last executing test programs: 3.048594346s ago: executing program 3 (id=177): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x14e00) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) (async) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x5, 0x400000) (async) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r3, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) ioctl$RTC_PIE_OFF(r3, 0x7006) (async) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x1, 0x3a, 0xa, 0x4, 0x0, 0x6, 0x6, 0x13c}) 3.044841956s ago: executing program 3 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4048aec9, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000140)) 2.890101742s ago: executing program 3 (id=181): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x14, 0x0, 0xffffffffffffff8f) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.839930183s ago: executing program 3 (id=182): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x39) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x2, 0x5, 0xfffff001, 0x0, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x200, 0x4, 0x5, 0x1, 0x1}) ioctl$VT_ACTIVATE(r0, 0x5606, 0x92) bind$rds(r0, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010100}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={0xffffffffffffffff, r0}, 0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x1) r2 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$TIOCCBRK(r2, 0x5428) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x88}, 0x1, 0x0, 0x0, 0x8800}, 0x8800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r0, 0x0, 0xc9, 0xd4, &(0x7f00000004c0)="40c79702c9da7dc3cb91d07c58f05bea91cb55e4992e5bc6776713758dbd42ff2865e3f1662ea7d591aa82826a3ada04cd421f908991af8faf02c0aedcc76b4c6fff5f85a77813904861f8368da1381fc67190881972fbc69f951bc617e0ffaffc1f063e023989be7fc15d873929b3f1654c374afcfabe7f18dc441a7ca6f174035b7fca1111420eb7e820c8a4a3e361ab465cd2e0f900f66092d4f827296bd42890ea58d08ef47873feffbaff149f312e8531d1cfdc52e7bd73340b7ea95e2403ada236ddd06aac94", &(0x7f00000005c0)=""/212, 0x8000, 0x0, 0xf0, 0x1000, &(0x7f00000006c0)="589c4baddc9528e7ce91af31f763f881c13b7d1bf5bd3339a39593fe55891c2dc21f3d0dfd552714bfcdfca6b5537a03d4fbb069a94785e52fc134e86ccdb71e359841a2ee700ae686a84fca4d3525d0c2ca9ddfdbbce9080f46ef725b9ef880776b47f882b9f20fa7690715d4a4cca5f797a4051d54d0ab87d3b69584c800063bbbdd889158ec7a99a828e5698efc963a357d75315fb6dd354b9cd7dac3db0d6bffebd4e45dca80c3c39d9c9eedce0207bda0faa1daf6222369095ed6df12d5eea17b0725e221e72fd2d5eb4eea16d35d16ae990dd822d94dd803ad83c8ac64adcce4d9f313f2067213dfda7457b400", &(0x7f00000007c0)="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", 0x7, 0x0, 0xf07}, 0x50) openat$comedi(0xffffffffffffff9c, &(0x7f0000001840)='/dev/comedi4\x00', 0x80000, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x78, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x44) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x44) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001c40)={0x0, 0x7}, &(0x7f0000001c80)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001cc0)={r7, @in6={{0xa, 0x4e21, 0x1, @local, 0x5}}, [0x3ff, 0x9, 0xe1a, 0x7ff, 0x6f8, 0x2, 0x1, 0x0, 0x8cf7, 0xe, 0x402, 0x65, 0x8001, 0x1, 0x6]}, &(0x7f0000001dc0)=0x100) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000001ec0)={0x48, 0x8, r2, 0x0, 0x2, 0x8a, &(0x7f0000001e00)="9f9345c83602ea1b020ccc203ba45353aa2a528a448816268ba9a2c787eea244e40c4c72a5623b0cdc4e0b67fb80f126d3435520b7984f2eb52456047e4c4ccac144215bfa619f83b26fb9ac55e12a11f0fd0cd5a65b4f72528bf6c8534464f391f41c9db2c9859e7c28c89301077aa548d006ec2d0b3fa49ef016b6a16e11c7592b5eac3e9f2dfeabef", 0x1}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000002080)={&(0x7f0000001f40), 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x70, r8, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x67}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "cdfa28d8436ee0d6f392052a26ddf07e"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x101}, @NL80211_ATTR_PMK={0x14, 0xfe, "ece22f22054408f403eb311cc2c76d3d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "9e276cf85a2d856eaeaf4f82011d2010"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="bde271a84ef5"}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x20000004) 2.839118241s ago: executing program 1 (id=184): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "87b8ffffffffffff", "880e8bd84efdaa8bc835c358bacb67b9", '\x00', "41c0f1c3cc72b9ca"}, 0x28) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000280)={0x1, 0x0, 0x200}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x4}]}]}, 0xb0}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2.779653278s ago: executing program 3 (id=185): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x1, 0x8, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) socket(0x15, 0x1, 0x315) (async) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000240)={'macsec0\x00'}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700)={0x6, 0x0, [{0xffff1000, 0x17, &(0x7f0000000280)=""/23}, {0xeeee0000, 0xf7, &(0x7f00000002c0)=""/247}, {0x3000, 0x76, &(0x7f00000003c0)=""/118}, {0xeeee0000, 0x4c, &(0x7f0000000440)=""/76}, {0x10000, 0xcc, &(0x7f00000004c0)=""/204}, {0x3000, 0x5, &(0x7f00000005c0)=""/5}]}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00%\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000020200001c0012800b00010062726964676500000c000280080003000d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.779300014s ago: executing program 3 (id=186): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x500, 0xfffffffc, 0x0, 0x0, [0x5]}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x30, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "0000980018bed3ca42e412102cf2c16b88da95860a1b4ffae387b3ecd85dffd888ba45d4"}}}}}}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x2d9, 0x0, 0x7}, {0x353, 0x0, 0x1}]}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xb6, 0x4) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x41595556, 0x7, 0x5, [{0x8000006, 0xd382}, {0xdc5, 0x7}, {0x0, 0x4}, {0x6, 0xfffd}, {0x1000, 0xd3}, {0x6, 0x6}, {0x1, 0x5}, {0xdfffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) syz_usb_disconnect(r5) readv(r6, &(0x7f0000001ec0)=[{&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000000d80)=""/4076, 0xfec}, {&(0x7f0000001d80)=""/58, 0x3a}, {&(0x7f0000001dc0)=""/245, 0xf5}], 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r8, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_rxfh={0x46, 0x10d4, 0x5, 0x8, 0xfa, "39c2e3", 0x8}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc2b81, 0x0) ioctl$KVM_GET_MSRS_sys(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x345, 0x0, 0x7}]}) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000600)={&(0x7f0000000280)="1398915d305316c9838f6177b4f4b7ec96800daad7b67904008e6ef4814011c148739b3c6abe0b8bd56a", &(0x7f00000002c0)=""/191, &(0x7f0000000380)="43c0dbace6fb8673ea73942a5f06b68babb901eb7e4bc06f837edb48310fda51343da4da3b8f86374fe876e0338c2db10762c838f628779bedb1d729873e43086c149d9e0fdf49", &(0x7f0000000500)="538edb1bac477f74def4363196be736f6247ee690660f6f476cf07a1f17ef1ffd169c7983b1148ae025babe1c6e4ef71f80437cd9cb222ba25316e887e44d5b728c12d63649c9dc1426ddc837eb1a844a2c5276661cdb75609ffc01ab3555f63f7a4ac7bde1f27e1ca6e21aadc4ff34a60b4bba15a640535c5b9d89c56365daac06fd04bca4dd72e9c75175c16373a1d50f4307d9bc4c7d1db63919a62a7e94ddbd51babf3ee43919959270f2e6f6947f0e98a1a04d9d72d87046a99754a927e297c563628782e490c0e73711bc1831888d5a317f17f788a2e5c59b01d394157a210", 0x3, 0xffffffffffffffff, 0x4}, 0x38) 1.958727889s ago: executing program 1 (id=192): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x0, 0x80000000, 0x4, 0xffffffffffffffc0, 0xde4e, 0x7ff, 0x90b4, 0x9, 0x27], 0x0, 0x2}) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1082, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000100000000000630148007a0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f0000000040)=0x2) 1.889688083s ago: executing program 1 (id=194): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r0, 0x0) syz_clone(0x0, 0x0, 0xfff0, 0x0, 0x0, 0x0) 1.839919056s ago: executing program 1 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000080)={0x4, 0x0, [{0x40000000, 0x2, 0x0, 0xfff, 0x9, 0xffffffff, 0x9}, {0x80000019, 