode [ 55.466717][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.507966][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.554445][ T5738] team0: Port device team_slave_0 added [ 55.578355][ T5738] team0: Port device team_slave_1 added [ 55.656982][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.660036][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.670719][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.716877][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.720026][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.730850][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.735909][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.739145][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.742348][ T5739] bridge_slave_0: entered allmulticast mode [ 55.746667][ T5739] bridge_slave_0: entered promiscuous mode [ 55.751369][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.754321][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.757383][ T5739] bridge_slave_1: entered allmulticast mode [ 55.761451][ T5739] bridge_slave_1: entered promiscuous mode [ 55.765267][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.768352][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.771303][ T5740] bridge_slave_0: entered allmulticast mode [ 55.775359][ T5740] bridge_slave_0: entered promiscuous mode [ 55.780222][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.783299][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.786691][ T5740] bridge_slave_1: entered allmulticast mode [ 55.790446][ T5740] bridge_slave_1: entered promiscuous mode [ 55.835578][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.838638][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.841024][ T5749] bridge_slave_0: entered allmulticast mode [ 55.843626][ T5749] bridge_slave_0: entered promiscuous mode [ 55.880731][ T5738] hsr_slave_0: entered promiscuous mode [ 55.883118][ T5738] hsr_slave_1: entered promiscuous mode [ 55.887324][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.890468][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.893755][ T5749] bridge_slave_1: entered allmulticast mode [ 55.897717][ T5749] bridge_slave_1: entered promiscuous mode [ 55.916406][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.922291][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.929319][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.954378][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.986928][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.998742][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.024637][ T5739] team0: Port device team_slave_0 added [ 56.027490][ T5740] team0: Port device team_slave_0 added [ 56.046153][ T5749] team0: Port device team_slave_0 added [ 56.050045][ T5739] team0: Port device team_slave_1 added [ 56.053149][ T5740] team0: Port device team_slave_1 added [ 56.060117][ T5749] team0: Port device team_slave_1 added [ 56.104930][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.107263][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.115175][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.119298][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.122010][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.131420][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.141618][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.144576][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.154001][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.158950][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.161733][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.170016][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.174579][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.177460][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.185313][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.197896][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.200131][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.208270][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.351964][ T5739] hsr_slave_0: entered promiscuous mode [ 56.355480][ T5739] hsr_slave_1: entered promiscuous mode [ 56.359432][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 56.361976][ T5739] Cannot create hsr debugfs directory [ 56.369967][ T5749] hsr_slave_0: entered promiscuous mode [ 56.373135][ T5749] hsr_slave_1: entered promiscuous mode [ 56.375927][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 56.378536][ T5749] Cannot create hsr debugfs directory [ 56.385249][ T5740] hsr_slave_0: entered promiscuous mode [ 56.388547][ T5740] hsr_slave_1: entered