last executing test programs: 3m49.873954711s ago: executing program 2 (id=350): r0 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x1010, r0, 0x3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000005) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r2) faccessat2(r3, &(0x7f0000000880)='\x00', 0x1, 0x1100) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x400) mount$fuse(0x0, 0x0, 0x0, 0x108c, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00"], 0xf) syz_emit_vhci(&(0x7f0000000d00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x98b}, "7ab9e0ab122794333fb2f7dacb3d1e39c0e7b04a4dd48d6a2cc9c2ddaa7ef5f9df8df4bdc8dc775ec834f6fb467ffb5bf6581c1c2f416332cbb5e9496b8e25526f5bfa9bf2d3b20c653121928a3f87b4f6b27498e99878bf52649f358f31a94ae06d86276ac4114ee9337ec162dce17cd27ed3aa83ea4397ac6bf9e668e237886fb0dc37fbb5a284f7c482d8ffccd9db542c0141077bae63a8f60488a1106ff22d64e4e3f2fe3e4a77216d3e6f5ae73f28c8001b6ed5942ec706b9a460f83c189b5c0c344e1e787d041b250de651e2abfdc1ce6f8269c01c62ca681d2c093994450f9558771ea835d69fdae35135beeaebebe1f647845ac6dee0d8ede5b23947c36519cd8c84de5dda451cb7d7d29dac0030a4d516c763bfb7a0005ade8beccbe3e58b7a33b5e3f0706870bb6775c37c77ccc3193f2469573b893fdbb760f5f9beb743041aa22cab649b861c06f7cef99c22b49c2adffd0dc6bbbd8fb1419497eb181dc2874f21b961452486852ab65f27f6edf3cf2ee0a41832623d622068ffc09c98640aa992f9f3a1e852114dbc6d8459d25e35f42357d3c0d83644ba5ab4e45f5b4c9e3261f60ba08bd68a3350ab61e22203db5e305a2911cfaf3ccfc105d1bb6b59ee87f73f2e66631ee6bf33969e596386f42cf8c8483203d51f3c3741df395d4da75e0ddd0accf96f88db05d590a40627a6fb42518b7a74f1bd6a3712b1e7102b6866baadd115114cd67609756b7974d840fa73a31584aa8429f67f026353fb11f21c672226d2be1688d962e69e23080a9932a637ae03a1071d9aa562b0cf8aab4c9ba89cd6232f7be1653e1ab0641dd582cf3ad90dba1a28c264b348b27dcdc7c3be123cbfbe9589ccd07a547f9b636b9714ba4d832422cf057a2395ed1cb3b6cf468da9d80f2ea9bd5d7b5e58dcb8c7a66ddc5daeddea53e1369f2cc87ff4c532e8018988f4526275cc6f516758f845e516f2b45babd61b07337d3119e8098cc7edac198da7d3328c1e4b9383a565ef44311ea4ab284dcb001d47a2477a905f3c97b1ef8dcb0a02a2f8188c6de07b65c955c1b5d30e549a80f7ce323a7487f926e446ba72f8b8e34ba4a960dbb2037f01fc9582b38ab97245138fa5d177adc2f6b87878be3b9291d60ca27dc432c27e7ab238caec8ef0ea1fc16ea7f5337b7f2942677cd689e6f33cdb84914d92c6d22fa761867daf10152e1aac017fc932a959612c141f2a72f1fb5f10b3785752e48e277dcadcc0197314b99b5e3a0b1696207a052bb6f3e08a44c8f79b61b035f3da399ec83218eae509b3573a169be1d26ad31841f835f9f04aaf303c4e7c1b1fa52ff5c844468403a409635a69851b7f9506d054fa7f315b46be93a52706dbd9baa891c54bf0e53652f51e0c301b0a7099d62a1245947a5e19bd8accfc1ad9c65360ee84b066024fbdfcadfdecc92d19982a4bcc565fe5deced0a32f155c786257563f6fcc42a8f5b30daa7b1b470cf106f83cc3e917a9a03179aa2dff34fea2efef81c1aac210b1cd0e4d82b7228069dc87904296e5fd78c62497ff4cfb5b227b6b93f2f74b7aa45d73ee36795ebe2e39ea54339b8efbe78b3790177bf4a172a4cd044299c9af9be87b62740774694500f549a49d9bd6a14d779f3a814215b0c9c6b2b42e57fbfd24ea2ba86bec5b828e82d675eb6293cc4b48cd079f337163a2a4ac26fb125ebb55fdf7e3ba1b43dfdeb76bb486dacf51d41e5ee3f6ccf0b3944f5453781d4f37d66a5380c1dbbdab2047516ad47a9aa393cd5376e9e9e3b1dd7533d9ef30e75c95b8e9534bf1df0bae55e9767902c9781b2c4d1456e40f13308adea6772c7bec124c01bd171fe840500470cd17a0743513ffa12e2081365023259ce8eb36e3aabd781bf1a88f933b39a0de0f8db5c4b3aae69abb63328749bf9e3d6451ea807d709457d173d3f48107c12606ebaf2fc64906d3c9e87cddbf2bce6d08be550041fb1add618f28b7982b1d45c37e2c5b85a78bf826a6c9f3e4f838c036328d85f563bc1e956efdc23ff33043883d154b37d8a97b783a31bf8b2af0095324fc77c1e7f74a4dd1d1ddcbc4ceb8cc506d04591b65b1703a0dffd1065c8148759f4ee30b6f7d98ee0d63112d9a7b0a4658a79300cd05b531f7ce97e5bf0f8482bf60a357eb076911cabc4e84f6b62c0ee921320bc5f537cf6710843ba31d2ebdfd066d817f87b6997164a51a00dfd826a988c1aba5f129c4f3f8a3e8e1c9bcbefdd6c72a320bd1492bf1cf264e37e27c6694fc674845180b8156e79b27248e758f0482af57e38785914c1f740b6b93c336c94e4e14c46c2dec364cd74630f24994a5e3d3f382ef10f46ee3b86891561f67f532bba548dc968ecba687addeef858ede2994f50db0482633cf6b887b561c30064c1afabb6a90c91f3eab87233ad4b7b9a8abc6e0f5d7f860f8757f23a5e220e403f9770fc54272448298c9115295ff09edd57dd9b8e4a45200c750001fe34b419b5baaaaffdb04bd2cd7df4ea9624155cc7d2b7671a28c7a5d1abb34fbe6158babec25f2a79d832d5ef2311cb23e6da5763003a8af521346ef3ca658a3098c4fda8ce0627d838a25f8f46f5357f575e15e2bfe25b304819f19eb394b9d3658a169947ea9f4ba2ddcce455a27271264c22ab5509b9009eb8c043c859e9d913e0720aefd6c396b95a47caa53b1e3c03e23db9b50d1db8b162c865047144892bdc9b8e27421a2704745910955507d8c0312b3abd697f06c2ac9054766bc6ca54a42880f2fb170e3cf70f36ea9eccc419dae77e172cc2f3e854a27ffd18d0eea037e02af7f90c871b4b78bc6e388e1fae361df1ed6d89feef90b70a0dd8c8f7ef185b078cea37f82d7884a38878633ac6941a4577a3f18fc9e43b05d1b688bbfae792e75f9a4b0a26118a44d230f58f85ed672a23673c4787b4ef22dabfd6d2043c6c0dbe173e3bc52e44d4bbeefcd4357705a4a0a78508ae79b529370799ab09d09e12c30b457aad31984d8fbbdcd5c96fcf8559ce8bbbf767b61c4fc8636103496ceefaa886bf81a6fc8a85ab45c9b97ac899f36b406abd03abf7c892cd88d4800ce818c7996ce84ba14671903d2456884f4ebee466bce61176cdf4137cde421ff7afbf0efa371c212652d6cf531fba9ccf1e0f2b636012fefe5fed93db0030aecfc8ba5def91b75d2226d30c4d6a38fe652f6316ea0bddf986ff45839a849f0151c8566b36e2dbaa0931d7fcd121e5c1a19a5857eeca6b6a7f4d3b4dea364b3b55b9f13e5d0e11cdcee3880563d43795624f455ee7ba903598e2471c8f178dd61cfe9b1fcb536bcfde7bb3efd936c29319c3eb49a57870f52ac9d4cddd21885f3cb05f409535448137332e119dcdc0569870ca3a156e4243133400df7a4e2e841e81e4743853eecd56e93e1afc5a3b6aac6d19859db7e3e09ab6e01febde8ea72"}, 0x98f) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000040)) syz_emit_ethernet(0x28, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@generic={0x6002, "4433620b462e228d70ce8b84d2bbbf08e4986cb83068b9f8deed"}}}, 0x0) symlinkat(&(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00') 3m49.431807606s ago: executing program 2 (id=354): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff00003500fffffffffffffff0000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 3m49.431368314s ago: executing program 2 (id=356): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x5128c2, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000021c0)={0xf, {"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", 0x1000}}, 0x576) 3m49.179927021s ago: executing program 2 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100070002000c0001"], 0x30}}, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) r4 = io_uring_setup(0x2f7e, &(0x7f00000000c0)={0x0, 0xf450, 0x3, 0x2, 0x7}) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x7, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000001380)={0x1, 0x0, 0x0, &(0x7f0000001300)=[{0x0}], &(0x7f0000001340)=[0x5]}, 0x20) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) 3m49.133268474s ago: executing program 2 (id=364): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0xffffffffffffffaa, r2, 0x611, 0x70bd2a, 0x25dfdbfd}, 0xe}, 0x1, 0x0, 0x0, 0x50}, 0x40001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x80000, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="66ba6100b800900000efc461a814cbb8010000000f01c148b800000100000000000f23c00f21f835030009000f23f80f22d16567dbcbb9800000c00f3235000100000f30c744240078f00000c744240262aa0000c7442406000000000f01142436430f01c4c4c30d4b2c9cb8", 0x6c}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2001120008c}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$char_usb(r3, &(0x7f0000000040)=""/169, 0xa9) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040018}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x408, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x1c}}, 0x4) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r8, 0x1c, 0x0, @in6={0xa, 0x4e23, 0xffff, @private2={0xfc, 0x2, '\x00', 0x5}, 0x6f}}}, 0x90) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) fsetxattr(r10, &(0x7f00000001c0)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./bus\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000000c0)=@file={0x1, './bus\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x640480d4}}], 0x2, 0x20040844) 3m48.783048879s ago: executing program 2 (id=370): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xd000, &(0x7f0000000180)={0x2, 0x1, @loopback}, 0x10) 3m48.660167555s ago: executing program 32 (id=370): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xd000, &(0x7f0000000180)={0x2, 0x1, @loopback}, 0x10) 3m39.232345939s ago: executing program 1 (id=594): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000060c0)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f00000000c0)={0xe000, 0xc000, 0x1fb, 0x1, 0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m39.002778113s ago: executing program 1 (id=599): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x28, r1, 0x435, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) 3m38.914111666s ago: executing program 1 (id=601): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x300}, 0x48) 3m38.863361477s ago: executing program 1 (id=603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000002340)=0x1, 0x4) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x8518, 0x1, 0x80010, 0xffffffffffffffff, 0x20000000) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x7cc4, 0x4, 0x3, 0x24f}, &(0x7f00000001c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffc7, 0x80, 0x2, 0x315}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c24, 0x80, 0x0, 0x95}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6b1, 0x100, 0x2, 0x5c}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9657, 0x10, 0x1, 0x392}}], 0x4, &(0x7f0000001440)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x2, 0xb17, 0x0, &(0x7f0000000440)=@buf_1k="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"}}, &(0x7f00000014c0)) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x40, 0x2004, @fd=r5, 0x3, 0x0, 0x0, 0x0, 0x1}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') pread64(r9, &(0x7f0000001300)=""/4118, 0x1016, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r8, &(0x7f0000001540)={0x2e, 0x4c, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5c, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001500)=@any_dev={0x1, 0x8ba, 0x0, 0x0, 0x1000, 0x3, r2, 0x0, 0x84}}}, &(0x7f00000015c0)) getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 3m38.803513789s ago: executing program 1 (id=605): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r2, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x48, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x18, 0x1c, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}]}]}, @nested={0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x241a07f23122330d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x800) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xcc, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xd}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xa4, 0x84, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="873c02500e40"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="b16bd2cf724e4dc47e29544ae2925ed5bab50fa98659bc31306e10"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xdc0}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_LC={0x8, 0x5, 0xfff}, @NL80211_BAND_60GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="e9ae6a9ed50ea1b97ad8b477db1a5253a5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="dcd3ce0bddd2"}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x20008015) 3m38.363833571s ago: executing program 1 (id=614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xc8, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 3m38.235406892s ago: executing program 33 (id=614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xc8, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2m37.715676356s ago: executing program 0 (id=2196): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socket$inet(0x2, 0x5, 0x800) 2m37.63525897s ago: executing program 0 (id=2197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000e40), &(0x7f0000000100)=@udp, 0x8}, 0x20) (async) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADMODE1(r2, 0x530d, &(0x7f00000008c0)={0x3, 0x5, 0x4, 0x5, 0x5, 0x1}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x85, 0xf7, 0x2, 0x5a, @dev={0xfe, 0x80, '\x00', 0x19}, @mcast2, 0x1, 0x8, 0x6, 0x8}}) (rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x80) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000280)=""/176, 0x33, 0xb0, 0x0, 0x5}, 0x28) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x203, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e7, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xffffffdd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0xa, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x70bd25, 0x0, {0x2, 0x14, 0x14, 0x0, 0x0, 0x2, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x40}}]}, 0x30}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000200000000000000050000001864000000030000000c0700000000ffffff24020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007f00328d9361deb3302000008000000b70300000100010000000095000000000000000000000000000000000000000071ef2f88ccdabd26fda723eeb608f4aefb4750f39d95e59142c8278c4e9a5a856cb15f9222e58fb859b2d17592db52"], &(0x7f0000000080)='syzkaller\x00', 0x80000001, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x10, '\x00', r3, 0x25, r6, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0xe, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r0], &(0x7f0000000440)=[{0x5, 0x5, 0x9, 0x6}, {0x0, 0x4, 0x1, 0x3}, {0x3, 0x1, 0x10, 0x5}], 0x10, 0x4}, 0x94) 2m37.385526339s ago: executing program 0 (id=2198): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1) 2m37.384988548s ago: executing program 0 (id=2200): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x622000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.bfq.time\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt(r4, 0x0, 0x7, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000100)={0x8, r1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) semget(0x1, 0x3, 0x64) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x301800, 0x0) close_range(r5, r6, 0x0) r7 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r7], 0x1}, 0x58) 2m37.314694619s ago: executing program 0 (id=2202): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xa91, 0x4) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x22, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1a080045", @ANYRES32=0x41424344], 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$tun(r2, &(0x7f0000000740)={@void, @val={0x1, 0x3, 0x81, 0x9, 0xfffd, 0x100}, @ipv6=@icmpv6={0x0, 0x6, "0fcd00", 0x2cc, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@routing={0x4, 0xa, 0x1, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x1, 0x3b, '\x00', [@generic={0xec, 0xac, "aa29b86751afff13750d9e39053e89b9c080f9aa3dfccf650fbaa006a8fc19240817db4e70fab267d24cf2fbe0b08f5c2d3c528ac9579819a9a6ec6a4150892f20ad9b8b2e7a099d5f2c348c0575c8a225fec45b6130f943cf320370260afce0b4af2fde809217a149ba903c541ab3d7df317dd19829e31987b71e98375f17f2f752be195ce2e0c97bfa5adbdaac3532677ec3651598584ab6a2e058de95761895d334b09bd4e029e239949a"}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x1000, [0xc46]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x12, 0xf3, "14788cdc2fae1feaf69754d8000630a02a552f8feb423e99ff042766c5d285feb562519af1a9af8123cfa0c90fc2257eaeb60a00114f50d307f64abc2d7489c1f73938cbcca6ec40461b77d76adbfb59ca30757bac0c0389fd9cb2aa316454855ff10c19115318db3fde2a920c254e87b183c3f765ed96dbd4f1507233d113951f969073ef3d3b4f83a433bac4d6100f78473e49b486f35d31e5bec62c9d1a8e9d26b35d2df63c47ed5f378fd88622922d36cabb0f37d4dc5fa33f050c9661eca351d878e98acff1952ae1a55067d32ce2159c997ea00274008801c7917d45a7724e2f309b1f1e63b6e2b9c95ea2a1e78641fc"}, @padn, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1]}, @srh={0x3b, 0x0, 0x4, 0x0, 0x4, 0x48, 0x3}], @ni={0x0, 0x0, 0x0, 0x1ff, 0x2, 0x8001, "d94c4b9ba968fbdf3f69938776cda4e8faabc95069884577664d848fa1a5a5e6eba75f5c41d859376844eaba54ce518e1538d9f2175edd8a183a917c0022f8aa1ebb5ec168febd2e8d8d0d9ea1bbd90ed65512f1a4fae8c3d73e88d2655329adffa6f999e504ed385c42d8a0f85cac82275abb83"}}}}, 0x2fe) 2m37.205532593s ago: executing program 0 (id=2203): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2e, 0x4, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x1, {@in6_addr=@private2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2m37.143609232s ago: executing program 34 (id=2203): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2e, 0x4, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x1, {@in6_addr=@private2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2m30.305933374s ago: executing program 4 (id=2285): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r3, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000440)=[r4], 0x0, 0x1}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x4, 0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r5, 0x0, 0x7ffff000, 0x3) 2m29.394254551s ago: executing program 4 (id=2320): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0xc2, 0xa, 0x18, @dev={0xfe, 0x80, '\x00', 0x3e}, @loopback, 0x7800, 0x20, 0x4, 0x9}}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc458}, [@IFLA_CARRIER={0x5, 0x21, 0x1b}, @IFLA_GROUP={0x8}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_IFALIAS={0x14, 0x14, 'team0\x00'}, @IFLA_MTU={0x8, 0x4, 0x200}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4604}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000004c0)={{0xffffffff, 0x5}, 