0x8, 0x2, 0x3390, 0x3c, 0x6, 0x7}, {0x80000000, 0x3, 0x2, 0xffffccce, 0xe, 0x6, 0x80000000}, {0xb, 0xa, 0x3, 0x9, 0x100, 0x5}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x1d8}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="78060000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003900000008000300", @ANYRES32=r1, @ANYBLOB="10005a800c0000800400020004000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 1.837581094s ago: executing program 1 (id=198): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ppoll(&(0x7f0000000580)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x4d6, 0x7d, 0x0, {{0x500, 0x124, 0x2, 0x0, {}, 0x400c0000, 0x0, 0x0, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x39, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x4d6) 1.060064083s ago: executing program 2 (id=214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(0xffffffffffffffff, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast}, {@in=@private, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x8, {0x0, 0x0, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) 1.059076764s ago: executing program 2 (id=215): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x80, 0x20, 0x2, 0x8001, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x66, 0x0, 0x5, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x1d, @val=@tcx={@void, @value=r2}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=r4, @ANYBLOB="000000002c23076a5b18868d3134920008001b0000000000"], 0x30}}, 0x4004090) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0xaaaab4f, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000180)={0xdddd0000, 0xd000}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file3\x00', 0x4000, 0x73) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 940.239955ms ago: executing program 1 (id=216): syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000080)='B', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1e, 0x3, 0xb7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140), &(0x7f00000001c0), 0x0, 0xab, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xffffff73, 0x10, &(0x7f0000000240), &(0x7f0000001d40), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000001d80)=@newtclass={0x48, 0x28, 0x800, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x1, 0xc}, {0x7, 0xfff3}, {0x3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x3c, 0x5, {0x8, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0xa}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x2400c0d4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x800}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfce) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r5 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) r6 = gettid() shmctl$IPC_SET(r5, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee01, 0x94}, 0x20000002, 0x4, 0x0, 0xffffffffffffffff, r6, r6}) mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001c00)={'wg2\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000580)="d1edb9d4014f036cd97886873e452bbc4dfa83186e0ca91f56929d94b3165d31b3feada50fd60aef085ba5d452cd766edfc29060def9e807c5411a1df4a58eae16ba9ec89690acbc973e52fc54afd16be8b8e7998d4fd009f2f5d0ea28126c08de38fe1cade819fde9616c8db3ffc9921381d5557bb93047fa08aea2196859954fe7854961afaf53cc89830b174b08fc05cc0274b5081c2affafdc19a840fbd975acacc37b9a4a173bd2596bb9e44514c6a5dbdd2b8416693c836672a43ab8a9eef317ccd1f40b", 0xc7}, {&(0x7f0000000680)="42d76d68fd9a39231467ad0644fafc60ca6a0da3bcc51f2f75ea89e82ac4e53d56bf8953bd044592fc765fb32ff4758657a6b0f1a127242db71425374c98669fff320eb9d3854c108ff1065af5e79eef3f0247cbba753a833cc29d2d55a4a82c31deaebd44df4fc63f92f7a42cbd2c0fb316c522225e738ac03dcb1803be1841a1371565a35343fc0fa4faf6390605b0bbe2b62887f3a691e268409e012274cb5d8fcf9456b72147a717dd406ded579c10932a816b2b5569dcb8478361ffee766c2f5e43a0740c96f87f45e47433fa739ea01df0f51dabae8fbc029cfa9ce37344e75422cfab", 0xe6}, {&(0x7f0000001e80)="7d50f87d46bdb1077a9f6d95062d21017e3968d3f910a69ea31c8fcfe95c2bf820533f215e85973e37b83c69b39de3a3bfa7c091024e106c405cd04ddd8fcee3f9b445d4919f2d624918575aae9ee04f6fbaec8c4eeffc1dc1461d6cee9f3ef7df5eebab2f73841ff66ebf0c6656641a711a2fa3a6f09f785969f637327570607794b01d9ea43ccbf83fe0408c4454c54a878d23935cee4250be953cd6a1d2ea78c646a028fc7efebb2f2c2c7540fdd010f4fd62f6c818206d5f644269d5c76f0f6ceba2b9ce0ecb7e869a532bb3095cb80a413807a2982347c474b6c6d4fb7c6e", 0xe1}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="a54ca17ca1af9991e8325d122c4eaac60d74351bc4790fc4a05a5ff8c9baa2ce25dd4fdc778d4ffa06cd5f4634b2af090c51fd8558ca1d8ecef45ac7687bb097e37d6b9de0c4d62dbb21729e436e522f805fa6357ee9c29ae3bbdb2757446cebebef204e0f711c21065d784cc442818bd1b1050838ea", 0x76}, {&(0x7f00000018c0)="d91eb8157dddc13f278f90f86ced2272a158ba817e074788b1efe3d7202c5aeca3269d3d524c57a6c5b1aff75872dc1f905e01dd0795e9f4d09decb1f9e603145a52c9354ee3fa87d56a593f7ee1b38782a80f31ebebfa99701aa9d0d1e647c4cb2ba76983bed5e77449a36a6c7b79c84049336f460b828145b8b4a864aaffdb9d6ce9e1473842cd4908655ff38c36b3d661e32bbb38d1719cfcdb163abb6242d53ff93a1480a53afe5980669c7f52e8bfd92e1f908f4520331e64d114f4b6f4dceaf1f1fad21b20db38069657ccbf0c9bf6", 0xd2}, {&(0x7f00000019c0)="a5b2799e11926eee4a4879124d826bec86cb446ef16206b69c7fe8a90c102bc61dea70d311b8378a2ecc51f88f31a75b04b3cc4919cc9adf1f356036f3795a8122f84fd0f61755ee3e700c02534c1d9ae4fd3d3ffe998e65276aebca8f4d67e0b3a60ceff5e0de9bc15dc8e19f768c9ee21d57e3aeab919db1ad28de30519657e5aa52eefa1e0fb560320c138cd84b5cb522d9e18f6ddaca1867a610941dbf9c59a236de2f5a3840ccfc767578233e9863e198e991281e4b7da0b269857b73c3ab65581cb20da1690a4f485a66afa6012e9993bff8074b2896910c8b0729ef5549f376cfd6176fa83a0f00", 0xeb}, {&(0x7f0000001ac0)="44072f284d412c35503a653bb2ddf8627dace804072c7e42c40475d81e2da1466676624bff1a1ab3420780327bd6247ad015b3933f7989b6dc167b3dda47a1d5cacd9443c8c0af88458785359ab03fc3e457641104cace7196b76ded2abafd5bf40a190676bb6ed7db2c1bf9917fa096bb70ca655ce4747d8351ff0b25c6f2e691d4cc9e", 0x84}], 0x8, &(0x7f0000001e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xef}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @rand_addr=0x64010100}}}], 0x58}, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x13, r9, 0x829c7000) shmctl$SHM_LOCK(r5, 0xb) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000001d00)=0x1) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000080)=0x2, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)) 938.426107ms ago: executing program 2 (id=217): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2720, &(0x7f0000019580)=""/102392, &(0x7f0000000100)=0x18ff8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00000309bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="ffb02d0b0a000200aaaaaaaaaa15000008000e8004000200"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x840) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) (async) listen(r5, 0xfffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000f40)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002240)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) (async) close(r5) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x401}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, r3, {0xfcff}, {0x0, 0x7}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 859.704951ms ago: executing program 2 (id=218): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x3b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001fc0), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x82}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0xa01, 0x0, 0x0, {0x80, 0x9}}, 0x14}}, 0xc000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r5, 0x4b2f, 0x7f) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000040)={0xdb, 0x8, 0x6}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000240)={0x80008000, 0xc2cf, 0xffe00001, 0x1, 0x2, "00e4fdab790000fb00"}) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) syz_emit_ethernet(0x8a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000540600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 859.422716ms ago: executing program 2 (id=219): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@empty, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x0, 0x30, 0xff}, {0x100000000, 0x1, 0xfffffffffffffffe, 0x9d, 0x1, 0xa, 0x6, 0x810000000001}, {0x9, 0xfffffffffffffffd, 0x5, 