promiscuous mode [ 56.391236][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 56.393139][ T5740] Cannot create hsr debugfs directory [ 56.620934][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.628626][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.631677][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.636895][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.676141][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.680584][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.708740][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.715323][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.761552][ T5740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.766983][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.771008][ T5740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.778639][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.782838][ T5740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.790287][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.794690][ T5740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.802491][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.847458][ T5097] Bluetooth: hci3: command tx timeout [ 56.847465][ T5754] Bluetooth: hci2: command tx timeout [ 56.847551][ T5743] Bluetooth: hci1: command tx timeout [ 56.856961][ T5743] Bluetooth: hci0: command tx timeout [ 56.870081][ T5749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.874222][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.877579][ T5749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.882087][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.885300][ T5749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.889297][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.892315][ T5749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.898350][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.983346][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.990787][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.994381][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.001157][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.009110][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.014992][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.021297][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.026754][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.031957][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.082135][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.098176][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.109405][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.112909][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.130013][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.133059][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.169480][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.176588][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.184776][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.187152][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.207928][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.210983][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.240485][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.254827][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.257738][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.282907][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.285990][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.302581][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.349426][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.358691][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.361770][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.378490][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.381335][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.612562][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.663649][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.674042][ T5738] veth0_vlan: entered promiscuous mode [ 57.686627][ T5738] veth1_vlan: entered promiscuous mode [ 57.708145][ T5740] veth0_vlan: entered promiscuous mode [ 57.722832][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.727848][ T5740] veth1_vlan: entered promiscuous mode [ 57.743899][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.765252][ T5738] veth0_macvtap: entered promiscuous mode [ 57.787678][ T5738] veth1_macvtap: entered promiscuous mode [ 57.809744][ T5740] veth0_macvtap: entered promiscuous mode [ 57.823324][ T5740] veth1_macvtap: entered promiscuous mode [ 