0x100, './file0\x00'}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30040, 0x80) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @adapter={0x8, 0x3, 0x8000000000000001, 0xa, 0x7fffffff}}]}) r4 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r4, 0x4, 0x2}) r5 = socket(0x2d, 0x2, 0x0) unshare(0x40400) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x12, &(0x7f00000000c0)=0x4d, 0x4) fchown(r5, 0x0, 0x0) write$eventfd(r4, &(0x7f0000000080)=0x430f, 0x8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(0x3) read$FUSE(r7, &(0x7f0000002100)={0x2020}, 0x2020) umount2(&(0x7f0000000140)='./file0\x00', 0x3) 2m29.193864905s ago: executing program 4 (id=2325): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000400), 0x40, 0x8000) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x9, 0x8d, {0x8d, 0x23, "7aa4ea24e0bff9bc6fba518384969b7de59115aa126d2c80c80c47b43af05d69001f610b7bca48a295c6f519edf67a650d841e42bf773783089a3416a9014caba9059c8f4d3f5fc2c2270909f09ec4836675698854e590a9666e636801a020738847c308cc3b92bbf8bd35a357bac48d23eb2ed3920c6c5561233ef2f1b3affb914e98c29ae0ef27df91da"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x20, 0x8, 0x3d, "3696e9db37b02221e0543b4253c75af249316e5c82a99371e2815af627cf269029dfe1d01b015a7efdc1ef8d7a64ce99100926c714584bb6ba656abda0"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x18}, &(0x7f0000000300)={0x20, 0x81, 0x2, "f338"}, &(0x7f0000000340)={0x20, 0x82, 0x1, '~'}, &(0x7f0000000380)={0x20, 0x83, 0x1, "fb"}, &(0x7f00000003c0)={0x20, 0x84, 0x3, 'd<\"'}, &(0x7f0000000440)={0x20, 0x85, 0x3, "8f4871"}}) close(0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r1}, 0x18) 2m25.834187046s ago: executing program 4 (id=2390): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e24, 0x7fff, @local, 0x1}, 0x1c) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36b, 0xc000, 0x4, 0xa0002f5}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) writev(r5, &(0x7f0000000440)=[{&(0x7f00000001c0)="2c1cbf6d78c76cca14f0b1dfd5af514fcc6f5bd69ce4df3145e02c97dd3c0a", 0x1f}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3ff}], &(0x7f0000000040)='GPL\x00', 0x2, 0x93, &(0x7f0000000080)=""/147, 0x40f00, 0x0, '\x00', r3, @netfilter, r4, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[r5], &(0x7f0000000240)=[{0x2, 0x1, 0x2, 0xb}], 0x10, 0x7}, 0x94) 2m25.663914932s ago: executing program 4 (id=2394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r6, 0x25, 0x4, @val=@tcx}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r8, 0x4, r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x40049366, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x7d0}], 0x1}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002280)=""/4088, 0xff8}], 0x1}, 0x40002160) ptrace(0x10, r3) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) ptrace$getsig(0x4202, r3, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="4800330080000500ffffffffffff080211000000505050505050d7fa3b1ea49e0005000100010003010104"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 2m25.592096986s ago: executing program 4 (id=2401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m10.59636605s ago: executing program 35 (id=2401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.158849022s ago: executing program 7 (id=5267): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000980), &(0x7f00000009c0)=r1}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, r2}, 0x38) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000000c0)=0x8, 0x2) 5.087375819s ago: executing program 5 (id=5271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) read(r3, &(0x7f00000000c0)=""/250, 0xfa) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)=@arm64) 5.086706364s ago: executing program 7 (id=5272): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000ff9e08001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 5.084404212s ago: executing program 7 (id=5274): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000000000000) 5.017740827s ago: executing program 7 (id=5276): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005b80)=""/6, 0x6}, 0x8}], 0x1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}], 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000087c0)={0x0, 0xfffffffffffffe30, &(0x7f0000008780)={&(0x7f0000004900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x24004001}, 0x20044010) 4.936201998s ago: executing program 5 (id=5280): fsopen(0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40040, &(0x7f0000000140)={0xa, 0x4e24, 0x90000000, @empty, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x2}}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {}, {@max={'max', 0x3d, 0x1}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@measure}, {@pcr={'pcr', 0x3d, 0x11}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@measure}]}) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 4.147796938s ago: executing program 7 (id=5299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20082, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x1, 0x70000, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) futex(0x0, 0x81, 0xfffffffb, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd1000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20082, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) socket(0x40000000015, 0x5, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) (async) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) (async) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x1, 0x70000, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) (async) futex(0x0, 0x81, 0xfffffffb, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd1000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) 1.860194513s ago: executing program 7 (id=5356): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000000c0)={@local, 0x1}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x6, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[], 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x5, &(0x7f0000000100)={0x1c, "3ac071ffbc8cd0d684737d99bb8bd238954c9a216d398df0f558125211b40c65fd"}}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r1], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0xc, 0x0, 0xff, 0x1, 0x0, 0x7}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @private}, &(0x7f0000000080)=0xc) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x2) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d3, &(0x7f0000000100)) bind$bt_hci(r6, &(0x7f00000001c0)={0x1f, 0xbfff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.780321689s ago: executing program 5 (id=5358): fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x8000000000000}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x1c3142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x30) socket$can_raw(0x1d, 0x3, 0x1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x11) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x8c5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="54180000e1d4e161f535d07350f7492d3fad2e07706adfed93b048a90d004a01c411da74a01716d12362762457ac1a000cce7cd480d8471a4302f620", @ANYRES16=r7, @ANYBLOB="000226bd7000fcdbdf25030000003400098008000200b40000000800020003000000080001001d3afd1d0800020008000000080001000000009008000100008000000c0002800400040004000400"], 0x54}, 0x1, 0x0, 0x0, 0x470858127de99e2e}, 0x24000840) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) 1.665386682s ago: executing program 5 (id=5360): r0 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000440)=ANY=[]) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd25, 0xffffff81, {0x0, 0x0, 0x0, r8, {0xe}, {0x1}, {0x9, 0xfff1}}}, 0x24}}, 0x0) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f00000003c0)={0x29, &(0x7f0000000200)=[{0x36, '\x00', @buffer={"bc503e211b4c1198cd98b5f801b21380f62579814aae62d886a21f20d7646202", 0x20}, 0x7}]}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r7, @ANYRESDEC=r9, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x1, 0x568d7b2d80fc19c}, 0xfffffdd4) 1.611958594s ago: executing program 5 (id=5363): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) 1.548965353s ago: executing program 5 (id=5365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="79a9"], 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x8001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="0900000001001f", 0x7) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000540)=[{0x2b, 0x0, [0x221, 0x5, 0x1ff, 0x2, 0x4b, 0x6, 0x10001, 0x6, 0xb, 0xfffffff9, 0x3, 0x2, 0x141b, 0x5, 0x20, 0x9]}], r4, 0x1, 0x1, 0x48}}, 0x20) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000980)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[{0xf3, 0x0}], 0x1, 0x0, 0x1}) io_uring_enter(r5, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x81, 0x8, '9P2000.u'}, 0x15) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000c, 0x100010, r1, 0x0) getsockname$packet(r1, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000004c0)=0x14) syz_usb_connect$uac1(0x6, 0xcb, &(0x7f0000000500)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x499, 0x5006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0xf5, 0x80, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x402, 0x5, 0xce, 0x8, 0xb5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xd, 0x2, 0xcb, 0xcd, "99bcdfb4ace25404"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0x6d, 0xa5, "8b4a93521514"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5, 0x4b, "2c1c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x7a, 0x6, '^', "1b5b"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x41, 0x1, 0x96, 0x4, '$', "d2"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x5, 0x1, "a7a61b8384b4f594"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x2, 0x99, {0x7, 0x25, 0x1, 0x0, 0x5, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x8, 0x4, {0x7, 0x25, 0x1, 0x4, 0x9, 0x9}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0x3, 0x0, 0x6, 0x8, 0x30}, 0x15, &(0x7f0000000640)={0x5, 0xf, 0x15, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x2d, 0x6}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x96, &(0x7f0000000680)=@string={0x96, 0x3, "a8f1b2b645c8ff31c3fa1582ec3b7398b35a655f9f6b0a946237ce1923fdef3fdbeea55aa6fafd0100e2a75fca9189aa9ba5e7f982969527189032ae62ab81611878fe4489f43271523e56cf89f5af9a572f613251a311cf081eff658938929305798bd9bab71b34d85145c5ef4f67a86c2c01a7ab8363b456df19118349d417b8002205ad4d42f3f6d802dc1e6fcbc8d1985334"}}, {0xfffffffffffffd52, &(0x7f0000000780)=@string={0x85, 0x3, "703071fb8c822d431d05e74cfd08a0215d94672e46d005d948f81fd8c7df25ca7b6d8c69d0baeb612c6c8332cdc9e07105ac08d7bf5bd4d77d0ed5e17946c9a04954d79955b02cecc45d7454bd7f6e1fec5a732f36145501a1b942ce61c12aa08c6d9e370abc680ee9bb828fc81d0109b878331f1b1c0c855a6b0c4f01a7b3dea64e1a"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44c}}]}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io$uac3(r10, 0x0, 0x0) shutdown(r1, 0x1) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$I2C(&(0x7f00000008c0), 0x2, 0x0) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f0000000240)={0x1, 0x4, 0x1, &(0x7f0000000080)={0xe, "c955000000d5ac81e630a59afe000000000200"}}) sendmmsg$inet_sctp(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="356afec45de0b43d05f36355eca9f19d5f363860c0af8eba3708eb9543987c071f6cae935513ae3ef46a710de3b67937f724f2f88eb5db3e0cda49749ab4acae34a44703c863455e1747c1b1395cd1933660f7ef123f59e2194d176d6293f88d26fd10987e835da53a1ae3a14cd5f5af98c07ad05b861901cb11065db9d6476498b578d9b85bfe092dce08a17004ab62904857ac6f89", 0x96}, {&(0x7f00000001c0)="73a2cdfc7d7b1b2ff0365b20576edeae222df9f9e26471154076b5af5a1a7d10f42d283d8174e6443b6a0b4e4634c4532409dca0c92a53ef3c5fa9b99894da332238818d1b54fd7f4daf295bb464c23f68edb2a2999f2bff459fee62bf6afa69c1f31781cef0d238290489394e5a3ffd0af1fc5edfffa2bff07981069e6285f325c932eb895e52437ecbe1ffd9a7bf7410e71122ff0da9dd3d5448f0ab5fd4da974ec5ff5ff8aec1f92966ef2b908d9c9b0dbfb7cd4036dbf5ec904bc662eccd4cfddb1ee299f33d2eb02b488055badb20b450e8bfc9102d9bab4b50b3f9384a", 0xe0}, {&(0x7f0000000380)="5af4ace7037fac258cd6f0a2dd5124e4e2448752b8591755515850b0f730e75be6d0c57d26f6e02b6b6d08dfb12035284530e1ef994dc43c9fc46268a6a18e659a83b3758b230588d09a3d690f973d2c3ee98b9a705d0fb3396b89a4524bc20ab345f3107ea6051a953ae2c425b7eb5903757583dbdd9223", 0x78}], 0x3, &(0x7f0000000440)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20}], 0x1, 0x200080c0) 1.202281137s ago: executing program 3 (id=5378): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r2, 0x90004) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r8, &(0x7f0000000000)=0x7, r8, 0x0, 0x7, 0x0) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) writev(r9, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2200}, {0x0, 0x44000}, {&(0x7f0000001000)="d6", 0x21800}], 0x21) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xc, 0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}}, 0x4048000) 427.300084ms ago: executing program 6 (id=5391): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x1, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], 0x3}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a2f3"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x8042, 0x0) r3 = openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000009, 0x810, r3, 0xe7c6000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x13, r2, 0x85b48000) memfd_create(&(0x7f0000000340)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0\xaa\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba6#\xd2\f\x8a\x83\x15\xf6\x04*\x9c\x02\x1b\xd8\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xdf\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\x06\x00\x00\x00~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\x81J\x1ds\x95\x92\xc7\x00\xfe\xff\xff\xff\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\x96\x8f\xeb7\xeew]\xe2jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8\x04\x00\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3{l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwX\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9h\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfb\xda\xa1_\x82~\xdcY\x7f\xdc\xb5e\xcd\x14D\x05|\xae9\xa9\x16\xfen\xe6\x0f\t\xaf\xea6\x00|\xac9\x1a\x0f\xe2\t\xa7e\x8fp\xe2\x99\x811\xb4B\x84\xf46\xf9b\xa43\xf7\xd4\xe7\xdf\x88\xb0c0\x1d\x9a&\x1e\xb6E0tHI\x7f\xb9/kk|5 M\x9c{\xe6,\xa9@U\xab\xa7\xe5`\xd9\xed\xbc\x86RG`\xf2Y\x06\x99;\xb6\xbbH\x00\x00\x00\x00\x00', 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) close(r1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 357.520599ms ago: executing program 6 (id=5392): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000200001000000fc0000000000000014"], 0x4c}, 0x20001850) 357.318523ms ago: executing program 6 (id=5393): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='lock'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x30, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400f0ffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 356.986535ms ago: executing program 3 (id=5394): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8006, 0x4, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = getpid() timer_create(0x7, &(0x7f0000000080)={0x0, 0xf, 0x2, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000040)=@id, 0x10) shutdown(r6, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, 0x0, &(0x7f0000003500)) listen(r3, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) timer_gettime(r5, &(0x7f0000000000)) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_clone(0x1000000, &(0x7f0000000180)="40cc2c49ceacf56f1083787fd4203f34d68dfa8000a937cbcdfb7e5e69668a2304c59887e7300e7694ff2c8128ec624fc14c7363a38117baac51bdb600ea4e22b4c892e3745484f2d7050d3e5c291205e8213185159312ddfbb0aef9ed027a5a5aadf0db15be658731cda719e4c20191db556412d8c09d6766e60528336847d453cf2d348c2c515d4f266402b2a92cecfc183d3c6589e1d92e", 0x99, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="257096818471fc1969a2c56fc2ed9c31d1b149e93a2b0bb208aac4ed4539ddcfe3b2774c99bb3ea4a80f41832ffca4c7d979eac2ce9fbb68d19cce6928") accept4(r3, 0x0, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f00000003c0)={0xa3, 0x0, &(0x7f0000000380)}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6d9b3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 278.863995ms ago: executing program 3 (id=5395): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a000701fcffffffffdbdf25037c000008000100", @ANYRES32=0x0, @ANYBLOB="00080af176d4fc64c440adc8fa54"], 0x1c}, 0x1, 0x0, 0x0, 0x20004805}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, 0x0, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, 0x0, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001000010027bd700402d4df2500000000", @ANYRES32=r5, @ANYBLOB="984e0600c16a01003c00121d9e55b400eef361c7b0f2c66d801100017a4535006272696467655f736c617665000000002400058005001c00000000000500190002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001000010027bd700402d4df2500000000", @ANYRES32=r5, @ANYBLOB="984e0600c16a01003c00121d9e55b400eef361c7b0f2c66d801100017a4535006272696467655f736c617665000000002400058005001c00000000000500190002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r8, 0x25, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r8, 0x25, 0x0, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xf2, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x20, 0x4031, 0x1, 0x5, {{0x1e, 0x4, 0x1, 0x4, 0x78, 0x68, 0x0, 0x6, 