0x9}, 0xfffffffd, 0x1, 0x1, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x210000, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x34fb, 0x0, 0x1, 0x1, 0x0, 0x2, 0xfff}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x4000000000000f0, 0xffe0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x62, @broadcast, 0x4e21, 0x3, 'ovf\x00', 0x10, 0xfffffff4, 0x4c}, 0x2c) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x68, r6, 0x502, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x9}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x295}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4bbc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x9, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff8}, 0x1c) 779.262118ms ago: executing program 2 (id=220): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x2, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x50, r6, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "591d3137a587"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]]}, 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x30}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRESDEC=r1], 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) r13 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000004700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r13, 0x405, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r14}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r15, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24000854}, 0x850) 350.111918ms ago: executing program 0 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000008c1bcd6272b1b21a270000000000019078ac1e0001ac1414aa050090780300000045000000000200000000eec8712d2f9100000000"], 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbebf7", 0xe) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x200200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040227bd7000ffdbdf250100000005000700030000000500040007000000050013000200000008001800ac1e01010c0010000200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0], 0x190) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="1dba049008a13dd48a47941e49d3d4a0336070e399c271ee8e1f40a84260e5014192b88cc8e03dbb0844ac9bd1a3e1a71ad34468f3b250ebae2fb37ed69001a91c8ba9598310b1b28b367ba066af993404ce21cc822c1105492ec86dcdc734cce7103a5a137c01578dd8e1c3c13f5995ab0af27507862dce076c433b43d9238f47c665c95684e7b8ac6206375185633d0352b56ae0e64bc2dafc0859792b7c60f87bbf0808e9", 0xa6) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) write$binfmt_misc(r4, &(0x7f0000000080)="1a", 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r6, 0x80ae}], 0x1, 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 257.603533ms ago: executing program 0 (id=226): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[], 0x500}) 257.247499ms ago: executing program 0 (id=227): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f0000000300)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee935d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a80", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 189.514409ms ago: executing program 0 (id=228): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="24005080110001004abee33908f8eef16f162471f400000005000200020000000400087c"], 0x40}}, 0x0) 188.84714ms ago: executing program 0 (id=229): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lstat(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0)) chown(&(0x7f0000002180)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x3bd98cae, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)={0x0, 0x1, 0x7f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYBLOB="01002dbd000000180001801400020064756d6d793039d83229588d590f0a8dde848214523dc05a8619d325f9966bff9b4342b2342c83629c38e4b068f8bd151188d2f95686e26259c0d4053cfa5ea6208f074e4bc07179a4fe8e47bc0dbe77dda262be850a56b8d816affcf952aaa1a6d560392e97176417fdbf80770c0eb3f1ea948a75b581295534247ca5365b576de8a3348bf5571f3831698d987f21da568e3e0b9700efca20e69230"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000002e0009002abd7000dfdbdf2d1e000068"], 0x18}, 0x1, 0x0, 0x0, 0x4042804}, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000002c0)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f00000000c0)={0x2, 0x0, {[0x1, 0x9, 0x200000000, 0x4, 0x21, 0x1, 0x37a403a9, 0xffffffff]}}) setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)=@known='system.sockprotoname\x00', &(0x7f0000000180)='*\x00', 0x2, 0x0) 0s ago: executing program 0 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, 0x0) chdir(&(0x7f0000000080)='./file0\x00') (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) (rerun: 32) umount2(&(0x7f00000002c0)='.\x00', 0xb) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc9}}}, 0x6) (async, rerun: 32) pipe(&(0x7f0000000000)) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x8010) (async) syz_io_uring_setup(0x113, &(0x7f00000001c0)={0x0, 0xfad2, 0x800, 0x2, 0x188}, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x4090}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:26999' (ED25519) to the list of known hosts. [ 47.762762][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 47.762779][ T40] audit: type=1400 audit(1781098237.320:141): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.775463][ T40] audit: type=1400 audit(1781098237.330:142): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.777627][ T5717] cgroup: Unknown subsys name 'net' [ 47.789917][ T40] audit: type=1400 audit(1781098237.340:143): avc: denied { unmount } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.955886][ T5717] cgroup: Unknown subsys name 'cpuset' [ 47.961906][ T5717] cgroup: Unknown subsys name 'rlimit' [ 48.118904][ T40] audit: type=1400 audit(1781098237.670:144): avc: denied { setattr } for pid=5717 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.125906][ T40] audit: type=1400 audit(1781098237.670:145): avc: denied { create } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.132109][ T40] audit: type=1400 audit(1781098237.670:146): avc: denied { write } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.138245][ T40] audit: type=1400 audit(1781098237.670:147): avc: denied { read } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.144426][ T40] audit: type=1400 audit(1781098237.690:148): avc: denied { mounton } for pid=5717 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.151898][ T40] audit: type=1400 audit(1781098237.690:149): avc: denied { mount } for pid=5717 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.159044][ T40] audit: type=1400 audit(1781098237.700:150): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.196561][ T5726] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.948459][ T5717] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.835149][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 52.835160][ T40] audit: type=1400 audit(1781098242.390:160): avc: denied { create } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.845005][ T40] audit: type=1400 audit(1781098242.390:159): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.850976][ T40] audit: type=1400 audit(1781098242.390:161): avc: denied { read write } for pid=5738 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.858038][ T40] audit: type=1400 audit(1781098242.390:163): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.865180][ T40] audit: type=1400 audit(1781098242.390:162): avc: denied { read write } for pid=5739 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.872150][ T40] audit: type=1400 audit(1781098242.390:164): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.874373][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.876052][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.877440][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.878953][ T5750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.879067][ T40] audit: type=1400 audit(1781098242.390:165): avc: denied { open } for pid=5739 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.879093][ T40] audit: type=1400 audit(1781098242.390:166): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 52.880377][ T5752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.880940][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.881824][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.883023][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.883346][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.883910][ T40] audit: type=1400 audit(1781098242.400:167): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[7215]" dev="sockfs" ino=7215 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.887228][ T5753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.889089][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.889623][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.890517][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.897996][ T40] audit: type=1400 audit(1781098242.450:168): avc: denied { read } for pid=5747 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.898189][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.900282][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.900963][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.902032][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.902251][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.902898][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.915133][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.396258][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.399541][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.402646][ T5747] bridge_slave_0: entered allmulticast mode [ 53.405545][ T5747] bridge_slave_0: entered promiscuous mode [ 53.409827][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.412688][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.415228][ T5747] bridge_slave_1: entered allmulticast mode [ 53.417983][ T5747] bridge_slave_1: entered promiscuous mode [ 53.462946][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.465091][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.467179][ T5739] bridge_slave_0: entered allmulticast mode [ 53.469579][ T5739] bridge_slave_0: entered promiscuous mode [ 53.488807][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.491109][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.493511][ T5739] bridge_slave_1: entered allmulticast mode [ 53.496211][ T5739] bridge_slave_1: entered promiscuous mode [ 53.504251][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.506636][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.508842][ T5738] bridge_slave_0: entered allmulticast mode [ 53.511496][ T5738] bridge_slave_0: entered promiscuous mode [ 53.515772][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.520000][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.534341][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.537056][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.539294][ T5738] bridge_slave_1: entered allmulticast mode [ 53.542075][ T5738] bridge_slave_1: entered promiscuous mode [ 53.567248][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.571113][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.581481][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.583881][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.585945][ T5737] bridge_slave_0: entered allmulticast mode [ 53.588419][ T5737] bridge_slave_0: entered promiscuous mode [ 53.592793][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.596895][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.606155][ T5747] team0: Port device team_slave_0 added [ 53.607963][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.610189][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.612507][ T5737] bridge_slave_1: entered allmulticast mode [ 53.615598][ T5737] bridge_slave_1: entered promiscuous mode [ 53.635270][ T5747] team0: Port device team_slave_1 added [ 53.657705][ T5739] team0: Port device team_slave_0 added [ 53.663100][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.676685][ T5738] team0: Port device team_slave_0 added [ 53.679388][ T5739] team0: Port device team_slave_1 added [ 53.690831][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.694796][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.697578][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.708032][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.714101][ T5738] team0: Port device team_slave_1 added [ 53.727131][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.730076][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.740771][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.758899][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.761024][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.768510][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.773020][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.775061][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.782252][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.792831][ T5737] team0: Port device team_slave_0 added [ 53.802452][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.804565][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.812591][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.821805][ T5737] team0: Port device team_slave_1 added [ 53.830186][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.832575][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.840444][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.855702][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.858634][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.868930][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.886652][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.888775][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.896683][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.926924][ T5747] hsr_slave_0: entered promiscuous mode [ 53.929928][ T5747] hsr_slave_1: entered promiscuous mode [ 53.941034][ T5739] hsr_slave_0: entered promiscuous mode [ 53.943287][ T5739] hsr_slave_1: entered promiscuous mode [ 53.945388][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 53.947189][ T5739] Cannot create hsr debugfs directory [ 53.953194][ T5738] hsr_slave_0: entered promiscuous mode [ 53.955427][ T5738] hsr_slave_1: entered promiscuous mode [ 53.957421][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 53.959177][ T5738] Cannot create hsr debugfs directory [ 53.992361][ T5737] hsr_slave_0: entered promiscuous mode [ 53.994773][ T5737] hsr_slave_1: entered promiscuous mode [ 53.996959][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 53.998794][ T5737] Cannot create hsr debugfs directory [ 54.248143][ T5739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.256676][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.261755][ T5739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.265185][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.267878][ T5739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.272946][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.276274][ T5739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.281717][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.336823][ T5747] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.340985][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.343868][ T5747] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.348332][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.351555][ T5747] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.355140][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.358262][ T5747] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.362265][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.430502][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.434846][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.439617][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.444036][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.446517][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.451069][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.454383][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.458344][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.489201][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.529273][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.535289][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.538547][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.544004][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.547646][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.552656][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.556837][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.559406][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.563589][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.568166][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.570841][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.587554][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.589810][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.594998][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.625819][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.630510][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.642240][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.644466][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.661504][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.664332][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.672716][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.688453][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.691418][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.707016][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.709424][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.760034][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.779416][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.788434][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.790735][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.807594][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.809791][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.933037][ T62] Bluetooth: hci3: command tx timeout [ 54.933044][ T5748] Bluetooth: hci0: command tx timeout [ 54.935726][ T62] Bluetooth: hci2: command tx timeout [ 54.938282][ T5751] Bluetooth: hci1: command tx timeout [ 54.973006][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.997724][ T5747] veth0_vlan: entered promiscuous mode [ 55.008222][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.014199][ T5747] veth1_vlan: entered promiscuous mode [ 55.040159][ T5747] veth0_macvtap: entered promiscuous mode [ 55.053934][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.063964][ T5747] veth1_macvtap: entered promiscuous mode [ 55.071667][ T5739] veth0_vlan: entered promiscuous mode [ 55.078153][ T5739] veth1_vlan: entered promiscuous mode [ 55.094210][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.103328][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.110722][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.129074][ T98] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.138914][ T98] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.143790][ T98] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.154683][ T98] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.174052][ T5739] veth0_macvtap: entered promiscuous mode [ 55.182784][ T5737] veth0_vlan: entered promiscuous mode [ 55.188328][ T5739] veth1_macvtap: entered promiscuous mode [ 55.205403][ T5737] veth1_vlan: entered promiscuous mode [ 55.230514][ T5738] veth0_vlan: entered promiscuous mode [ 55.234282][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.249485][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.262204][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.264898][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.271915][ T98] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.275370][ T98] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.279214][ T5738] veth1_vlan: entered promiscuous mode [ 55.294675][ T98] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.298267][ T98] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.315773][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.318745][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.335158][ T5737] veth0_macvtap: entered promiscuous mode [ 55.355548][ T5737] veth1_macvtap: entered promiscuous mode [ 55.369527][ T5738] veth0_macvtap: entered promiscuous mode [ 55.386175][ T5747] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.388954][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.400275][ T5738] veth1_macvtap: entered promiscuous mode [ 55.406645][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.407893][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.409356][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.451096][ T71] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.454838][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.459713][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.464279][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.465684][ T71] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.470948][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.476416][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.483863][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.496879][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.499929][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.506870][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.513569][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.540643][ T5891] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5'. [ 55.562103][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.564936][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.593109][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 55.607994][ T5893] gtp0: entered allmulticast mode [ 55.624811][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.630445][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.646438][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.651772][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.689582][ T98] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.693939][ T98] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.737845][ T5904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9'. [ 55.881206][ T5913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1'. [ 55.940302][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 55.959163][ T5917] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5917 comm=syz.1.2 [ 56.135329][ T5844] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.315836][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.319993][ T5844] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.323389][ T5844] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.329433][ T5844] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.333903][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.405261][ T5844] usb 8-1: config 0 descriptor?? [ 56.550602][ T5944] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET) [ 56.681704][ T5939] Zero length message leads to an empty skb [ 56.983207][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 56.998393][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 57.011844][ T5751] Bluetooth: hci1: command tx timeout [ 57.014012][ T5753] Bluetooth: hci2: command tx timeout [ 57.014089][ T5748] Bluetooth: hci0: command tx timeout [ 57.015670][ T5753] Bluetooth: hci3: command tx timeout [ 57.023047][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 57.045163][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 57.058948][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 57.064978][ T5955] ceph: No mds server is up or the cluster is laggy [ 57.081684][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 57.097111][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 57.103218][ T50] libceph: connect (1)[c::]:6789 error -101 [ 57.107069][ T5957] SELinux: ebitmap: truncated map [ 57.117677][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 57.128900][ T5957] SELinux: failed to load policy [ 57.137693][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 57.142604][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 57.158922][ T5844] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 57.446911][ T5844] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 57.453996][ T5983] Bluetooth: MGMT ver 1.23 [ 57.589884][ T5985] syzkaller0: entered promiscuous mode [ 57.593078][ T5985] syzkaller0: entered allmulticast mode [ 57.865745][ T5844] usb 8-1: USB disconnect, device number 2 [ 58.426822][ T40] kauditd_printk_skb: 81 callbacks suppressed [ 58.426840][ T40] audit: type=1400 audit(1781098247.980:250): avc: denied { read } for pid=6000 comm="syz.3.