57.832914][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.840850][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.861898][ T5749] veth0_vlan: entered promiscuous mode [ 57.865704][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.871219][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.877363][ T5739] veth0_vlan: entered promiscuous mode [ 57.883287][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.887091][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.909547][ T5749] veth1_vlan: entered promiscuous mode [ 57.913233][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.917669][ T5739] veth1_vlan: entered promiscuous mode [ 57.930173][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.945137][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.948287][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.957976][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.962769][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.992197][ T5749] veth0_macvtap: entered promiscuous mode [ 57.997882][ T5739] veth0_macvtap: entered promiscuous mode [ 58.034778][ T5739] veth1_macvtap: entered promiscuous mode [ 58.037762][ T5749] veth1_macvtap: entered promiscuous mode [ 58.044028][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.047585][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.075631][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.083881][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.107965][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.111968][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.114697][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.118265][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.125886][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.129296][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.140735][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.145401][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.166061][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.171550][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.181969][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.185326][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.196758][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.201006][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.207906][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.213383][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.215701][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.315934][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.323058][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.370996][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.380787][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.405965][ T124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.411481][ T124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.449861][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.458237][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.748460][ T5923] Device name not specified. [ 58.748460][ T5923] [ 58.793458][ T5922] Zero length message leads to an empty skb [ 58.926424][ T5743] Bluetooth: hci2: command tx timeout [ 58.926939][ T5097] Bluetooth: hci3: command tx timeout [ 58.929847][ T5743] Bluetooth: hci1: command tx timeout [ 58.937420][ T5743] Bluetooth: hci0: command tx timeout [ 59.018429][ T5932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13'. [ 59.151201][ T5939] 9pnet_virtio: no channels available for device 127.0.0.1 [ 59.259939][ T5944] kvm: pic: level sensitive irq not supported [ 59.306480][ T41] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.458373][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 59.464075][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 59.473756][ T41] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 59.479209][ T41] usb 7-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 59.483329][ T41] usb 7-1: config 14 contains an unexpected descriptor of type 0x2, skipping [ 59.487443][ T41] usb 7-1: config 14 has no interface number 1 [ 59.489871][ T41] usb 7-1: config 14 interface 228 altsetting 216 has an invalid descriptor for endpoint zero, skipping [ 59.494029][ T41] usb 7-1: config 14 interface 0 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 59.499368][ T41] usb 7-1: config 14 interface 0 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 59.503434][ T41] usb 7-1: config 14 interface 0 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 59.507935][ T41] usb 7-1: config 14 interface 228 has no altsetting 0 [ 59.510566][ T41] usb 7-1: config 14 interface 0 has no altsetting 0 [ 59.518257][ T41] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=53.e9 [ 59.521957][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.525052][ T41] usb 7-1: Product: syz [ 59.527012][ T41] usb 7-1: Manufacturer: syz [ 59.528895][ T41] usb 7-1: SerialNumber: syz [ 59.851421][ T42] kauditd_printk_skb: 89 callbacks suppressed [ 59.851436][ T42] audit: type=1400 audit(1784349519.484:257): avc: denied { write } for pid=5963 comm="syz.0.23" name="vlan0" dev="proc" ino=4026533683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.904511][ T42] audit: type=1400 audit(1784349519.534:258): avc: denied { read } for pid=5968 comm="syz.0.24" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.913480][ T42] audit: type=1400 audit(1784349519.534:259): avc: denied { open } for pid=5968 comm="syz.0.24" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.921361][ T42] audit: type=1400 audit(1784349519.534:260): avc: denied { ioctl } for pid=5968 comm="syz.0.24" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.932276][ T42] audit: type=1400 audit(1784349519.534:261): avc: denied { set_context_mgr } for pid=5968 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 59.963113][ T5970] binder: 5968:5970 ioctl c0306201 200000000080 returned -22 [ 60.414366][ T5977] netlink: 'syz.2.15': attribute type 1 has an invalid length. [ 60.417634][ T5977] netlink: 'syz.2.15': attribute type 2 has an invalid length. [ 60.521122][ T41] cypress_m8 7-1:14.228: HID->COM RS232 Adapter converter detected [ 60.530718][ T41] cyphidcom ttyUSB0: required endpoint is missing [ 60.537898][ T41] cypress_m8 7-1:14.0: HID->COM RS232 Adapter converter detected [ 60.542468][ T41] cyphidcom ttyUSB1: required endpoint is missing [ 60.553772][ T41] usb 7-1: USB disconnect, device number 2 [ 60.568740][ T41] cypress_m8 7-1:14.228: device disconnected [ 60.578765][ T41] cypress_m8 7-1:14.0: device disconnected [ 60.590185][ T42] audit: type=1400 audit(1784349520.224:262): avc: denied { create } for pid=5975 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.599095][ T42] audit: type=1400 audit(1784349520.224:263): avc: denied { setopt } for pid=5975 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.608537][ T42] audit: type=1400 audit(1784349520.224:264): avc: denied { ioctl } for pid=5975 comm="syz.3.25" path="socket:[10575]" dev="sockfs" ino=10575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.618822][ T42] audit: type=1400 audit(1784349520.244:265): avc: denied { sys_module } for pid=5975 comm="syz.3.25" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.634470][ T42] audit: type=1400 audit(1784349520.264:266): avc: denied { write } for pid=5975 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.635103][ T5743] Bluetooth: hci3: ISO packet for unknown connection handle 2034 [ 60.797537][ T5991] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 61.006439][ T5743] Bluetooth: hci3: command tx timeout [ 61.007662][ T5754] Bluetooth: hci2: command tx timeout [ 61.016489][ T5743] Bluetooth: hci1: command tx timeout [ 61.019057][ T5754] Bluetooth: hci0: command tx timeout [ 61.181005][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 61.330203][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 61.334132][ T6010] netlink: 14 bytes leftover after parsing attributes in process `syz.2.30'. [ 61.338310][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 61.415295][ T6012] can: request_module (can-proto-0) failed. [ 61.443114][ T6016] capability: warning: `syz.2.32' uses 32-bit capabilities (legacy support in use) [ 61.669524][ T5910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.691152][ T6026] Bluetooth: MGMT ver 1.23 [ 61.700943][ T6025] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.705220][ T6026] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 61.718850][ T6028] ======================================================= [ 61.718850][ T6028] WARNING: The mand mount option has been deprecated and [ 61.718850][ T6028] and is ignored by this kernel. Remove the mand [ 61.718850][ T6028] option from the mount to silence this warning. [ 61.718850][ T6028] ======================================================= [ 61.739897][ T6028] overlay: Bad value for 'verity' [ 61.828719][ T6040] tipc: Started in network mode [ 61.831327][ T6040] tipc: Node identity d694cacd3c54, cluster identity 4711 [ 61.834630][ T6040] tipc: Enabled bearer , priority 10 [ 61.877458][ T6042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.41'. [ 62.110356][ T6067] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 62.134771][ T5754] Bluetooth: hci1: ISO packet for unknown connection handle 2034 [ 62.306356][ T6098] netlink: 