0x4, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x9, [{@rand_addr=0x64010101, 0x8}, {@rand_addr=0x64010102, 0xfffffff7}]}, @timestamp_prespec={0x44, 0x4c, 0xd7, 0x3, 0x1, [{@local, 0x9}, {@multicast2, 0x7}, {@loopback, 0x5}, {@multicast1, 0xa}, {@broadcast, 0x642c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@private=0xa010100, 0x9}, {@local, 0x10000}, {@broadcast, 0x5}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x20, 0x4031, 0x1, 0x5, {{0x1e, 0x4, 0x1, 0x4, 0x78, 0x68, 0x0, 0x6, 0x4, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x9, [{@rand_addr=0x64010101, 0x8}, {@rand_addr=0x64010102, 0xfffffff7}]}, @timestamp_prespec={0x44, 0x4c, 0xd7, 0x3, 0x1, [{@local, 0x9}, {@multicast2, 0x7}, {@loopback, 0x5}, {@multicast1, 0xa}, {@broadcast, 0x642c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@private=0xa010100, 0x9}, {@local, 0x10000}, {@broadcast, 0x5}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r14, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x7ff, 0x9, 0x1, 0xfa, 0x3, 0x7fff, 0x3, 0x7, 0xcc, 0x8, 0x0, 0xa, 0x4, 0x7423, 0x7fff}}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0xa, 0x1, 0x7}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r15 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r15, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r14, 0x1, 0x9, 0x6, @local}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000a00)=[{}, {}], 0x10, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@bridge_newneigh={0x2c, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r18, 0x40, 0x80, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c40)={0x0, @private, @initdev}, &(0x7f0000000c80)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x17c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8446ebbfc339f8de}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4044010}, 0x4010) (async) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x17c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8446ebbfc339f8de}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4044010}, 0x4010) 278.759523ms ago: executing program 6 (id=5396): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'ip6tnl0\x00'}}, 0x1e) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c200000d0300280086dd6000000800303afffe80000000000000000000000000001fff0200000000000000000000000000018700907800000000ff020000000000000000000000000001ff0200000000000000000000000000010101909f50c21562ab2db843c01b6a7001c152005081f2163e627854132647f76a472475ef628608347310c90de3b4fd6468b6c1d351dbf2992a"], 0x0) 207.35187ms ago: executing program 6 (id=5397): fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x40040, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x2}}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {}, {@max={'max', 0x3d, 0x1}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@measure}, {@pcr={'pcr', 0x3d, 0x11}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@measure}]}) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 206.893873ms ago: executing program 6 (id=5398): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e27, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x1c, 0x66, 0x0, 0xf, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2e, 0x4, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x1, {@in6_addr=@private2, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup3(r3, r4, 0x80000) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000280)) read$FUSE(r5, &(0x7f0000000780)={0x2020}, 0x2020) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000000)={0x1, "e000b6188d99eac4217feaf77e8c36471201f9bf2ea99f70122db70665f97d87", 0x100, 0xa, 0x3, 0x4, 0x5}) mkdir(&(0x7f0000000140)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 100.092696ms ago: executing program 3 (id=5399): fsopen(&(0x7f0000000140)='vfat\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000ec0)={{r0}, r2, 0x10, @inherit={0x58, &(0x7f0000000240)={0x0, 0x2, 0xffffffffffffff7f, 0x1, {0x12, 0x68a, 0xbb2d, 0x7, 0xfffffffffffffbff}, [0x3, 0x9]}}, @subvolid=0xf}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) listns(&(0x7f0000000000)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x30) socket$can_raw(0x1d, 0x3, 0x1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x1f, 0x2, 0x2}, 0x3) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 99.945273ms ago: executing program 3 (id=5400): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x87, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c53511819a5d8f7a28bf04c5a4ee3470588f8f00cf676d0afca0f2e6f4d82e4208ca4c5f7365d43100", "b31f22c9080873366b499607be231200bc798b00000000000000000000fdfd00", [0xff, 0x105e8]}) 0s ago: executing program 3 (id=5401): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='lock'], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x30, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x14, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0xd19, 0x5, 0x0, 0xfffffffffffffffb, 0x1000007ff, 0x9]}, &(0x7f0000000080)=0x78) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b", 0x21}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000e80)="74a4e87cc89d33547afbda9d629f9f9f20b9b051442633c7a8ea06007c312479a404b3704c8d07860bf96d27dfa41893811161b20d535ad55badcf99b5863b28d31d6185a51a", 0x46}, {&(0x7f0000000a40)="d82d33a6d81edc4b66cc88bf8c1a89a600010000000000006cab778d9631e23dc7b23087ca46c503e8b9bbf55511a47353213e9469564dc8aea385d25838f30a8b23ee20331856a97befcd9aaf4dba1e25357a", 0x53}, {&(0x7f0000000580)="4cc291a1339f36fedfa937c3d768baa73ddc72c419695988fc8177e38f1379e15e6745bbb565b5a19e98a179b04a46aeeb2ae125123d2bb33ca7f7a32c4b04399893a25cdc41", 0x46}, {&(0x7f0000000640)="4f5d11a3bedb1e613a22193c7efc0895ad8a3a732fc9ac7b82813fb06350e990d28156283d5b74e91294a85de9d112834691b29f7b8de2d221534387bb87a9000000006d90826596c1f8831c143bb8e2e7acd2128a4925", 0x57}], 0x4}}], 0x2, 0x8810) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) setsockopt$inet_mreq(r5, 0x0, 0x24, &(0x7f0000000180)={@rand_addr=0x64010102, @multicast2}, 0x8) kernel console output (not intermixed with test programs): h. [ 225.376744][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3575'. [ 225.382571][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3575'. [ 225.579077][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3582'. [ 225.821241][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3591'. [ 225.829632][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3592'. [ 225.850891][ T5826] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 225.856426][ T5826] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 225.860340][ T5826] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 225.864146][ T5826] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.043705][T15748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=15748 comm=syz.3.3603 [ 226.090236][T15746] FAULT_INJECTION: forcing a failure. [ 226.090236][T15746] name failslab, interval 1, probability 0, space 0, times 0 [ 226.095009][T15746] CPU: 3 UID: 0 PID: 15746 Comm: syz.7.3602 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.095038][T15746] Tainted: [L]=SOFTLOCKUP [ 226.095045][T15746] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.095057][T15746] Call Trace: [ 226.095064][T15746] [ 226.095072][T15746] dump_stack_lvl+0x100/0x190 [ 226.095350][T15746] should_fail_ex.cold+0x5/0xa [ 226.095400][T15746] should_failslab+0xc2/0x120 [ 226.095462][T15746] kmem_cache_alloc_noprof+0x91/0x6a0 [ 226.095485][T15746] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 226.095513][T15746] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 226.095547][T15746] mmu_topup_memory_caches+0x25/0x170 [ 226.095577][T15746] kvm_mmu_load+0xd6/0x23e0 [ 226.095623][T15746] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 226.095642][T15746] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 226.095667][T15746] ? kvm_apic_accept_pic_intr+0xdf/0x1b0 [ 226.095686][T15746] ? __pfx_kvm_mmu_load+0x10/0x10 [ 226.095710][T15746] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 226.095732][T15746] ? kvm_check_and_inject_events+0x961/0x1070 [ 226.095759][T15746] ? record_steal_time+0x370/0xbb0 [ 226.095782][T15746] vcpu_run+0x3a57/0x5d50 [ 226.095818][T15746] ? __pfx_vcpu_run+0x10/0x10 [ 226.095853][T15746] ? rcu_is_watching+0x12/0xc0 [ 226.095884][T15746] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 226.095908][T15746] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 226.095943][T15746] kvm_vcpu_ioctl+0x730/0x1700 [ 226.095967][T15746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 226.095985][T15746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.096006][T15746] ? do_vfs_ioctl+0x226/0x13e0 [ 226.096029][T15746] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 226.096051][T15746] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 226.096116][T15746] ? __fget_files+0x215/0x3d0 [ 226.096154][T15746] ? hook_file_ioctl_common+0x140/0x440 [ 226.096180][T15746] ? selinux_file_ioctl+0x13b/0x290 [ 226.096205][T15746] ? selinux_file_ioctl+0xb6/0x290 [ 226.096233][T15746] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 226.096255][T15746] __x64_sys_ioctl+0x18e/0x210 [ 226.096281][T15746] do_syscall_64+0x115/0x870 [ 226.096375][T15746] ? clear_bhb_loop+0x40/0x90 [ 226.096400][T15746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.096419][T15746] RIP: 0033:0x7f937b59de99 [ 226.096434][T15746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.096453][T15746] RSP: 002b:00007f937c496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.096473][T15746] RAX: ffffffffffffffda RBX: 00007f937b825fa0 RCX: 00007f937b59de99 [ 226.096485][T15746] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 226.096496][T15746] RBP: 00007f937c496090 R08: 0000000000000000 R09: 0000000000000000 [ 226.096507][T15746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.096518][T15746] R13: 00007f937b826038 R14: 00007f937b825fa0 R15: 00007fff2fbadf28 [ 226.096543][T15746] [ 226.228905][T15765] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 226.356409][ T5749] bridge0: entered promiscuous mode [ 226.413316][T15774] tipc: New replicast peer: 172.30.0.7 [ 226.416125][T15774] tipc: Enabled bearer , priority 10 [ 226.424062][T15776] erspan0: entered promiscuous mode [ 226.428217][T15776] erspan0: entered allmulticast mode [ 226.440506][T15776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3614'. [ 226.453046][T15779] netlink: 'syz.3.3615': attribute type 27 has an invalid length. [ 226.494474][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 226.494494][ T42] audit: type=1400 audit(1784324095.830:1359): avc: denied { connect } for pid=15780 comm="syz.7.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.518187][T15779] bridge0: port 3(syz_tun) entered disabled state [ 226.528956][T15779] bridge0: port 2(4) entered disabled state [ 226.533111][T15779] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.572521][T15791] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3620'. [ 226.609574][T15779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.618904][T15779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.758434][T15779] hsr1: left promiscuous mode [ 226.791361][T15779] bridge4: left promiscuous mode [ 226.793467][T15779] bridge4: left allmulticast mode [ 226.796897][T15779] macvtap1: left allmulticast mode [ 226.799478][T15779] macvtap2: left allmulticast mode [ 226.817210][T15785] bridge0: port 3(syz_tun) entered blocking state [ 226.819387][T15785] bridge0: port 3(syz_tun) entered forwarding state [ 226.823957][T15785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.826953][T15785] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.832757][T15785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.855850][T15785] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.858050][T15785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.863078][T15785] bridge0: port 2(4) entered blocking state [ 226.865147][T15785] bridge0: port 2(4) entered forwarding state [ 226.876102][T15785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.881121][T15785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.895777][T15785] veth1_vlan: left promiscuous mode [ 226.898854][T15785] veth0_vlan: left promiscuous mode [ 226.902729][T15785] veth0_vlan: entered promiscuous mode [ 226.909423][T15785] veth1_vlan: entered promiscuous mode [ 226.919964][T15785] veth1_macvtap: left promiscuous mode [ 226.922991][T15785] veth0_macvtap: left promiscuous mode [ 226.926027][T15785] veth0_macvtap: entered promiscuous mode [ 226.929276][T15785] veth1_macvtap: entered promiscuous mode [ 226.956673][T15785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.960469][T15785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.966196][T15785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.978608][T15785] 8021q: adding VLAN 0 to HW filter on device eth0 [ 226.981705][T15785] 8021q: adding VLAN 0 to HW filter on device eth1 [ 226.984841][T15785] 8021q: adding VLAN 0 to HW filter on device eth2 [ 226.989716][T15785] 8021q: adding VLAN 0 to HW filter on device eth3 [ 226.993118][T15785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.998335][T15785] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 227.001178][T15785] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 227.349624][ T40] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 227.373532][T15832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3638'. [ 227.515318][ T40] usb 11-1: Using ep0 maxpacket: 32 [ 227.520036][ T40] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.530553][ T40] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.542162][ T40] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 227.551235][ T40] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.604314][ T40] usb 11-1: config 0 descriptor?? [ 227.665146][ T42] audit: type=1400 audit(1784324097.001:1360): avc: denied { connect } for pid=15852 comm="syz.3.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.674708][ T42] audit: type=1400 audit(1784324097.011:1361): avc: denied { write } for pid=15852 comm="syz.3.3647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.784381][ T42] audit: type=1400 audit(1784324097.121:1362): avc: denied { append } for pid=15854 comm="syz.5.3648" path="socket:[70758]" dev="sockfs" ino=70758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.882429][T15867] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 227.883382][T15868] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 1 [ 227.886983][T15869] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 2 [ 227.892753][T15870] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 3 [ 228.052662][ T40] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 228.053640][T15878] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 228.185467][T15885] xt_l2tp: invalid flags combination: 8 [ 228.319591][ T40] usb 11-1: USB disconnect, device number 15 [ 228.543953][T15909] bridge0: port 3(syz_tun) entered disabled state [ 228.549331][T15909] bridge0: port 2(4) entered disabled state [ 228.554436][T15909] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.599844][T15909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.610589][T15909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.814430][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.818344][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.822071][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.826121][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.829700][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.835664][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.839619][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.844031][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.869470][ T42] audit: type=1400 audit(1784324098.201:1363): avc: denied { append } for pid=15927 comm="syz.5.3674" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 228.965374][T15930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.971374][T15930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 229.073743][ T42] audit: type=1400 audit(1784324098.411:1364): avc: denied { map } for pid=15952 comm="syz.6.3682" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.200948][T15965] netlink: 'syz.5.3687': attribute type 1 has an invalid length. [ 229.204315][T15965] netlink: 'syz.5.3687': attribute type 2 has an invalid length. [ 229.218686][T15970] netlink: 'syz.5.3687': attribute type 1 has an invalid length. [ 229.221271][T15971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15971 comm=syz.7.3688 [ 229.224873][ T42] audit: type=1400 audit(1784324098.561:1365): avc: denied { read write } for pid=15966 comm="syz.6.3689" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 229.231817][T15971] netlink: 'syz.7.3688': attribute type 16 has an invalid length. [ 229.234993][T15970] netlink: 'syz.5.3687': attribute type 2 has an invalid length. [ 229.243868][T15971] netlink: 'syz.7.3688': attribute type 17 has an invalid length. [ 229.249975][ T42] audit: type=1400 audit(1784324098.561:1366): avc: denied { open } for pid=15966 comm="syz.6.3689" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 229.250025][T15971] erspan0: left promiscuous mode [ 229.262591][T15971] erspan0: left allmulticast mode [ 229.272327][T15971] bond0: left allmulticast mode [ 229.274005][T15971] bond_slave_0: left allmulticast mode [ 229.276613][T15971] bond_slave_1: left allmulticast mode [ 