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.427036][ T6001] overlayfs: missing 'lowerdir' [ 58.476498][ T6001] binfmt_misc: register: failed to install interpreter file ./file0 [ 58.486807][ T6001] overlayfs: overlapping lowerdir path [ 58.540443][ T40] audit: type=1400 audit(1781098248.090:251): avc: denied { read } for pid=6005 comm="syz.3.33" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.548672][ T40] audit: type=1400 audit(1781098248.090:252): avc: denied { open } for pid=6005 comm="syz.3.33" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.556763][ T40] audit: type=1400 audit(1781098248.090:253): avc: denied { ioctl } for pid=6005 comm="syz.3.33" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.604668][ T40] audit: type=1400 audit(1781098248.160:254): avc: denied { lock } for pid=6005 comm="syz.3.33" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 58.674968][ T40] audit: type=1400 audit(1781098248.230:255): avc: denied { prog_run } for pid=6009 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 58.733620][ T40] audit: type=1400 audit(1781098248.290:256): avc: denied { ioctl } for pid=6020 comm="syz.0.37" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=10158 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.746230][ T6024] binder: 6022:6024 ioctl c018620c 200000000040 returned -22 [ 58.752607][ T6021] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 58.762244][ T40] audit: type=1400 audit(1781098248.290:257): avc: denied { read } for pid=6022 comm="syz.3.39" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.774350][ T40] audit: type=1400 audit(1781098248.290:258): avc: denied { open } for pid=6022 comm="syz.3.39" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.787042][ T40] audit: type=1400 audit(1781098248.290:259): avc: denied { map } for pid=6023 comm="syz.2.38" path="/dev/comedi4" dev="devtmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.807635][ T6028] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.41'. [ 58.878019][ T6039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=6039 comm=syz.1.44 [ 58.950483][ T6049] ªªªªªª: renamed from vlan0 (while UP) [ 58.959491][ T6047] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 58.998763][ T6053] netlink: 72 bytes leftover after parsing attributes in process `syz.1.49'. [ 59.091636][ T5748] Bluetooth: hci0: command tx timeout [ 59.091689][ T5753] Bluetooth: hci1: command tx timeout [ 59.091958][ T62] Bluetooth: hci2: command tx timeout [ 59.101720][ T5753] Bluetooth: hci3: command tx timeout [ 59.947466][ T6085] netlink: 64 bytes leftover after parsing attributes in process `syz.0.55'. [ 59.972748][ T6089] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 60.057535][ T6102] netlink: 'syz.2.59': attribute type 1 has an invalid length. [ 60.068115][ T6097] netlink: 'syz.0.58': attribute type 5 has an invalid length. [ 60.084377][ T6102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.119652][ T6102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.131446][ T6102] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 60.139561][ T6102] bond1: (slave gre1): Error -95 calling set_mac_address [ 60.174471][ T6109] gretap1: entered promiscuous mode [ 60.180294][ T6109] bond1: (slave gretap1): making interface the new active one [ 60.184962][ T6109] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 60.193658][ T6109] macvlan2: entered promiscuous mode [ 60.195382][ T6109] macvlan2: entered allmulticast mode [ 60.197450][ T6109] bond1: entered promiscuous mode [ 60.201207][ T6109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 60.208178][ T6109] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 60.225111][ T6109] bond1: left promiscuous mode [ 60.289747][ T6118] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 60.530445][ T6131] fuse: Unknown parameter '0x0000000000000003' [ 60.581081][ T6137] capability: warning: `syz.2.69' uses deprecated v2 capabilities in a way that may be insecure [ 60.915759][ T6151] ata1.00: invalid multi_count 128 ignored [ 61.037027][ T6163] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 61.045049][ T6163] CIFS mount error: No usable UNC path provided in device string! [ 61.045049][ T6163] [ 61.046238][ T6164] input: syz1 as /devices/virtual/input/input6 [ 61.048256][ T6163] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 61.163974][ T6166] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.76'. [ 61.168423][ T6169] capability: warning: `syz.1.77' uses 32-bit capabilities (legacy support in use) [ 61.171717][ T5753] Bluetooth: hci2: command tx timeout [ 61.173560][ T5753] Bluetooth: hci0: command tx timeout [ 61.174122][ T5748] Bluetooth: hci3: command tx timeout [ 61.175275][ T5753] Bluetooth: hci1: command tx timeout [ 61.450913][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 61.454054][ T6188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 61.791960][ T6155] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.794211][ T6155] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 61.816218][ T6155] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.822223][ T6155] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 61.834548][ T6155] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.837098][ T6155] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 61.849738][ T6155] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.853394][ T6155] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 61.882296][ T5811] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.902813][ T6229] hpfs: Bad magic ... probably not HPFS [ 62.033304][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 62.040987][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 62.051359][ T5811] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 62.055825][ T5811] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.064261][ T5811] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.069340][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.071646][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'. [ 62.076789][ T5811] usb 6-1: config 0 descriptor?? [ 62.080023][ T6214] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 62.342604][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 62.409689][ T6265] support for cryptoloop has been removed. Use dm-crypt instead. [ 62.416118][ T6265] support for cryptoloop has been removed. Use dm-crypt instead. [ 62.490458][ T5811] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 62.509110][ T5811] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 62.549635][ T6272] random: crng reseeded on system resumption [ 62.557997][ T6272] Unrecognized hibernate image header format! [ 62.562340][ T6272] PM: hibernation: Image mismatch: architecture specific data [ 62.628654][ T6275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6275 comm=syz.0.100 [ 62.638503][ T6275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.100'. [ 62.662450][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.101'. [ 62.803985][ T6214] process 'syz.1.89' launched '/dev/fd/3' with NULL argv: empty string added [ 62.818818][ T5811] usb 6-1: USB disconnect, device number 2 [ 62.853080][ T5746] udevd[5746]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 62.988262][ T6299] autofs: Bad value for 'fd' [ 62.995921][ T6300] ======================================================= [ 62.995921][ T6300] WARNING: The mand mount option has been deprecated and [ 62.995921][ T6300] and is ignored by this kernel. Remove the mand [ 62.995921][ T6300] option from the mount to silence this warning. [ 62.995921][ T6300] ======================================================= [ 63.050131][ T6300] overlayfs: missing 'lowerdir' [ 63.154883][ T6315] NILFS (nbd3): device size too small [ 63.367438][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 63.473820][ T40] kauditd_printk_skb: 161 callbacks suppressed [ 63.473831][ T40] audit: type=1400 audit(1781098253.030:421): avc: denied { mount } for pid=6343 comm="syz.3.121" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 63.486114][ T6336] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 63.508486][ T40] audit: type=1400 