60 bytes leftover after parsing attributes in process `syz.1.54'. [ 62.317649][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 62.320533][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 62.324458][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 62.547700][ T6117] overlay: filesystem on ./file0 not supported as upperdir [ 62.608309][ T6119] PID 6119 killed due to inadequate hugepage pool [ 62.759314][ T6119] SELinux: failed to load policy [ 62.916430][ T50] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 62.937442][ T6147] batadv_slave_1: entered promiscuous mode [ 62.941208][ T6147] macsec0: entered promiscuous mode [ 62.943357][ T6147] macsec0: entered allmulticast mode [ 62.945087][ T6147] veth1_macvtap: entered allmulticast mode [ 62.951082][ T5832] tipc: Node number set to 3938503373 [ 62.955491][ T6146] batadv_slave_1: left promiscuous mode [ 62.960186][ T6072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.962630][ T6072] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 62.977744][ T6072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.980808][ T6072] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 62.990969][ T6072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.993343][ T6072] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 63.000596][ T6150] fuse: Bad value for 'group_id' [ 63.002735][ T6150] fuse: Bad value for 'group_id' [ 63.011995][ T6072] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.014424][ T6072] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 63.041969][ T6152] ufs: You didn't specify the type of your ufs filesystem [ 63.041969][ T6152] [ 63.041969][ T6152] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 63.041969][ T6152] [ 63.041969][ T6152] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 63.053461][ T6152] ufs: ufstype=old is supported read-only [ 63.058333][ T6152] ufs: ufs_fill_super(): bad magic number [ 63.065741][ T6152] binder: 6151:6152 ioctl c0306201 200000000640 returned -22 [ 63.066403][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 63.075682][ T50] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 63.081637][ T50] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 63.084505][ T50] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 63.088971][ T50] usb 6-1: Product: syz [ 63.090475][ T50] usb 6-1: Manufacturer: syz [ 63.092018][ T50] usb 6-1: SerialNumber: syz [ 63.095299][ T50] usb 6-1: config 0 descriptor?? [ 63.100898][ T6134] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 63.105883][ T50] hub 6-1:0.0: bad descriptor, ignoring hub [ 63.108970][ T50] hub 6-1:0.0: probe with driver hub failed with error -5 [ 63.127027][ T6153] binder: 6151:6153 ioctl 4004480f 200000000dc0 returned -22 [ 63.178214][ T6158] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 63.267957][ T6170] mmap: syz.0.67 (6170) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.388922][ T6173] capability: warning: `syz.0.69' uses deprecated v2 capabilities in a way that may be insecure [ 63.451186][ T6185] netlink: 'syz.2.73': attribute type 1 has an invalid length. [ 63.503247][ T6189] syzkaller0: entered promiscuous mode [ 63.505588][ T6189] syzkaller0: entered allmulticast mode [ 63.610400][ T6201] random: crng reseeded on system resumption [ 63.774903][ T6215] tmpfs: Bad value for 'mpol' [ 63.821431][ T6212] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 63.994178][ T6223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=6223 comm=syz.2.86 [ 64.136365][ T61] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.161066][ T50] usb 6-1: USB disconnect, device number 2 [ 64.224711][ T6236] syz.1.91 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.230719][ T6236] syz.1.91(6236): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 64.286377][ T61] usb 8-1: Using ep0 maxpacket: 16 [ 64.291076][ T61] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 64.294572][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.298363][ T61] usb 8-1: Product: syz [ 64.300062][ T61] usb 8-1: Manufacturer: syz [ 64.301901][ T61] usb 8-1: SerialNumber: syz [ 64.313379][ T61] usb 8-1: config 0 descriptor?? [ 64.623649][ T6261] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 64.626518][ T50] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 64.698647][ T6264] autofs: Unknown parameter 'mountinfo' [ 64.700734][ T6264] autofs: Unknown parameter 'mountinfo' [ 64.736435][ T6268] Invalid logical block size (-1) [ 64.756403][ T50] usb 6-1: device descriptor read/64, error -71 [ 64.837383][ T61] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 64.844082][ T61] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.847480][ T61] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 64.850747][ T61] usb 8-1: media controller created [ 64.859860][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.996351][ T50] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 65.039782][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.043219][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.128268][ T50] usb 6-1: device descriptor read/64, error -71 [ 65.236607][ T50] usb usb6-port1: attempt power cycle [ 65.397276][ T61] zl10353_read_register: readreg error (reg=127, ret==0) [ 65.399386][ T61] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 65.401631][ T61] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 65.422036][ T6221] ------------[ cut here ]------------ [ 65.424975][ T6221] usb 8-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 65.428722][ T6221] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.3.85/6221 [ 65.433034][ T6221] Modules linked in: [ 65.436539][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(full) [ 65.440344][ T6221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.444603][ T6221] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 65.447383][ T6221] Code: 48 89 54 24 40 e8 23 d7 89 fa 4c 89 e7 e8 8b fc db fe 48 89 c6 48 8d 3d e1 99 af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 f4 d6 89 fa 89 ee bf ff 00 00 00 [ 65.455536][ T6221] RSP: 0018:ffffc90004cbf680 EFLAGS: 00010287 [ 65.458232][ T6221] RAX: ffffffff8ca5e9a0 RBX: ffff88802aa3dd00 RCX: 0000000080000280 [ 65.461030][ T6221] RDX: ffff8880379ee160 RSI: ffffffff8ca5e9a0 RDI: ffffffff912f9f70 [ 65.464184][ T6221] RBP: ffff88802c0b2058 R08: 00000000000000c0 R09: 0000000000000000 [ 65.467421][ T6221] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c0b20b0 [ 65.470685][ T6221] R13: ffff88802275e4e0 R14: ffff88802275e4e6 R15: ffff88802275e4e7 [ 65.473951][ T6221] FS: 00007f7c1f2d26c0(0000) GS:ffff8880d5ee7000(0000) knlGS:0000000000000000 [ 65.477667][ T6221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.480406][ T6221] CR2: 00007f320935891c CR3: 0000000059f12000 CR4: 0000000000352ef0 [ 65.483625][ T6221] Call Trace: [ 65.484994][ T6221] [ 65.486220][ T6221] ? __init_swait_queue_head+0xca/0x150 [ 65.488841][ T6221] usb_start_wait_urb+0x10e/0x580 [ 65.490983][ T6221] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 65.493212][ T6221] ? trace_kmalloc+0xeb/0x110 [ 65.495121][ T6221] ? __asan_memset+0x23/0x50 [ 65.497125][ T6221] usb_control_msg+0x328/0x4b0 [ 65.499039][ T6221] ? __pfx_usb_control_msg+0x10/0x10 [ 65.501311][ T6221] dtv5100_i2c_msg+0x1be/0x340 [ 65.503403][ T6221] dtv5100_i2c_xfer+0x131/0x3d0 [ 65.505482][ T6221] ? do_raw_spin_lock+0x128/0x260 [ 65.507572][ T6221] ? find_held_lock+0x2b/0x80 [ 65.509604][ T6221] __i2c_transfer+0x5d9/0x1740 [ 65.511684][ T6221] ? try_to_take_rt_mutex+0x59a/0xf80 [ 65.513976][ T6221] ? __pfx___i2c_transfer+0x10/0x10 [ 65.516212][ T6221] ? _raw_spin_lock_irq+0x45/0x50 [ 65.518491][ T6221] i2c_smbus_xfer_emulated+0x235/0x1110 [ 65.520871][ T6221] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 65.523403][ T6221] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x760 [ 65.526427][ T6221] __i2c_smbus_xfer+0x619/0x1100 [ 65.528561][ T6221] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 65.530894][ T6221] i2c_smbus_xfer+0x185/0x3c0 [ 65.532882][ T6221] i2cdev_ioctl_smbus+0x389/0xac0 [ 65.534998][ T6221] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 65.537436][ T6221] ? __might_fault+0xc5/0x140 [ 65.539381][ T6221] ? __might_fault+0xc5/0x140 [ 65.541465][ T6221] i2cdev_ioctl+0x3cf/0x830 [ 65.543393][ T6221] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 65.545421][ T6221] ? selinux_file_ioctl+0x13b/0x290 [ 65.547607][ T6221] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 65.549593][ T6221] __x64_sys_ioctl+0x18e/0x210 [ 65.551596][ T6221] do_syscall_64+0x115/0x870 [ 65.553512][ T6221] ? clear_bhb_loop+0x40/0x90 [ 65.555454][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.557982][ T6221] RIP: 0033:0x7f7c1e39de99 [ 65.559840][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.567834][ T6221] RSP: 002b:00007f7c1f2d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.571391][ T6221] RAX: ffffffffffffffda RBX: 00007f7c1e625fa0 RCX: 00007f7c1e39de99 [ 65.574735][ T6221] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000009 [ 65.576419][ T50] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 65.578223][ T6221] RBP: 00007f7c1e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 65.584649][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.588073][ T6221] R13: 00007f7c1e626038 R14: 00007f7c1e625fa0 R15: 00007ffe661066a8 [ 65.591438][ T6221] [ 65.592765][ T6221] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 65.595759][ T6221] CPU: 1 UID: 0 PID: 6221 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(full) [ 65.599575][ T6221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.603767][ T6221] Call Trace: [ 65.605182][ T6221] [ 65.606364][ T6221] dump_stack_lvl+0x100/0x190 [ 65.608384][ T6221] vpanic+0x552/0x970 [ 65.610135][ T6221] ? __pfx_vpanic+0x10/0x10 [ 65.612049][ T6221] panic+0xd1/0xe0 [ 65.613665][ T6221] ? __pfx_panic+0x10/0x10 [ 65.615568][ T6221] check_panic_on_warn.cold+0x19/0x34 [ 65.617807][ T6221] ? usb_submit_urb+0x15ff/0x19b0 [ 65.619926][ T6221] __warn.cold+0x191/0x318 [ 65.621794][ T6221] __report_bug+0x30f/0x440 [ 65.623698][ T6221] ? usb_submit_urb+0x15ff/0x19b0 [ 65.625824][ T6221] ? __pfx___report_bug+0x10/0x10 [ 65.627874][ T6221] ? lockdep_hardirqs_on+0x78/0x100 [ 65.630131][ T6221] ? kasan_save_stack+0x3f/0x50 [ 65.632223][ T6221] ? kasan_save_stack+0x30/0x50 [ 65.634328][ T6221] report_bug_entry+0xe1/0x290 [ 65.636379][ T6221] ? usb_submit_urb+0x160d/0x19b0 [ 65.638496][ T6221] handle_bug+0x1cd/0x2a0 [ 65.640321][ T6221] exc_invalid_op+0x17/0x50 [ 65.642267][ T6221] asm_exc_invalid_op+0x1a/0x20 [ 65.644265][ T6221] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 65.646564][ T6221] Code: 48 89 54 24 40 e8 23 d7 89 fa 4c 89 e7 e8 8b fc db fe 48 89 c6 48 8d 3d e1 99 af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 f4 d6 89 fa 89 ee bf ff 00 00 00 [ 65.654107][ T6221] RSP: 0018:ffffc90004cbf680 EFLAGS: 00010287 [ 65.656683][ T6221] RAX: ffffffff8ca5e9a0 RBX: ffff88802aa3dd00 RCX: 0000000080000280 [ 65.660029][ T6221] RDX: ffff8880379ee160 RSI: ffffffff8ca5e9a0 RDI: ffffffff912f9f70 [ 65.663103][ T6221] RBP: ffff88802c0b2058 R08: 00000000000000c0 R09: 0000000000000000 [ 65.666271][ T6221] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802c0b20b0 [ 65.669322][ T6221] R13: ffff88802275e4e0 R14: ffff88802275e4e6 R15: ffff88802275e4e7 [ 65.672615][ T6221] ? __init_swait_queue_head+0xca/0x150 [ 65.675006][ T6221] usb_start_wait_urb+0x10e/0x580 [ 65.677184][ T6221] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 65.679551][ T6221] ? trace_kmalloc+0xeb/0x110 [ 65.681587][ T6221] ? __asan_memset+0x23/0x50 [ 65.683542][ T6221] usb_control_msg+0x328/0x4b0 [ 65.685614][ T6221] ? __pfx_usb_control_msg+0x10/0x10 [ 65.687873][ T6221] dtv5100_i2c_msg+0x1be/0x340 [ 65.689961][ T6221] dtv5100_i2c_xfer+0x131/0x3d0 [ 65.692035][ T6221] ? do_raw_spin_lock+0x128/0x260 [ 65.694168][ T6221] ? find_held_lock+0x2b/0x80 [ 65.696194][ T6221] __i2c_transfer+0x5d9/0x1740 [ 65.698256][ T6221] ? try_to_take_rt_mutex+0x59a/0xf80 [ 65.700567][ T6221] ? __pfx___i2c_transfer+0x10/0x10 [ 65.702778][ T6221] ? _raw_spin_lock_irq+0x45/0x50 [ 65.704929][ T6221] i2c_smbus_xfer_emulated+0x235/0x1110 [ 65.707279][ T6221] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 65.709848][ T6221] ? __rt_mutex_slowlock_locked.constprop.0+0x253/0x760 [ 65.712781][ T6221] __i2c_smbus_xfer+0x619/0x1100 [ 65.714941][ T6221] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 65.717250][ T6221] i2c_smbus_xfer+0x185/0x3c0 [ 65.719280][ T6221] i2cdev_ioctl_smbus+0x389/0xac0 [ 65.721376][ T6221] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 65.723683][ T6221] ? __might_fault+0xc5/0x140 [ 65.725655][ T6221] ? __might_fault+0xc5/0x140 [ 65.727652][ T6221] i2cdev_ioctl+0x3cf/0x830 [ 65.729600][ T6221] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 65.731708][ T6221] ? selinux_file_ioctl+0x13b/0x290 [ 65.733886][ T6221] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 65.735979][ T6221] __x64_sys_ioctl+0x18e/0x210 [ 65.737968][ T6221] do_syscall_64+0x115/0x870 [ 65.739908][ T6221] ? clear_bhb_loop+0x40/0x90 [ 65.741891][ T6221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.744374][ T6221] RIP: 0033:0x7f7c1e39de99 [ 65.746284][ T6221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.754293][ T6221] RSP: 002b:00007f7c1f2d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.757658][ T6221] RAX: ffffffffffffffda RBX: 00007f7c1e625fa0 RCX: 00007f7c1e39de99 [ 65.760914][ T6221] RDX: 0000200000000080 RSI: 0000000000000720 RDI: 0000000000000009 [ 65.764253][ T6221] RBP: 00007f7c1e433eaf R08: 0000000000000000 R09: 0000000000000000 [ 65.767581][ T6221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.770947][ T6221] R13: 00007f7c1e626038 R14: 00007f7c1e625fa0 R15: 00007ffe661066a8 [ 65.774328][ T6221] [ 65.776481][ T6221] Kernel Offset: disabled [ 65.778333][ T6221] Rebooting in 86400 seconds..