229.290454][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.294729][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.333740][T15971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.347741][T15971] hsr1: left promiscuous mode [ 229.564808][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.573060][T16008] befs: (nullb0): invalid magic header [ 229.576655][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.580270][T16008] befs: (nullb0): invalid magic header [ 229.583553][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.583839][T16008] befs: (nullb0): invalid magic header [ 229.584488][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.584652][T16008] befs: (nullb0): invalid magic header [ 229.585390][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.585552][T16008] befs: (nullb0): invalid magic header [ 229.586171][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.586334][T16008] befs: (nullb0): invalid magic header [ 229.586934][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.587091][T16008] befs: (nullb0): invalid magic header [ 229.587670][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.587842][T16008] befs: (nullb0): invalid magic header [ 229.588424][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.588578][T16008] befs: (nullb0): invalid magic header [ 229.589177][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.589345][T16008] befs: (nullb0): invalid magic header [ 229.589942][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.590123][T16008] befs: (nullb0): invalid magic header [ 229.590725][T16008] befs: (nullb0): No write support. Marking filesystem read-only [ 229.590881][T16008] befs: (nullb0): invalid magic header [ 229.660360][T16020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16020 comm=syz.3.3705 [ 230.075578][ T42] audit: type=1400 audit(1784324099.411:1367): avc: denied { write } for pid=16050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.084856][ T5817] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 230.147037][ T42] audit: type=1400 audit(1784324099.491:1368): avc: denied { write } for pid=16056 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.191014][T16062] __nla_validate_parse: 8 callbacks suppressed [ 230.191034][T16062] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3718'. [ 230.264811][ T5817] usb 12-1: Using ep0 maxpacket: 8 [ 230.271819][ T5817] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 230.276020][ T5817] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 230.280711][ T5817] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.288403][ T5817] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.293165][ T5817] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.294858][T16069] fuse: Unknown parameter '0x000000000000000b' [ 230.297232][ T5817] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.304570][ T5817] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 230.310721][ T5817] usb 12-1: config 168 interface 0 has no altsetting 0 [ 230.315210][ T5817] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 230.318724][ T5817] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 230.323361][ T5817] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.329199][ T5817] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.334213][ T5817] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.338678][ T5817] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.342367][ T5817] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 230.347984][ T5817] usb 12-1: config 168 interface 0 has no altsetting 0 [ 230.353431][ T5817] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 230.356773][ T5817] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 230.361444][ T5817] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 230.366926][ T5817] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.371449][ T5817] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.376312][ T5817] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 230.381414][ T5817] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 230.387739][ T5817] usb 12-1: config 168 interface 0 has no altsetting 0 [ 230.394475][ T5817] usb 12-1: string descriptor 0 read error: -22 [ 230.398276][ T5817] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 230.402059][ T5817] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.430322][ T5817] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 230.510499][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 230.515243][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 230.519219][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 230.523741][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 230.529498][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 230.533551][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 230.537833][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 230.615780][T16110] binder: 16108:16110 ioctl c0306201 200000000540 returned -22 [ 230.676867][ T5825] usb 12-1: USB disconnect, device number 5 [ 230.762220][T16114] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3737'. [ 230.964375][T16113] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3710'. [ 231.015297][ T5741] Bluetooth: hci4: command 0x0419 tx timeout [ 231.017976][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 231.045173][T16097] selinux_netlink_send: 1551 callbacks suppressed [ 231.045197][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.053486][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.058981][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.064465][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.069749][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.075128][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.080337][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.085859][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.091356][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.097082][T16097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16097 comm=syz.3.3731 [ 231.430685][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3739'. [ 231.675142][ T40] IPVS: starting estimator thread 0... [ 231.730926][T16141] trusted_key: syz.5.3746 sent an empty control message without MSG_MORE. [ 231.753805][T16144] netlink: 'syz.3.3747': attribute type 10 has an invalid length. [ 231.757048][T16145] bridge_slave_1: left allmulticast mode [ 231.759973][T16145] bridge_slave_1: left promiscuous mode [ 231.762610][T16145] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.769191][T16145] bridge_slave_0: left allmulticast mode [ 231.771519][T16145] bridge_slave_0: left promiscuous mode [ 231.773435][T16145] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.784560][T16138] IPVS: using max 41 ests per chain, 98400 per kthread [ 232.284580][ T56] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 232.454512][ T56] usb 12-1: Using ep0 maxpacket: 8 [ 232.459320][ T56] usb 12-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 232.462463][ T56] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.469866][ T56] pvrusb2: Hardware description: Terratec Grabster AV400 [ 232.472499][ T56] pvrusb2: ********** [ 232.473769][ T56] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 232.477087][ T56] pvrusb2: Important functionality might not be entirely working. [ 232.479595][ T56] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 232.483117][ T56] pvrusb2: ********** [ 232.575432][T16166] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3755'. [ 232.678588][ T2523] pvrusb2: Invalid write control endpoint [ 232.759654][ T2523] pvrusb2: Invalid write control endpoint [ 232.762579][ T2523] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 232.768584][ T2523] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 232.772924][ T2523] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 232.777921][ T2523] pvrusb2: Device being rendered inoperable [ 232.788418][ T2523] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 232.790103][T16181] process '/newroot/1015/file0' started with executable stack [ 232.792683][ T2523] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 232.805636][ T2523] pvrusb2: Attached sub-driver cx25840 [ 232.809149][ T2523] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 232.813207][ T2523] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 232.850183][T16189] netlink: 772 bytes leftover after parsing attributes in process `syz.3.3764'. [ 232.893971][T16193] tmpfs: Group quota block hardlimit too large. [ 233.048608][ T24] usb 12-1: USB disconnect, device number 6 [ 233.172422][T16215] netlink: 772 bytes leftover after parsing attributes in process `syz.3.3775'. [ 233.239998][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 233.242806][T16218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3776'. [ 233.247530][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3776'. [ 233.300937][T16222] fuse: Bad value for 'fd' [ 233.933961][T16252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.586774][T16287] IPv4: Oversized IP packet from 127.202.26.0 [ 234.596358][T16289] overlayfs: regular lower layers cannot follow data lower layers [ 234.788304][T16299] netlink: 'syz.3.3810': attribute type 8 has an invalid length. [ 234.896119][T16308] netlink: 'syz.7.3815': attribute type 1 has an invalid length. [ 234.907295][T16308] netlink: 'syz.7.3815': attribute type 21 has an invalid length. [ 234.980516][T16323] netlink: 'syz.3.3821': attribute type 8 has an invalid length. [ 235.129733][T16338] fuse: Bad value for 'fd' [ 235.140805][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 235.140822][ T42] audit: type=1400 audit(1784324104.482:1371): avc: denied { remount } for pid=16337 comm="syz.7.3828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 235.181473][T16346] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 235.241515][T16352] netlink: 'syz.5.3832': attribute type 8 has an invalid length. [ 235.254670][T16352] __nla_validate_parse: 13 callbacks suppressed [ 235.254685][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3832'. [ 235.296205][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3834'. [ 235.300471][T16356] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3833'. [ 235.302743][T16354] IPv6: sit2: Disabled Multicast RS [ 235.356851][T16360] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3837'. [ 235.421136][T16362] ip6t_REJECT: ECHOREPLY is not supported [ 235.458070][T16369] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3841'. [ 235.460125][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3839'. [ 235.498685][T16375] netlink: 'syz.6.3843': attribute type 8 has an invalid length. [ 235.501454][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3843'. [ 235.507974][T16377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3844'. [ 235.546970][ T42] audit: type=1400 audit(1784324104.882:1372): avc: denied { write } for pid=16382 comm="syz.6.3846" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 235.547735][T16385] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3848'. [ 235.613919][T16395] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3852'. [ 235.620743][T16393] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 235.647756][T16389] block nbd5: NBD_DISCONNECT [ 235.651991][T16388] block nbd5: Disconnected due to user request. [ 235.657797][T16388] block nbd5: shutting down sockets [ 235.799367][T16426] netlink: 'syz.7.3858': attribute type 6 has an invalid length. [ 235.820307][T16426] bridge1: entered promiscuous mode [ 235.822347][T16426] bridge1: entered allmulticast mode [ 235.837239][ T42] audit: type=1400 audit(1784324105.172:1373): avc: denied { write } for pid=16427 comm="syz.3.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.866857][ T42] audit: type=1400 audit(1784324105.202:1374): avc: denied { read } for pid=16427 comm="syz.3.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.868761][ T5744] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 235.879306][ T5741] Bluetooth: hci4: unexpected event for opcode 0x2016 [ 235.922654][T16435] kvm: pic: level sensitive irq not supported [ 235.937582][T16440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.938457][ T42] audit: type=1400 audit(1784324105.282:1375): avc: denied { mount } for pid=16434 comm="syz.7.3862" name="/" dev="hugetlbfs" ino=72542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 235.940246][T16440] IPv6: NLM_F_CREATE should be set when creating new route [ 235.987018][T16440] can0: slcan on ttyS3. [ 236.084735][ T42] audit: type=1400 audit(1784324105.422:1376): avc: denied { write } for pid=16449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.106927][T16440] can0 (unregistered): slcan off ttyS3. [ 236.157646][ T42] audit: type=1400 audit(1784324105.502:1377): avc: denied { write } for pid=16462 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.168209][T16464] netlink: 'syz.3.3872': attribute type 8 has an invalid length. [ 236.246593][T16477] nfs4: Unknown parameter '/file1' [ 236.254330][ T42] audit: type=1400 audit(1784324105.602:1378): avc: denied { write } for pid=16470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.310390][T16487] netlink: 'syz.3.3879': attribute type 8 has an invalid length. [ 236.313231][ T42] audit: type=1400 audit(1784324105.652:1379): avc: denied { write } for pid=16485 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.479593][T16483] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 236.510151][T16483] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 236.513805][T16483] overlayfs: failed to look up (tracing) for ino (-66) [ 237.245647][T16547] validate_nla: 1 callbacks suppressed [ 237.245668][T16547] netlink: 'syz.7.3900': attribute type 8 has an invalid length. [ 237.624934][ T42] audit: type=1400 audit(1784324106.962:1380): avc: denied { bind } for pid=16564 comm="syz.7.3907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.798195][T16580] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 238.027100][T16590] netlink: 'syz.5.3915': attribute type 8 has an invalid length. [ 238.133310][T16596] binder: 16595:16596 ioctl c018620b 0 returned -14 [ 238.301521][T16606] overlayfs: failed to resolve './file1': -2 [ 238.345451][T16610] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 238.587117][T16622] selinux_netlink_send: 900 callbacks suppressed [ 238.587136][T16622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16622 comm=syz.5.3929 [ 238.597634][T16622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.983688][ T24] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 239.133736][ T24] usb 12-1: Using ep0 maxpacket: 16 [ 239.140782][ T24] usb 12-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 239.144695][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.148097][ T24] usb 12-1: Product: syz [ 239.149935][ T24] usb 12-1: Manufacturer: syz [ 239.151937][ T24] usb 12-1: SerialNumber: syz [ 239.161788][ T24] usb 12-1: config 0 descriptor?? [ 239.240398][T16643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.251690][T16642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.570399][ T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 239.583782][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.588285][ T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 239.591838][ T24] usb 12-1: media controller created [ 239.609705][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.831334][T16657] binder: 16626:16657 ioctl c010f508 2000000001c0 returned -22 [ 240.155500][ T24] zl10353_read_register: readreg error (reg=127, ret==0) [ 240.155577][T16631] dtv5100: wlen = 0, aborting. [ 240.158561][ T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 240.158579][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 240.623321][T16685] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 240.707647][T16692] netlink: 'syz.3.3954': attribute type 1 has an invalid length. [ 240.711057][T16692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.721346][T16692] fuse: Bad value for 'fd' [ 240.807895][T16697] __nla_validate_parse: 27 callbacks suppressed [ 240.807919][T16697] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3956'. [ 240.833454][T13362] usb 11-1: new full-speed USB device number 16 using dummy_hcd [ 240.968645][T16711] bridge10: entered allmulticast mode [ 240.996573][T16709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 241.006463][T13362] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 241.010214][T13362] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 241.015203][T16714] netlink: 'syz.3.3964': attribute type 8 has an invalid length. [ 241.016772][T13362] usb 11-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 241.018447][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3964'. [ 241.021865][T13362] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.030577][T13362] usb 11-1: Product: syz [ 241.032441][T13362] usb 11-1: Manufacturer: syz [ 241.035449][T13362] usb 11-1: SerialNumber: syz [ 241.044619][T13362] usb 11-1: config 0 descriptor?? [ 241.062409][T13362] hub 11-1:0.0: bad descriptor, ignoring hub [ 241.065185][T13362] hub 11-1:0.0: probe with driver hub failed with error -5 [ 241.072017][T13362] input: syz syz as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input23 [ 241.228563][T16723] tipc: Enabling of bearer rejected, failed to enable media [ 241.359255][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 241.359267][ T42] audit: type=1400 audit(1784324110.692:1384): avc: denied { listen } for pid=16730 comm="syz.3.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.370940][ T42] audit: type=1400 audit(1784324110.712:1385): avc: denied { accept } for pid=16730 comm="syz.3.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.381180][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3972'. [ 241.385118][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3972'. [ 241.389878][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3972'. [ 241.394178][T16731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3972'. [ 241.489395][ T7796] usb 11-1: USB disconnect, device number 16 [ 241.663883][ T5749] usb 12-1: USB disconnect, device number 7 [ 241.709348][ T5749] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 241.711512][T16742] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3977'. [ 241.969507][T16756] netlink: 'syz.7.3983': attribute type 8 has an invalid length. [ 241.972659][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3983'. [ 241.974766][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3981'. [ 242.161118][T16776] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3991'. [ 242.174464][T16779] netlink: 'syz.6.3992': attribute type 8 has an invalid length. [ 242.730716][T16806] trusted_key: encrypted_key: keylen parameter is missing [ 242.769501][T16809] overlayfs: failed to clone upperpath [ 242.778887][T16806] sctp: [Deprecated]: syz.5.4002 (pid 16806) Use of int in maxseg socket option. [ 242.778887][T16806] Use struct sctp_assoc_value instead [ 242.902928][ T29] libceph: connect (1)[c::]:6789 error -101 [ 242.909241][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 242.957929][T16811] ceph: No mds server is up or the cluster is laggy [ 243.086637][T16834] team0: No ports can be present during mode change [ 243.119588][ T42] audit: type=1326 audit(1784324112.453:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.6.4015" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c2cf9de99 code=0x7ffc0000 [ 243.134753][ T42] audit: type=1326 audit(1784324112.453:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.6.4015" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c2cf9de99 code=0x7ffc0000 [ 243.145579][ T42] audit: type=1326 audit(1784324112.453:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.6.4015" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c2cf9de99 code=0x7ffc0000 [ 243.155637][ T42] audit: type=1326 audit(1784324112.453:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.6.4015" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c2cf9de99 code=0x7ffc0000 [ 243.166863][ T42] audit: type=1326 audit(1784324112.453:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.6.4015" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6c2cf9de99 code=0x7ffc0000 [ 243.176701][ T42] audit: type=1326 audit(1784324112.453:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.6.4015" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c2cf9de99 code=0x7ffc0000 [ 243.187192][ T42] audit: type=1326 audit(1784324112.453:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.6.4015" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c2cf9de99 code=0x7ffc0000 [ 243.197179][ T42] audit: type=1326 audit(1784324112.453:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16835 comm="syz.6.4015" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c2cf9de99 code=0x7ffc0000 [ 243.407570][T16861] netlink: 'syz.5.4023': attribute type 8 has an invalid length. [ 243.540374][T16878] uprobe: syz.3.4033:16878 failed to unregister, leaking uprobe [ 243.545333][T16882] netlink: 'syz.6.4032': attribute type 10 has an invalid length. [ 243.554572][T16882] geneve2: entered promiscuous mode [ 243.556402][T16882] geneve2: entered allmulticast mode [ 244.033580][T16904] netlink: 'syz.6.4039': attribute type 8 has an invalid length. [ 244.619674][T16935] bond0 (unregistering): left promiscuous mode [ 244.622145][T16935] bond_slave_0: left promiscuous mode [ 244.624346][T16935] bond_slave_1: left promiscuous mode [ 244.632673][T16935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.639908][T16935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.646313][T16935] bond0 (unregistering): Released all slaves [ 244.661336][T16940] tmpfs: Cannot enable quota on remount [ 244.664506][T16940] tmpfs: Cannot enable quota on remount [ 244.682980][ T7796] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 244.832896][ T7796] usb 11-1: Using ep0 maxpacket: 32 [ 244.837891][ T7796] usb 11-1: config index 0 descriptor too short (expected 15270, got 18) [ 244.842382][ T7796] usb 11-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 244.848439][ T7796] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.853648][ T7796] usb 11-1: Product: syz [ 244.855019][ T7796] usb 11-1: Manufacturer: syz [ 244.859388][ T7796] usb 11-1: SerialNumber: syz [ 244.869509][ T7796] usb 11-1: config 0 descriptor?? [ 244.879311][ T7796] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 244.888028][ T7796] dvb-usb: bulk message failed: -22 (4/0) [ 244.889918][ T7796] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 244.893612][ T7796] dvb-usb: bulk message failed: -22 (5/0) [ 244.895468][ T7796] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 244.906783][ T7796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 244.910307][ T7796] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 244.911637][T16968] overlayfs: failed to clone upperpath [ 244.914417][ T7796] usb 11-1: media controller created [ 244.926222][ T7796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.927104][T16968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16968 comm=syz.3.4065 [ 244.937554][ T7796] usb 11-1: selecting invalid altsetting 3 [ 244.939523][ T7796] ttusb2: set interface to alts=3 failed [ 244.980633][ T7796] DVB: Unable to find symbol tda10086_attach() [ 244.982678][ T7796] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 245.003216][ T7796] dvb-usb: bulk message failed: -22 (4/0) [ 245.022672][ T7796] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 245.027054][ T7796] dvb-usb: bulk message failed: -22 (5/0) [ 245.029452][ T7796] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 245.040492][ T7796] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 245.090738][T16917] dvb-usb: bulk message failed: -22 (7/0) [ 245.112584][T16917] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 245.112628][T16917] ttusb2: i2c transfer failed. [ 245.207777][ T7796] usb 11-1: USB disconnect, device number 17 [ 245.228176][T16990] FAULT_INJECTION: forcing a failure. [ 245.228176][T16990] name failslab, interval 1, probability 0, space 0, times 0 [ 245.234905][T16990] CPU: 0 UID: 0 PID: 16990 Comm: syz.5.4074 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.234935][T16990] Tainted: [L]=SOFTLOCKUP [ 245.234942][T16990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.234953][T16990] Call Trace: [ 245.234988][T16990] [ 245.234996][T16990] dump_stack_lvl+0x100/0x190 [ 245.235266][T16990] should_fail_ex.cold+0x5/0xa [ 245.235333][T16990] should_failslab+0xc2/0x120 [ 245.235402][T16990] __kmalloc_noprof+0xfc/0x820 [ 245.235444][T16990] ? rcu_is_watching+0x12/0xc0 [ 245.235533][T16990] ? tomoyo_realpath_from_path+0xb6/0x690 [ 245.235594][T16990] tomoyo_realpath_from_path+0xb6/0x690 [ 245.235627][T16990] tomoyo_path_number_perm+0x23c/0x580 [ 245.235649][T16990] ? tomoyo_path_number_perm+0x22e/0x580 [ 245.235675][T16990] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.235725][T16990] ? find_held_lock+0x2b/0x80 [ 245.235752][T16990] ? __fget_files+0x215/0x3d0 [ 245.235788][T16990] ? hook_file_ioctl_common+0x140/0x440 [ 245.235806][T16990] ? __fget_files+0x215/0x3d0 [ 245.235828][T16990] ? __fget_files+0x21f/0x3d0 [ 245.235849][T16990] security_file_ioctl+0xd3/0x230 [ 245.235877][T16990] __x64_sys_ioctl+0xb7/0x210 [ 245.235930][T16990] do_syscall_64+0x115/0x870 [ 245.236146][T16990] ? clear_bhb_loop+0x40/0x90 [ 245.236186][T16990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.236204][T16990] RIP: 0033:0x7f9dcdd9de99 [ 245.236221][T16990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.236239][T16990] RSP: 002b:00007f9dcec86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.236258][T16990] RAX: ffffffffffffffda RBX: 00007f9dce025fa0 RCX: 00007f9dcdd9de99 [ 245.236270][T16990] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 245.236281][T16990] RBP: 00007f9dcec86090 R08: 0000000000000000 R09: 0000000000000000 [ 245.236292][T16990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.236303][T16990] R13: 00007f9dce026038 R14: 00007f9dce025fa0 R15: 00007ffc880aba98 [ 245.236329][T16990] [ 245.236703][T16990] ERROR: Out of memory at tomoyo_realpath_from_path. [ 245.259539][ T7796] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 245.614489][T17030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=17030 comm=syz.3.4091 [ 245.840595][T17060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=17060 comm=syz.3.4103 [ 245.958678][T17070] __nla_validate_parse: 15 callbacks suppressed [ 245.958692][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4109'. [ 246.415634][T17087] cgroup: fork rejected by pids controller in /syz5 [ 246.631842][T17175] xt_connbytes: Forcing CT accounting to be enabled [ 246.634624][T17175] set match dimension is over the limit! [ 246.671848][T17179] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4127'. [ 246.676851][ T5741] Bluetooth: hci2: Malformed LE Event: 0x1b [ 246.679078][ T5741] Bluetooth: hci2: Malformed LE Event: 0x1b [ 246.978322][T17202] tipc: Enabling of bearer rejected, failed to enable media [ 246.983398][T17202] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4133'. [ 247.122673][ T42] kauditd_printk_skb: 124 callbacks suppressed [ 247.122696][ T42] audit: type=1400 audit(1784324116.453:1518): avc: denied { create } for pid=17225 comm="syz.6.4140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 247.134386][ T42] audit: type=1400 audit(1784324116.473:1519): avc: denied { ioctl } for pid=17225 comm="syz.6.4140" path="socket:[76434]" dev="sockfs" ino=76434 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 247.177864][ T42] audit: type=1326 audit(1784324116.513:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17227 comm="syz.7.4141" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f937b59de99 code=0x0 [ 247.265554][T17241] overlay: Bad value for 'redirect_dir' [ 247.752597][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4160'. [ 247.758585][T17290] IPv6: sit1: Disabled Multicast RS [ 247.998430][T17306] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4167'. [ 248.897153][ T42] audit: type=1400 audit(1784324118.233:1521): avc: denied { getopt } for pid=17350 comm="syz.6.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.239671][T17371] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4192'. [ 249.250206][T17373] binder_alloc: 17372: binder_alloc_buf, no vma [ 249.281699][T17377] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4194'. [ 249.395084][ T42] audit: type=1400 audit(1784324118.733:1522): avc: denied { nlmsg_write } for pid=17389 comm="syz.6.4201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 249.414754][ T42] audit: type=1107 audit(1784324118.733:1523): pid=17389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 249.428922][T17395] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4203'. [ 249.610600][ T42] audit: type=1326 audit(1784324118.943:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17414 comm="syz.6.4211" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c2cf9de99 code=0x0 [ 249.679787][ T42] audit: type=1400 audit(1784324119.013:1525): avc: denied { create } for pid=17420 comm="syz.7.4213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 249.688371][ T42] audit: type=1400 audit(1784324119.013:1526): avc: denied { bind } for pid=17420 comm="syz.7.4213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 249.753236][ T42] audit: type=1400 audit(1784324119.093:1527): avc: denied { rmdir } for pid=17424 comm="syz.7.4215" name="file2" dev="9p" ino=72637471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.937671][T17431] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4216'. [ 250.092646][T17436] [U] zͻi[27| [ 250.096842][T17436] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 250.102802][T17436] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 250.108551][T17436] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 250.127867][T17436] [U] 8)X)YvxRĻbmbN@ox;JD, [ 250.130586][T17436] [U] *Cn3v7KEXgt_3 [ 250.137289][T17436] [U] D/QazҬEHgE1$_ks=R@ [ 250.139760][T17436] [U] ϼcEv @ [ 250.141382][T17436] [U] a% [ 250.147376][T17436] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 250.148761][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4217'. [ 250.157425][T17436] [U] f1p3 [ 250.160262][T17436] [U] N0[L;a_l&kMC [ 250.164797][T17436] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 250.176319][ T5741] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 250.187312][T17433] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 [ 263.904917][T18242] dump_stack_lvl+0x100/0x190 [ 263.905074][T18242] should_fail_ex.cold+0x5/0xa [ 263.905111][T18242] _copy_from_iter+0x1f4/0x1690 [ 263.905155][T18242] ? __asan_memset+0x23/0x50 [ 263.905218][T18242] ? __pfx__copy_from_iter+0x10/0x10 [ 263.905232][T18242] ? __pfx___alloc_skb+0x10/0x10 [ 263.905424][T18242] netlink_sendmsg+0x808/0xda0 [ 263.905504][T18242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.905531][T18242] ? selinux_socket_sendmsg+0x198/0x2f0 [ 263.905583][T18242] ____sys_sendmsg+0xa4d/0xbe0 [ 263.905654][T18242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.905683][T18242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 263.905718][T18242] ___sys_sendmsg+0x190/0x1e0 [ 263.905745][T18242] ? __pfx____sys_sendmsg+0x10/0x10 [ 263.905769][T18242] ? __lock_acquire+0x49f/0x1a40 [ 263.905810][T18242] ? get_pid_task+0x106/0x250 [ 263.905890][T18242] __sys_sendmsg+0x160/0x210 [ 263.905911][T18242] ? __pfx___sys_sendmsg+0x10/0x10 [ 263.905944][T18242] do_syscall_64+0x115/0x870 [ 263.906030][T18242] ? clear_bhb_loop+0x40/0x90 [ 263.906053][T18242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.906071][T18242] RIP: 0033:0x7f937b59de99 [ 263.906088][T18242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.906105][T18242] RSP: 002b:00007f937c475028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.906124][T18242] RAX: ffffffffffffffda RBX: 00007f937b826090 RCX: 00007f937b59de99 [ 263.906136][T18242] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 263.906147][T18242] RBP: 00007f937c475090 R08: 0000000000000000 R09: 0000000000000000 [ 263.906157][T18242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.906167][T18242] R13: 00007f937b826128 R14: 00007f937b826090 R15: 00007fff2fbadf28 [ 263.906192][T18242] [ 264.109097][T18260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.126042][T18260] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 264.137215][T18260] bond6: entered allmulticast mode [ 264.157890][T18260] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4533'. [ 264.169856][T18260] bond6: left allmulticast mode [ 264.175157][T18260] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.247109][T18272] ip6gretap2: entered promiscuous mode [ 264.249539][T18272] ip6gretap2: entered allmulticast mode [ 264.254989][T18274] validate_nla: 8 callbacks suppressed [ 264.255003][T18274] netlink: 'syz.3.4538': attribute type 12 has an invalid length. [ 264.564997][T18303] openvswitch: netlink: Flow key attr not present in new flow. [ 265.778034][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 265.778054][ T42] audit: type=1400 audit(1784324135.115:1548): avc: denied { bind } for pid=18380 comm="syz.6.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.791703][T18381] netlink: 'syz.6.4581': attribute type 39 has an invalid length. [ 265.997278][T18390] netlink: 'syz.6.4584': attribute type 3 has an invalid length. [ 266.232374][T18405] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 266.277843][T18409] netlink: 'syz.3.4593': attribute type 8 has an invalid length. [ 266.454750][T18414] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 266.996960][T18423] netlink: 'syz.3.4598': attribute type 3 has an invalid length. [ 267.080276][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.080494][T18334] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 267.123013][T18438] netlink: 'syz.3.4603': attribute type 8 has an invalid length. [ 267.219926][T18446] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 267.458597][T18472] netlink: 'syz.3.4617': attribute type 8 has an invalid length. [ 267.461900][T18472] __nla_validate_parse: 20 callbacks suppressed [ 267.461916][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4617'. [ 267.942969][T18525] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20001 [ 267.995352][T18334] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 268.033130][T18530] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20004 [ 268.041355][T18532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.110773][T18540] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 4, id = 0 [ 268.220521][T18544] netlink: 'syz.6.4644': attribute type 2 has an invalid length. [ 268.251381][T18548] binder: 18547:18548 ioctl c0306201 0 returned -14 [ 268.413298][T18553] tmpfs: Unknown parameter ' ' [ 268.506859][ T42] audit: type=1400 audit(1784324137.851:1549): avc: denied { append } for pid=18555 comm="syz.5.4650" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 268.760313][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.010861][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4650'. [ 269.024114][T18557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4650'. [ 269.116537][T18578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=18578 comm=syz.3.4659 [ 269.169682][ T5741] Bluetooth: hci4: command 0x0419 tx timeout [ 269.328027][T18598] netlink: 'syz.3.4666': attribute type 1 has an invalid length. [ 269.357235][T18598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.389119][T18598] vlan1: entered allmulticast mode [ 269.395328][T18598] bond7: entered allmulticast mode [ 269.626343][ T42] audit: type=1400 audit(1784324138.971:1550): avc: denied { write } for pid=18613 comm="syz.5.4670" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 269.643799][ T42] audit: type=1400 audit(1784324138.981:1551): avc: denied { create } for pid=18613 comm="syz.5.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 269.688207][T18629] netlink: 'syz.5.4672': attribute type 1 has an invalid length. [ 269.692012][T18629] netlink: 'syz.5.4672': attribute type 2 has an invalid length. [ 269.755707][T18630] binder: 18628:18630 unknown command 0 [ 269.755731][T18630] binder: 18628:18630 ioctl c0306201 200000000c00 returned -22 [ 270.278280][T18646] netlink: 'syz.7.4677': attribute type 1 has an invalid length. [ 270.281301][T18646] netlink: 244 bytes leftover after parsing attributes in process `syz.7.4677'. [ 270.283337][ T42] audit: type=1400 audit(1784324139.631:1552): avc: denied { getopt } for pid=18662 comm="syz.5.4685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 270.451044][ T42] audit: type=1400 audit(1784324139.802:1553): avc: denied { bind } for pid=18677 comm="syz.5.4691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 270.623704][T18692] ip6tnl1: entered promiscuous mode [ 270.626022][T18692] ip6tnl1: entered allmulticast mode [ 270.736841][T18711] overlayfs: failed to clone upperpath [ 270.745236][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4707'. [ 270.789011][T18722] sock: sock_timestamping_bind_phc: sock not bind to device [ 271.014965][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4722'. [ 271.017889][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4722'. [ 271.064486][T18762] netlink: 'syz.6.4725': attribute type 62 has an invalid length. [ 271.099949][T18763] netlink: 'syz.3.4724': attribute type 23 has an invalid length. [ 271.261067][ T42] audit: type=1400 audit(1784324140.592:1554): avc: denied { load_policy } for pid=18779 comm="syz.7.4731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 271.268564][T18780] SELinux: policydb string SE0Linx does not match my string SE Linux [ 271.276069][T18780] SELinux: failed to load policy [ 271.482956][T18787] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4734'. [ 271.585771][ T42] audit: type=1400 audit(1784324140.922:1555): avc: denied { append } for pid=18790 comm="syz.7.4735" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 271.639915][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4738'. [ 271.642741][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4738'. [ 271.645632][T18798] netlink: 'syz.6.4738': attribute type 7 has an invalid length. [ 271.649961][T18798] netlink: 'syz.6.4738': attribute type 13 has an invalid length. [ 271.661170][ T42] audit: type=1400 audit(1784324141.002:1556): avc: denied { create } for pid=18797 comm="syz.6.4738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 272.211808][T18829] netlink: 'syz.3.4749': attribute type 62 has an invalid length. [ 272.215845][T18829] syz.3.4749 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 272.352786][ T42] audit: type=1400 audit(1784324141.693:1557): avc: denied { write } for pid=18840 comm="syz.3.4754" path="socket:[83974]" dev="sockfs" ino=83974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.414057][ T42] audit: type=1400 audit(1784324141.753:1558): avc: denied { shutdown } for pid=18845 comm="syz.7.4756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.415063][T18846] IPVS: Unknown mcast interface: nr0 [ 272.451655][T18852] IPVS: set_ctl: invalid protocol: 103 172.30.1.4:20001 [ 272.513625][ T42] audit: type=1400 audit(1784324141.853:1559): avc: denied { mounton } for pid=18855 comm="syz.6.4759" path="/file0" dev="ramfs" ino=84068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 272.678486][T18876] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 272.985938][T18896] ip6gre0: Master is either lo or non-ether device [ 273.609922][T18915] netlink: 'syz.6.4779': attribute type 3 has an invalid length. [ 273.613035][T18915] __nla_validate_parse: 1 callbacks suppressed [ 273.613051][T18915] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4779'. [ 274.206963][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 274.207176][T18819] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 274.687527][ T42] audit: type=1326 audit(1784324144.024:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 274.694749][ T42] audit: type=1326 audit(1784324144.024:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 274.702716][ T42] audit: type=1326 audit(1784324144.024:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 274.713757][ T42] audit: type=1326 audit(1784324144.024:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 274.750142][T18956] geneve1: entered allmulticast mode [ 274.795986][T18958] erspan0: entered promiscuous mode [ 274.800814][T18958] macsec3: entered promiscuous mode [ 275.044923][T18819] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.059907][T18968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1817 sclass=netlink_route_socket pid=18968 comm=syz.6.4802 [ 275.214184][T18979] overlayfs: failed to clone upperpath [ 275.243512][T18976] 9p: Bad value for 'rfdno' [ 275.406323][ T5741] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 275.616393][ T40] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 275.666250][T13362] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 275.778684][ T40] usb 10-1: Using ep0 maxpacket: 16 [ 275.784932][ T40] usb 10-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 275.793651][ T40] usb 10-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 275.803815][ T40] usb 10-1: config 1 interface 0 has no altsetting 0 [ 275.813713][ T40] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.816824][ T40] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.823663][ T40] usb 10-1: Product: syz [ 275.825009][ T40] usb 10-1: Manufacturer: syz [ 275.826866][ T40] usb 10-1: SerialNumber: syz [ 275.830444][T18989] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 275.831304][T13362] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.835562][T18989] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 275.844191][T13362] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 275.850648][T13362] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.854622][T13362] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 275.859877][T13362] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 275.869121][T13362] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.873074][T13362] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.880037][T13362] usb 12-1: Product: syz [ 275.881566][T13362] usb 12-1: Manufacturer: syz [ 275.890713][T13362] cdc_wdm 12-1:1.0: skipping garbage [ 275.893524][T13362] cdc_wdm 12-1:1.0: skipping garbage [ 275.897028][T13362] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 275.899175][T13362] cdc_wdm 12-1:1.0: Unknown control protocol [ 276.059358][ T40] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 276.083792][ T40] usb 10-1: USB disconnect, device number 16 [ 276.094564][T13362] usb 12-1: USB disconnect, device number 8 [ 276.124786][T19030] netlink: 1760 bytes leftover after parsing attributes in process `syz.6.4826'. [ 276.267013][ T42] kauditd_printk_skb: 14471 callbacks suppressed [ 276.267033][ T42] audit: type=1326 audit(1784324145.614:16035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.278854][ T5741] Bluetooth: hci4: command 0x0419 tx timeout [ 276.281621][ T42] audit: type=1326 audit(1784324145.614:16036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.293861][ T42] audit: type=1326 audit(1784324145.614:16037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.303400][ T42] audit: type=1326 audit(1784324145.614:16038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.312322][ T42] audit: type=1326 audit(1784324145.614:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.320973][ T42] audit: type=1326 audit(1784324145.614:16040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.329492][ T42] audit: type=1326 audit(1784324145.614:16041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.339458][ T42] audit: type=1326 audit(1784324145.614:16042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.348823][ T42] audit: type=1326 audit(1784324145.614:16043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.361956][ T42] audit: type=1326 audit(1784324145.614:16044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.3.4793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x50000 [ 276.369997][T19040] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4831'. [ 276.415301][T19042] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4832'. [ 276.503025][T19045] fuse: fd is not a fuse device [ 276.508689][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4833'. [ 276.512465][T19045] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4833'. [ 276.640858][T19047] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4834'. [ 276.722152][T19051] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4836'. [ 276.728590][T19054] validate_nla: 1 callbacks suppressed [ 276.728605][T19054] netlink: 'syz.6.4837': attribute type 4 has an invalid length. [ 276.743132][T19053] ./file0: Can't lookup blockdev [ 276.745597][T13362] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 276.780860][T19058] syz_tun: entered allmulticast mode [ 276.879574][T19057] syz_tun: left allmulticast mode [ 276.916850][T13362] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 276.917144][ T5741] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 276.920854][ T5741] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 276.922534][T13362] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 276.936467][T13362] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 276.942208][T13362] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 276.950087][T13362] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 276.959109][T13362] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.962071][T13362] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.966800][T13362] usb 12-1: Product: syz [ 276.966976][T19075] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4845'. [ 276.968202][T13362] usb 12-1: Manufacturer: syz [ 276.990761][T13362] cdc_wdm 12-1:1.0: skipping garbage [ 276.996611][T13362] cdc_wdm 12-1:1.0: skipping garbage [ 277.000700][T13362] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 277.005292][T13362] cdc_wdm 12-1:1.0: Unknown control protocol [ 277.546764][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.549264][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.552861][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.555530][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.558209][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.560822][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.563411][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.566027][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.568660][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.571282][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.573879][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.576468][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.579049][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.581765][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.584325][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.587371][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.589971][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.592557][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.595198][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.597766][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.600362][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.602975][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.605569][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.608121][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.611573][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.614274][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.616836][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.619362][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.621804][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.624387][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.627048][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.629628][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.632183][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.634755][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.637568][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.640139][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.642746][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.645305][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.647584][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.650032][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.652579][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.655154][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.657692][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.660251][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.662667][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.665294][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.667818][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.668797][T19089] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.670442][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.673997][T19089] kvm: kvm [18992]: vcpu0, guest rIP: 0x58ad29489c2a7d0a Unhandled WRMSR(0x4000006d) = 0x6 [ 277.675584][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.681901][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.684359][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.686998][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.690057][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.692683][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.695122][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.697884][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.700463][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.702846][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.707076][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.709749][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.712611][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.715229][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.717823][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.720404][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.723017][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.725623][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.731671][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.734300][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.736914][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.740117][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.742676][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.745233][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.747797][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.750324][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.752702][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.755301][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.757854][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.760407][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.762953][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.765514][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.768050][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.770507][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.773033][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.776351][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.778978][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.781175][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.783636][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.786033][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.788532][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.791082][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.793431][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.796160][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.798579][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.801077][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.803502][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.806076][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.810814][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.813240][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.815953][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.818694][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.821685][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.824093][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.826640][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.829138][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.831261][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.833770][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.836138][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.838980][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.841350][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.843874][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.846265][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.848759][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.851342][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.853742][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.856311][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.858706][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.861253][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.863791][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.866368][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.868945][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.871274][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.873769][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.876161][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.878711][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.881281][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.883745][ C0] cdc_wdm 12-1:1.0: Cannot schedule work [ 277.886331][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.888825][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.891323][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.893845][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.896580][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.899140][ C0] cdc_wdm 12-1:1.0: Stall on int endpoint [ 277.902124][ C0] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 277.914105][ T1354] usb 12-1: USB disconnect, device number 9 [ 278.174780][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4862'. [ 278.275272][T19132] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 278.343184][T19137] fuse: fd is not a fuse device [ 278.575637][T19168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19168 comm=syz.3.4877 [ 278.586806][T19168] netlink: 'syz.3.4877': attribute type 1 has an invalid length. [ 278.610873][T19168] macvtap3: entered allmulticast mode [ 278.620610][T19168] macvtap4: entered allmulticast mode [ 278.640951][T19168] bond8: (slave bridge11): making interface the new active one [ 278.645421][T19168] bond8: (slave bridge11): Enslaving as an active interface with an up link [ 278.725114][T19180] xt_limit: Overflow, try lower: 271964/0 [ 278.941871][T19204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19204 comm=syz.3.4886 [ 278.988211][T19211] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 279.037106][T19213] __nla_validate_parse: 3 callbacks suppressed [ 279.037124][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4890'. [ 279.051827][T19214] bridge12: entered promiscuous mode [ 279.051845][T19214] bridge12: entered allmulticast mode [ 279.203309][T19220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19220 comm=syz.7.4892 [ 279.203365][T19219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19219 comm=syz.7.4892 [ 279.297730][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4894'. [ 279.410752][T19228] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4896'. [ 279.417205][T19228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.558540][T19237] netlink: 'syz.7.4897': attribute type 8 has an invalid length. [ 279.563005][T19237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4897'. [ 279.799952][T19264] netlink: 'syz.6.4908': attribute type 8 has an invalid length. [ 279.803143][T19264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4908'. [ 279.827673][T19266] netlink: 'syz.5.4909': attribute type 4 has an invalid length. [ 279.831307][T19266] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4909'. [ 279.848765][T19266] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 279.859930][T19266] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 279.870221][T19266] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 279.882044][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4909'. [ 279.886649][T19266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4909'. [ 279.908459][T19280] 9pnet_virtio: no channels available for device syz [ 279.914348][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.919837][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.924018][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.935308][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.045215][T19303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7952 sclass=netlink_route_socket pid=19303 comm=syz.6.4923 [ 280.049509][T19304] netlink: 'syz.3.4924': attribute type 1 has an invalid length. [ 280.054516][T19293] netlink: 'syz.7.4920': attribute type 8 has an invalid length. [ 280.057196][T19293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4920'. [ 280.170418][T19315] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4926'. [ 280.174181][T19315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.178743][T19315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.188492][T19315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.191868][T19315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.222085][T19331] sctp: [Deprecated]: syz.7.4926 (pid 19331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.222085][T19331] Use struct sctp_sack_info instead [ 280.412075][T19343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35856 sclass=netlink_route_socket pid=19343 comm=syz.5.4935 [ 280.461112][T19347] netlink: 'syz.5.4937': attribute type 8 has an invalid length. [ 280.786419][T19372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65040 sclass=netlink_route_socket pid=19372 comm=syz.5.4946 [ 281.018063][T19377] netlink: 'syz.7.4948': attribute type 8 has an invalid length. [ 281.387526][T19392] bond9 (unregistering): Released all slaves [ 281.439549][T19394] vlan2: entered allmulticast mode [ 281.441632][T19394] bridge13: entered allmulticast mode [ 281.445296][T19394] bridge13: port 1(erspan0) entered blocking state [ 281.447502][T19394] bridge13: port 1(erspan0) entered disabled state [ 281.449742][T19394] erspan0: entered allmulticast mode [ 281.452366][T19394] erspan0: entered promiscuous mode [ 281.454841][T19394] bridge13: port 1(erspan0) entered blocking state [ 281.456966][T19394] bridge13: port 1(erspan0) entered forwarding state [ 281.598189][T19402] netlink: 'syz.3.4957': attribute type 8 has an invalid length. [ 282.912564][T19374] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 282.912768][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.149872][T19427] netlink: 'syz.3.4967': attribute type 8 has an invalid length. [ 283.354651][T19451] netlink: 'syz.3.4976': attribute type 8 has an invalid length. [ 283.487619][ T42] kauditd_printk_skb: 13880 callbacks suppressed [ 283.487632][ T42] audit: type=1400 audit(1784324152.838:29925): avc: denied { accept } for pid=19460 comm="syz.3.4980" path="/1464/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 283.522531][T19461] xt_CT: No such helper "pptp" [ 283.598113][T19469] netlink: 'syz.3.4982': attribute type 1 has an invalid length. [ 283.713940][T19477] netlink: 'syz.3.4986': attribute type 8 has an invalid length. [ 283.820819][T19374] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.015167][T19492] netlink: 'syz.7.4993': attribute type 11 has an invalid length. [ 284.105470][T19496] loop5: detected capacity change from 0 to 7 [ 284.116447][T19496] loop5: [POWERTEC] p1 p2 [ 284.118697][T19496] loop5: p1 start 1680801792 is beyond EOD, truncated [ 284.122294][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.131738][T19496] loop5: p2 start 1815049829 is beyond EOD, truncated [ 284.148628][T19499] netlink: 'syz.6.4997': attribute type 9 has an invalid length. [ 284.180507][T19501] overlay: filesystem on ./file0 not supported as upperdir [ 284.189807][T19501] __nla_validate_parse: 12 callbacks suppressed [ 284.189826][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4996'. [ 284.234368][ T5149] loop5: [POWERTEC] p1 p2 [ 284.236539][ T5149] loop5: p1 start 1680801792 is beyond EOD, truncated [ 284.239522][ T5149] loop5: p2 start 1815049829 is beyond EOD, truncated [ 284.253108][T19510] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5000'. [ 284.317287][T19515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5001'. [ 284.525052][ T5741] Bluetooth: hci2: unexpected event 0x04 length: 4 < 10 [ 284.632608][T19543] netlink: 'syz.6.5012': attribute type 2 has an invalid length. [ 284.714731][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5015'. [ 284.741140][T19551] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.790406][T19560] netlink: 'syz.3.5018': attribute type 8 has an invalid length. [ 284.793720][T19560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5018'. [ 284.855925][T19564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5020'. [ 284.909124][T19566] trusted_key: encrypted_key: keylen parameter is missing [ 284.955204][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5022'. [ 284.966616][T19568] netlink: 'syz.3.5022': attribute type 8 has an invalid length. [ 284.969545][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5022'. [ 284.992249][ T5741] Bluetooth: hci4: command 0x0419 tx timeout [ 285.134592][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5028'. [ 285.134834][T19584] netlink: 'syz.6.5029': attribute type 8 has an invalid length. [ 285.138304][T19583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5028'. [ 285.226181][T19589] openvswitch: netlink: Missing key (keys=40, expected=100) [ 285.259612][T19590] bond0: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 285.268265][T19590] bond0: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 285.408022][T19613] netlink: 'syz.6.5036': attribute type 8 has an invalid length. [ 285.473848][T19624] bond0: entered promiscuous mode [ 285.477941][T19624] bond0: left promiscuous mode [ 285.585398][T19634] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 286.130642][T19703] fuse: fd is not a fuse device [ 286.174807][T19708] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0000 [ 286.178372][T19708] tipc: Enabled bearer , priority 10 [ 286.470574][T19732] overlayfs: failed to resolve './file1': -2 [ 286.510029][T19738] binder: 19736:19738 ioctl 4018620d 0 returned -22 [ 286.659630][T19747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=19747 comm=syz.5.5093 [ 286.882135][ T5825] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 287.042338][ T5825] usb 12-1: Using ep0 maxpacket: 16 [ 287.046533][ T5825] usb 12-1: config index 0 descriptor too short (expected 65, got 36) [ 287.049882][ T5825] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 287.054835][ T5825] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 287.059377][ T5825] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 287.064086][ T5825] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.069371][ T5825] usb 12-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 287.073700][ T5825] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.087133][ T5825] usb 12-1: config 0 descriptor?? [ 287.092976][T19751] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 287.104848][ T5825] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input24 [ 287.321522][T19751] bond3: entered promiscuous mode [ 287.337350][ T5825] usb 12-1: USB disconnect, device number 10 [ 287.416549][T19786] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.424067][T19786] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.506994][ T42] audit: type=1400 audit(1784324156.858:29926): avc: denied { getopt } for pid=19802 comm="syz.3.5109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.563347][T19786] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.566767][T19786] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.664700][T19812] vlan3: entered allmulticast mode [ 287.666425][T19812] bridge15: entered allmulticast mode [ 287.698179][T19786] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.703997][T19786] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.797241][T19786] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.801132][T19786] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.915587][T11907] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.918872][T11907] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.941900][T11907] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.944482][T11907] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.974707][T11907] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.981038][T11907] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.006826][T11907] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.010350][T11907] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.200206][T19836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.205371][ T42] audit: type=1400 audit(1784324157.558:29927): avc: denied { read } for pid=19841 comm="syz.6.5123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 288.236968][T19844] validate_nla: 5 callbacks suppressed [ 288.236986][T19844] netlink: 'syz.6.5124': attribute type 8 has an invalid length. [ 288.272888][T19846] fuse: fd is not a fuse device [ 288.457117][T19857] netlink: 'syz.6.5128': attribute type 1 has an invalid length. [ 288.457435][T19858] netlink: 'syz.6.5128': attribute type 1 has an invalid length. [ 288.776495][T19877] binder: 19876:19877 ioctl c0306201 200000000640 returned -22 [ 288.898281][T19886] netlink: 'syz.7.5138': attribute type 8 has an invalid length. [ 288.994269][T19902] netlink: 'syz.6.5143': attribute type 8 has an invalid length. [ 289.096079][T19911] bond5: option xmit_hash_policy: invalid value (6) [ 289.103112][T19911] bond5 (unregistering): Released all slaves [ 289.165610][T19916] bond5: option xmit_hash_policy: invalid value (6) [ 289.184207][T19916] bond5 (unregistering): Released all slaves [ 289.223732][T19925] fuse: fd is not a fuse device [ 289.246406][T19915] bond5: option xmit_hash_policy: invalid value (6) [ 289.264434][T19915] bond5 (unregistering): Released all slaves [ 289.364528][T19927] netlink: 'syz.3.5150': attribute type 8 has an invalid length. [ 289.368804][T19927] __nla_validate_parse: 24 callbacks suppressed [ 289.368822][T19927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5150'. [ 289.479307][T19931] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 289.481620][T19931] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 289.853858][T19944] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5157'. [ 290.102141][T19969] netlink: 'syz.3.5165': attribute type 8 has an invalid length. [ 290.107106][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5165'. [ 290.202404][T19980] netlink: 'syz.3.5168': attribute type 5 has an invalid length. [ 290.223352][ T5550] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.224559][T19972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 290.231869][ T5550] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.432297][T19990] fuse: fd is not a fuse device [ 290.474496][T19992] bond5: entered promiscuous mode [ 290.911150][T20015] netlink: 'syz.5.5179': attribute type 8 has an invalid length. [ 290.914921][T20015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5179'. [ 291.067894][T20029] fuse: Unknown parameter 'grou00000000000000000000' [ 291.122475][T20033] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5186'. [ 291.157044][T20035] netlink: 'syz.3.5187': attribute type 16 has an invalid length. [ 291.160342][T20035] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5187'. [ 291.344266][T20049] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5192'. [ 291.379784][T20051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5193'. [ 291.567567][ T42] audit: type=1400 audit(1784324160.918:29928): avc: denied { getopt } for pid=20062 comm="syz.6.5199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 291.630620][T20069] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 291.636768][T20069] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 291.719341][T20077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5203'. [ 291.785958][T20084] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 292.221992][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5221'. [ 292.274339][T20132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.318196][T20134] fuse: fd is not a fuse device [ 292.971072][T20182] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.974232][T20182] xt_cgroup: path and classid specified [ 292.977333][T20182] x_tables: duplicate underflow at hook 3 [ 293.105734][ T42] audit: type=1400 audit(1784324162.458:29929): avc: denied { write } for pid=20195 comm="syz.3.5247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 293.116890][T20196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.188323][ T42] audit: type=1326 audit(1784324162.538:29930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20204 comm="syz.6.5251" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c2cf9de99 code=0x0 [ 294.079061][T20222] validate_nla: 5 callbacks suppressed [ 294.079079][T20222] netlink: 'syz.6.5258': attribute type 8 has an invalid length. [ 294.192125][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.281870][ T42] audit: type=1326 audit(1784324163.628:29931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20229 comm="syz.6.5261" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c2cf9de99 code=0x0 [ 294.352990][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.355441][T20119] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 294.903699][T20233] netlink: 'syz.3.5262': attribute type 8 has an invalid length. [ 294.906516][T20233] __nla_validate_parse: 3 callbacks suppressed [ 294.906531][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5262'. [ 295.156942][T20239] netlink: 666 bytes leftover after parsing attributes in process `syz.6.5264'. [ 295.172380][T20119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 295.178406][T20126] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 295.231481][T20247] netlink: 'syz.3.5268': attribute type 8 has an invalid length. [ 295.231919][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.235744][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5268'. [ 295.269518][T20250] fuse: Bad value for 'fd' [ 295.331644][T20260] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5273'. [ 295.515048][T20280] fuse: Bad value for 'fd' [ 295.601924][T20287] overlayfs: failed to clone upperpath [ 295.691718][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5286'. [ 295.694627][T20290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5286'. [ 295.931064][T20302] fuse: Bad value for 'fd' [ 295.964733][T20304] netlink: 'syz.6.5293': attribute type 8 has an invalid length. [ 295.967997][T20304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5293'. [ 296.431915][ T5741] Bluetooth: hci4: command 0x0419 tx timeout [ 296.553974][T20331] netlink: 'syz.3.5302': attribute type 8 has an invalid length. [ 296.557123][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5302'. [ 296.620314][ T42] audit: type=1400 audit(1784324165.968:29932): avc: denied { bind } for pid=20334 comm="syz.3.5304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 296.762474][T20344] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 296.775399][T20344] CIFS mount error: No usable UNC path provided in device string! [ 296.775399][T20344] [ 296.779852][T20344] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 296.984902][ T42] audit: type=1400 audit(1784324166.338:29933): avc: denied { ioctl } for pid=20347 comm="syz.3.5309" path="socket:[91268]" dev="sockfs" ino=91268 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 297.091047][T20358] netlink: 'syz.3.5314': attribute type 8 has an invalid length. [ 297.094587][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5314'. [ 297.228273][T20374] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5321'. [ 297.416576][T20398] netlink: 'syz.3.5332': attribute type 2 has an invalid length. [ 297.510825][T20410] netlink: 'syz.6.5336': attribute type 8 has an invalid length. [ 297.552857][T20277] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 297.562205][ T5741] Bluetooth: hci2: command 0x0c1a tx timeout [ 297.624888][ T42] audit: type=1326 audit(1784324166.978:29934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20422 comm="syz.3.5342" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3069d9de99 code=0x0 [ 297.691992][T20426] netlink: 'syz.6.5343': attribute type 4 has an invalid length. [ 297.979810][T20432] fuse: fd is not a fuse device [ 298.135134][T20441] netlink: 'syz.6.5347': attribute type 8 has an invalid length. [ 298.435265][T20461] overlayfs: failed to resolve './cgroup': -2 [ 298.438423][ T42] audit: type=1400 audit(1784324167.788:29935): avc: denied { ioctl } for pid=20460 comm="syz.6.5354" path="socket:[89452]" dev="sockfs" ino=89452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 298.469140][T20277] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.588283][T20472] can0: slcan on ttyS3. [ 298.693290][T20471] can0 (unregistered): slcan off ttyS3. [ 298.741999][ T5892] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 298.781499][ T42] audit: type=1400 audit(1784324168.128:29936): avc: denied { getopt } for pid=20485 comm="syz.5.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.871977][ T5892] usb 12-1: device descriptor read/64, error -71 [ 299.035362][T20512] xt_hashlimit: size too large, truncated to 1048576 [ 299.053915][ T56] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 299.112241][ T5892] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 299.203365][ T56] usb 10-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.208076][ T56] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 299.213417][ T56] usb 10-1: config 0 interface 0 has no altsetting 0 [ 299.217226][ T56] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 299.220278][ T56] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 299.223285][ T56] usb 10-1: Product: syz [ 299.225031][ T56] usb 10-1: Manufacturer: syz [ 299.227352][ T56] usb 10-1: SerialNumber: syz [ 299.239493][ T56] usb 10-1: config 0 descriptor?? [ 299.243370][ T5892] usb 12-1: device descriptor read/64, error -71 [ 299.250830][ T56] usb 10-1: selecting invalid altsetting 0 [ 299.352184][ T5892] usb usb12-port1: attempt power cycle [ 299.460443][T20490] bond0: (slave bond_slave_0): Releasing backup interface [ 299.463421][T20490] bond_slave_0: left promiscuous mode [ 299.470703][T20545] validate_nla: 2 callbacks suppressed [ 299.470714][T20545] netlink: 'syz.6.5383': attribute type 8 has an invalid length. [ 299.508334][T20546] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 299.513824][ T1354] usb 10-1: USB disconnect, device number 17 [ 299.519160][T20490] bond_slave_0: entered promiscuous mode [ 299.523091][T20490] bond_slave_0: entered allmulticast mode [ 299.642071][ T5741] Bluetooth: hci4: command 0x0419 tx timeout [ 299.690755][T20555] netlink: 'syz.6.5386': attribute type 8 has an invalid length. [ 299.692692][ T5892] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 299.712649][ T5892] usb 12-1: device descriptor read/8, error -71 [ 299.750737][T20558] bond6: entered promiscuous mode [ 299.754750][T20558] 8021q: adding VLAN 0 to HW filter on device bond6 [ 299.796071][ T42] audit: type=1400 audit(1784324169.148:29937): avc: denied { write } for pid=20562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.873458][T20571] fuse: fd is not a fuse device [ 299.878236][ T42] audit: type=1400 audit(1784324169.228:29938): avc: denied { write } for pid=20569 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.881952][ T1354] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 299.934818][T20574] SET target dimension over the limit! [ 299.939429][T20574] __nla_validate_parse: 13 callbacks suppressed [ 299.939441][T20574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5391'. [ 299.945457][T20574] l2tp_ppp: sess 2/0: no socket in recv [ 299.951892][ T5892] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 299.972388][ T5892] usb 12-1: device descriptor read/8, error -71 [ 300.029672][T20579] netlink: 'syz.6.5393': attribute type 8 has an invalid length. [ 300.033105][T20579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5393'. [ 300.042026][ T1354] usb 10-1: Using ep0 maxpacket: 16 [ 300.048434][ T1354] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 300.055421][ T1354] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.059652][ T1354] usb 10-1: Product: syz [ 300.061562][ T1354] usb 10-1: Manufacturer: syz [ 300.064474][ T1354] usb 10-1: SerialNumber: syz [ 300.069893][ T1354] usb 10-1: config 0 descriptor?? [ 300.084528][ T5892] usb usb12-port1: unable to enumerate USB device [ 300.106253][T20585] ksmbd: Unknown IPC event: 3, ignore. [ 300.247127][T20597] overlayfs: failed to clone upperpath [ 300.481985][ T1354] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 300.489151][ T1354] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.494493][ T1354] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 300.497923][ T1354] usb 10-1: media controller created [ 300.509496][ T1354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.682811][ T1354] zl10353_read_register: readreg error (reg=127, ret==0) [ 300.685087][ T1354] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 300.687571][ T1354] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 301.063519][T20546] ------------[ cut here ]------------ [ 301.065873][T20546] usb 10-1: BOGUS control dir, pipe 80001280 doesn't match bRequestType c0 [ 301.069596][T20546] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#3: syz.5.5365/20546 [ 301.074984][T20546] Modules linked in: [ 301.079749][T20546] CPU: 3 UID: 0 PID: 20546 Comm: syz.5.5365 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.084659][T20546] Tainted: [L]=SOFTLOCKUP [ 301.086965][T20546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.091132][T20546] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 301.093935][T20546] Code: 48 89 54 24 40 e8 23 d7 89 fa 4c 89 e7 e8 8b fc db fe 48 89 c6 48 8d 3d e1 99 af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 f4 d6 89 fa 89 ee bf ff 00 00 00 [ 301.102259][T20546] RSP: 0018:ffffc90005b07680 EFLAGS: 00010287 [ 301.104769][T20546] RAX: ffffffff8ca5e9a0 RBX: ffff88805b4e2500 RCX: 0000000080001280 [ 301.108041][T20546] RDX: ffff88802d2b2ca0 RSI: ffffffff8ca5e9a0 RDI: ffffffff912f9f70 [ 301.111281][T20546] RBP: ffff888045398058 R08: 00000000000000c0 R09: 0000000000000000 [ 301.114928][T20546] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880453980b0 [ 301.118240][T20546] R13: ffff8880432f1aa0 R14: ffff8880432f1aa6 R15: ffff8880432f1aa7 [ 301.121522][T20546] FS: 00007f9dcec046c0(0000) GS:ffff8880d60e7000(0000) knlGS:0000000000000000 [ 301.125728][T20546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.128504][T20546] CR2: 00007f6c2dd5da08 CR3: 0000000049ffd000 CR4: 0000000000352ef0 [ 301.132230][T20546] Call Trace: [ 301.133693][T20546] [ 301.134961][T20546] ? __init_swait_queue_head+0xca/0x150 [ 301.137330][T20546] usb_start_wait_urb+0x10e/0x580 [ 301.139416][T20546] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 301.141658][T20546] ? trace_kmalloc+0xeb/0x110 [ 301.144153][T20546] ? __asan_memset+0x23/0x50 [ 301.146058][T20546] usb_control_msg+0x328/0x4b0 [ 301.148052][T20546] ? __pfx_usb_control_msg+0x10/0x10 [ 301.150304][T20546] dtv5100_i2c_msg+0x1be/0x340 [ 301.152570][T20546] dtv5100_i2c_xfer+0x131/0x3d0 [ 301.154676][T20546] __i2c_transfer+0x5d9/0x1740 [ 301.156803][T20546] ? __pfx___i2c_transfer+0x10/0x10 [ 301.159199][T20546] i2c_smbus_xfer_emulated+0x235/0x1110 [ 301.161557][T20546] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 301.164177][T20546] ? __pfx_lock_unpin_lock+0x10/0x10 [ 301.166475][T20546] ? kasan_quarantine_put+0x104/0x240 [ 301.168727][T20546] __i2c_smbus_xfer+0x619/0x1100 [ 301.170843][T20546] ? mark_held_locks+0x40/0x70 [ 301.173052][T20546] ? lockdep_hardirqs_on+0x78/0x100 [ 301.175337][T20546] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 301.177640][T20546] ? rt_mutex_slowtrylock+0x93/0x100 [ 301.179927][T20546] i2c_smbus_xfer+0x185/0x3c0 [ 301.182109][T20546] i2cdev_ioctl_smbus+0x389/0xac0 [ 301.184287][T20546] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 301.186651][T20546] ? __might_fault+0xc5/0x140 [ 301.188697][T20546] ? __might_fault+0xc5/0x140 [ 301.190741][T20546] i2cdev_ioctl+0x3cf/0x830 [ 301.192765][T20546] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 301.194899][T20546] ? selinux_file_ioctl+0x13b/0x290 [ 301.197093][T20546] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 301.199224][T20546] __x64_sys_ioctl+0x18e/0x210 [ 301.201255][T20546] do_syscall_64+0x115/0x870 [ 301.203361][T20546] ? clear_bhb_loop+0x40/0x90 [ 301.205407][T20546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.207895][T20546] RIP: 0033:0x7f9dcdd9de99 [ 301.209754][T20546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.217846][T20546] RSP: 002b:00007f9dcec04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.221296][T20546] RAX: ffffffffffffffda RBX: 00007f9dce026090 RCX: 00007f9dcdd9de99 [ 301.224748][T20546] RDX: 0000200000000240 RSI: 0000000000000720 RDI: 0000000000000004 [ 301.228064][T20546] RBP: 00007f9dcde33eaf R08: 0000000000000000 R09: 0000000000000000 [ 301.231350][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.234779][T20546] R13: 00007f9dce026128 R14: 00007f9dce026090 R15: 00007ffc880aba98 [ 301.238080][T20546] [ 301.239419][T20546] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.242407][T20546] CPU: 3 UID: 0 PID: 20546 Comm: syz.5.5365 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.246673][T20546] Tainted: [L]=SOFTLOCKUP [ 301.248416][T20546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.252412][T20546] Call Trace: [ 301.253808][T20546] [ 301.255037][T20546] dump_stack_lvl+0x100/0x190 [ 301.256966][T20546] vpanic+0x552/0x970 [ 301.258567][T20546] ? __pfx_vpanic+0x10/0x10 [ 301.260394][T20546] panic+0xd1/0xe0 [ 301.261944][T20546] ? __pfx_panic+0x10/0x10 [ 301.263829][T20546] check_panic_on_warn.cold+0x19/0x34 [ 301.266005][T20546] ? usb_submit_urb+0x15ff/0x19b0 [ 301.267919][T20546] __warn.cold+0x191/0x318 [ 301.269712][T20546] __report_bug+0x30f/0x440 [ 301.271510][T20546] ? usb_submit_urb+0x15ff/0x19b0 [ 301.273593][T20546] ? __pfx___report_bug+0x10/0x10 [ 301.275636][T20546] ? lockdep_hardirqs_on+0x78/0x100 [ 301.277771][T20546] ? kasan_save_stack+0x3f/0x50 [ 301.279771][T20546] ? kasan_save_stack+0x30/0x50 [ 301.281766][T20546] report_bug_entry+0xe1/0x290 [ 301.283725][T20546] ? usb_submit_urb+0x160d/0x19b0 [ 301.285823][T20546] handle_bug+0x1cd/0x2a0 [ 301.287567][T20546] exc_invalid_op+0x17/0x50 [ 301.289376][T20546] asm_exc_invalid_op+0x1a/0x20 [ 301.291370][T20546] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 301.293637][T20546] Code: 48 89 54 24 40 e8 23 d7 89 fa 4c 89 e7 e8 8b fc db fe 48 89 c6 48 8d 3d e1 99 af 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 f4 d6 89 fa 89 ee bf ff 00 00 00 [ 301.301244][T20546] RSP: 0018:ffffc90005b07680 EFLAGS: 00010287 [ 301.303164][T20546] RAX: ffffffff8ca5e9a0 RBX: ffff88805b4e2500 RCX: 0000000080001280 [ 301.305634][T20546] RDX: ffff88802d2b2ca0 RSI: ffffffff8ca5e9a0 RDI: ffffffff912f9f70 [ 301.308345][T20546] RBP: ffff888045398058 R08: 00000000000000c0 R09: 0000000000000000 [ 301.311158][T20546] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880453980b0 [ 301.314298][T20546] R13: ffff8880432f1aa0 R14: ffff8880432f1aa6 R15: ffff8880432f1aa7 [ 301.317526][T20546] ? __init_swait_queue_head+0xca/0x150 [ 301.319767][T20546] usb_start_wait_urb+0x10e/0x580 [ 301.321815][T20546] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 301.324072][T20546] ? trace_kmalloc+0xeb/0x110 [ 301.326014][T20546] ? __asan_memset+0x23/0x50 [ 301.327910][T20546] usb_control_msg+0x328/0x4b0 [ 301.329888][T20546] ? __pfx_usb_control_msg+0x10/0x10 [ 301.332038][T20546] dtv5100_i2c_msg+0x1be/0x340 [ 301.334026][T20546] dtv5100_i2c_xfer+0x131/0x3d0 [ 301.336005][T20546] __i2c_transfer+0x5d9/0x1740 [ 301.337973][T20546] ? __pfx___i2c_transfer+0x10/0x10 [ 301.340084][T20546] i2c_smbus_xfer_emulated+0x235/0x1110 [ 301.342330][T20546] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 301.344721][T20546] ? __pfx_lock_unpin_lock+0x10/0x10 [ 301.346811][T20546] ? kasan_quarantine_put+0x104/0x240 [ 301.348955][T20546] __i2c_smbus_xfer+0x619/0x1100 [ 301.350959][T20546] ? mark_held_locks+0x40/0x70 [ 301.352892][T20546] ? lockdep_hardirqs_on+0x78/0x100 [ 301.355004][T20546] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 301.357172][T20546] ? rt_mutex_slowtrylock+0x93/0x100 [ 301.359292][T20546] i2c_smbus_xfer+0x185/0x3c0 [ 301.361209][T20546] i2cdev_ioctl_smbus+0x389/0xac0 [ 301.363276][T20546] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 301.365224][T20546] ? __might_fault+0xc5/0x140 [ 301.366707][T20546] ? __might_fault+0xc5/0x140 [ 301.368603][T20546] i2cdev_ioctl+0x3cf/0x830 [ 301.370415][T20546] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 301.372268][T20546] ? selinux_file_ioctl+0x13b/0x290 [ 301.374159][T20546] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 301.376108][T20546] __x64_sys_ioctl+0x18e/0x210 [ 301.377714][T20546] do_syscall_64+0x115/0x870 [ 301.379156][T20546] ? clear_bhb_loop+0x40/0x90 [ 301.380995][T20546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.383018][T20546] RIP: 0033:0x7f9dcdd9de99 [ 301.384360][T20546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.390865][T20546] RSP: 002b:00007f9dcec04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.393721][T20546] RAX: ffffffffffffffda RBX: 00007f9dce026090 RCX: 00007f9dcdd9de99 [ 301.396449][T20546] RDX: 0000200000000240 RSI: 0000000000000720 RDI: 0000000000000004 [ 301.399175][T20546] RBP: 00007f9dcde33eaf R08: 0000000000000000 R09: 0000000000000000 [ 301.402099][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.404716][T20546] R13: 00007f9dce026128 R14: 00007f9dce026090 R15: 00007ffc880aba98 [ 301.407825][T20546] [ 301.409926][T20546] Kernel Offset: disabled [ 301.411693][T20546] Rebooting in 86400 seconds..