audit(1781098253.060:422): avc: denied { mounton } for pid=6348 comm="syz.3.122" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 63.525554][ T6349] ufs: You didn't specify the type of your ufs filesystem [ 63.525554][ T6349] [ 63.525554][ T6349] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 63.525554][ T6349] [ 63.525554][ T6349] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 63.537725][ T6349] ufs: failed to set blocksize [ 63.564382][ T6352] openvswitch: netlink: Missing key (keys=40, expected=100) [ 63.565857][ T6353] openvswitch: netlink: Missing key (keys=40, expected=100) [ 63.567787][ T40] audit: type=1400 audit(1781098253.120:423): avc: denied { setopt } for pid=6351 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.575404][ T40] audit: type=1400 audit(1781098253.130:424): avc: denied { map_read map_write } for pid=6350 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.577876][ T6352] tmpfs: Bad value for 'mpol' [ 63.581380][ T40] audit: type=1400 audit(1781098253.130:425): avc: denied { create } for pid=6351 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.588844][ T40] audit: type=1400 audit(1781098253.140:426): avc: denied { write } for pid=6351 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.595287][ T40] audit: type=1400 audit(1781098253.140:427): avc: denied { prog_run } for pid=6351 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.608853][ T40] audit: type=1400 audit(1781098253.140:428): avc: denied { name_bind } for pid=6351 comm="syz.3.124" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.618226][ T40] audit: type=1400 audit(1781098253.140:429): avc: denied { write } for pid=6351 comm="syz.3.124" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.645483][ T40] audit: type=1400 audit(1781098253.200:430): avc: denied { write } for pid=6358 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.672928][ T1493] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.831354][ T1493] usb 6-1: Using ep0 maxpacket: 32 [ 63.834351][ T1493] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.837522][ T1493] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.842574][ T1493] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.845475][ T1493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.847936][ T1493] usb 6-1: Product: И [ 63.849203][ T1493] usb 6-1: SerialNumber: syz [ 64.002253][ T5823] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.152881][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.156784][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.160668][ T5823] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 64.165923][ T5823] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 64.169166][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.174583][ T5823] usb 5-1: config 0 descriptor?? [ 64.212001][ T6381] IPv6: sit1: Disabled Multicast RS [ 64.214099][ T6381] sit1: entered allmulticast mode [ 64.582191][ T5823] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 64.589201][ T5823] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 64.870084][ T5842] usb 5-1: USB disconnect, device number 2 [ 66.122982][ T3270] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.271369][ T3270] usb 8-1: Using ep0 maxpacket: 16 [ 66.279921][ T3270] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 66.282945][ T3270] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.286091][ T3270] usb 8-1: Product: syz [ 66.287570][ T3270] usb 8-1: Manufacturer: syz [ 66.289163][ T3270] usb 8-1: SerialNumber: syz [ 66.294397][ T3270] usb 8-1: config 0 descriptor?? [ 66.334127][ T5842] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 66.347657][ T6421] dummy0: entered allmulticast mode [ 66.386410][ T1493] usb 6-1: 0:37 : does not exist [ 66.388056][ T1493] usb 6-1: 0:170 : does not exist [ 66.413489][ T1493] usb 6-1: USB disconnect, device number 3 [ 66.439372][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.503115][ T5842] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 66.505873][ T5842] usb 7-1: config 1 has no interface number 0 [ 66.507741][ T5842] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 66.512568][ T5842] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 66.515812][ T5842] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.522215][ T5842] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 66.526493][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.531458][ T5842] usb 7-1: Product: syz [ 66.532765][ T5842] usb 7-1: Manufacturer: syz [ 66.534238][ T5842] usb 7-1: SerialNumber: syz [ 66.539127][ T6415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 66.554795][ T6433] overlayfs: failed lookup in lower (newroot/22, name='bus', err=-40): overlapping layers [ 66.698626][ T3270] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 66.706361][ T3270] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 66.709891][ T3270] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 66.713660][ T3270] usb 8-1: media controller created [ 66.721565][ T3270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 66.749950][ T6415] openvswitch: netlink: IP tunnel dst address not specified [ 66.954697][ T6415] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 67.160512][ T5842] usb 7-1: Incompatible driver and firmware versions [ 67.166567][ T5842] usb 7-1: USB disconnect, device number 2 [ 67.262359][ T3270] zl10353_read_register: readreg error (reg=127, ret==0) [ 67.262425][ T6413] dtv5100: wlen = 0, aborting. [ 67.264578][ T3270] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 67.269825][ T3270] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 67.274757][ T3270] usb 8-1: USB disconnect, device number 3 [ 67.305201][ T3270] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 67.352327][ T6438] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 67.463364][ T6455] tipc: MTU too low for tipc bearer [ 67.465918][ T6456] tipc: MTU too low for tipc bearer [ 67.468462][ T6455] netlink: 'syz.1.152': attribute type 62 has an invalid length. [ 67.468571][ T6456] netlink: 'syz.1.152': attribute type 62 has an invalid length. [ 67.618568][ T6467] cgroup: none used incorrectly [ 67.915485][ T6479] Bluetooth: MGMT ver 1.23 [ 67.961533][ T1493] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 67.967555][ T6481] team0 (unregistering): Port device team_slave_0 removed [ 67.972725][ T6481] team0 (unregistering): Port device team_slave_1 removed [ 68.088487][ T6484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.161'. [ 68.093384][ T6484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.161'. [ 68.097446][ T6484] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 68.131362][ T1493] usb 7-1: Using ep0 maxpacket: 8 [ 68.134363][ T1493] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.137801][ T1493] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.140656][ T1493] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.146020][ T1493] usb 7-1: config 0 descriptor?? [ 68.358550][ T1493] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 68.504696][ T6496] overlay: Unknown parameter 'appraise' [ 68.507944][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 68.507953][ T40] audit: type=1400 audit(1781098258.060:454): avc: denied { execute } for pid=6495 comm="syz.0.164" path="/53/file0/cpu.stat" dev="cgroup2" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 68.562648][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 68.621501][ T6507] fuse: Bad value for 'group_id' [ 68.625896][ T6507] fuse: Bad value for 'group_id' [ 68.818143][ T5811] usb 7-1: USB disconnect, device number 3 [ 68.859025][ T6520] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 68.862200][ T6520] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 68.865411][ T6520] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 68.878110][ T6522] netlink: 'syz.1.172': attribute type 7 has an invalid length. [ 68.897819][ T40] audit: type=1400 audit(1781098258.450:455): avc: denied { setopt } for pid=6526 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.057035][ T40] audit: type=1400 audit(1781098258.610:456): avc: denied { write } for pid=6533 comm="syz.3.176" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.066826][ T40] audit: type=1400 audit(1781098258.610:457): avc: denied { set_context_mgr } for pid=6533 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 69.077957][ T6536] binder: 6533:6536 ioctl c0106446 200000000380 returned -22 [ 69.084359][ T6536] hpfs: Bad magic ... probably not HPFS [ 69.184467][ T40] audit: type=1400 audit(1781098258.740:458): avc: denied { bind } for pid=6562 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.196429][ T6563] syzkaller0: entered promiscuous mode [ 69.198684][ T6563] syzkaller0: entered allmulticast mode [ 69.289106][ T40] audit: type=1400 audit(1781098258.840:459): avc: denied { append } for pid=6566 comm="syz.3.181" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.298288][ T6567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.306567][ T6567] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 69.358104][ T40] audit: type=1400 audit(1781098258.910:460): avc: denied { read } for pid=6568 comm="syz.3.182" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.366771][ T40] audit: type=1400 audit(1781098258.920:461): avc: denied { ioctl } for pid=6568 comm="syz.3.182" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x540b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 69.412167][ T40] audit: type=1400 audit(1781098258.970:462): avc: denied { create } for pid=6578 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 69.453425][ T6585] vim2m vim2m.0: vidioc_s_fmt queue busy [ 69.471086][ T6587] tipc: Started in network mode [ 69.472731][ T6587] tipc: Node identity ac1414aa, cluster identity 4711 [ 69.475357][ T6587] tipc: Enabled bearer , priority 10 [ 69.541009][ T6593] usb 2-1: USB disconnect, device number 2 [ 69.588679][ T40] audit: type=1400 audit(1781098259.140:463): avc: denied { watch watch_reads } for pid=6592 comm="syz.0.189" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.761444][ T5842] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.941365][ T5842] usb 8-1: Using ep0 maxpacket: 32 [ 69.945549][ T5842] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 69.948958][ T5842] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 69.953803][ T5842] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 69.958062][ T5842] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 69.963478][ T5842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 69.968257][ T5842] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 69.972067][ T5842] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 69.975484][ T5842] usb 8-1: Product: syz [ 69.977251][ T5842] usb 8-1: Manufacturer: syz [ 69.979196][ T5842] usb 8-1: SerialNumber: syz [ 69.984069][ T5842] usb 8-1: config 0 descriptor?? [ 69.991478][ T5842] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 69.998899][ T5842] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 70.198583][ T3270] usb 8-1: USB disconnect, device number 4 [ 70.198661][ C1] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 70.205551][ T3270] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 70.231896][ T6599] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.267589][ T6605] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 70.398832][ T6591] ldusb: No device or device unplugged -19 [ 70.416500][ T6626] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6626 comm=syz.2.199 [ 70.464697][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 70.468627][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 70.483461][ T24] tipc: Node number set to 2886997162 [ 70.599631][ T34] cfg80211: failed to load regulatory.db [ 70.722463][ T6642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.204'. [ 70.951226][ T6664] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 71.022785][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.181223][ T6678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.215'. [ 71.367438][ T6694] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20001 [ 71.481418][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.549296][ T6704] nft_compat: unsupported protocol 0 [ 71.552709][ T6704] nft_compat: unsupported protocol 0 [ 71.631495][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 71.636135][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 71.638719][ T34] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 71.642227][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 71.645837][ T34] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.649676][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.653374][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.657143][ T34] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 71.662005][ T3270] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 71.662198][ T34] usb 6-1: config 168 interface 0 has no altsetting 0 [ 71.668935][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 71.671971][ T34] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 71.675510][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 71.679053][ T34] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.683064][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.686473][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.689951][ T34] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 71.694073][ T34] usb 6-1: config 168 interface 0 has no altsetting 0 [ 71.696951][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 71.699278][ T34] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 71.702798][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 71.706239][ T34] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.709826][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.713280][ T34] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.716786][ T34] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 71.720823][ T34] usb 6-1: config 168 interface 0 has no altsetting 0 [ 71.725396][ T34] usb 6-1: string descriptor 0 read error: -22 [ 71.727365][ T34] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 71.730166][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.742656][ T34] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 71.823159][ T3270] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.827250][ T3270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 71.832091][ T3270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.836044][ T3270] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.840626][ T3270] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.844285][ T3270] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.848063][ T3270] usb 7-1: config 0 descriptor?? [ 71.850162][ T6699] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.950269][ T6721] program syz.0.227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.952820][ T6722] ipt_ECN: cannot use operation on non-tcp rule [ 72.018750][ T6727] program syz.0.229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.255328][ T3270] hid_parser_main: 28 callbacks suppressed [ 72.255342][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.261073][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.264670][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.267073][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.268006][ T6730] 9pnet: Tag 0 still in use [ 72.269340][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.270930][ T6730] ------------[ cut here ]------------ [ 72.273284][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.274892][ T6730] refcount_t: underflow; use-after-free. [ 72.274898][ T6730] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#3: syz.0.230/6730 [ 72.277222][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.277237][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.277249][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.277262][ T3270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 72.283720][ T3270] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.284521][ T6730] Modules linked in: [ 72.284537][ T6730] CPU: 3 UID: 0 PID: 6730 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(full) [ 72.284550][ T6730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.284558][ T6730] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 72.304475][ T6730] Code: 06 e8 f0 4e 0f fd 48 8d 3d d9 47 e8 0b 67 48 0f b9 3a e8 df 4e 0f fd 5b 5d c3 cc cc cc cc e8 d3 4e 0f fd 48 8d 3d cc 47 e8 0b <67> 48 0f b9 3a e8 c2 4e 0f fd 5b 5d e9 db 59 93 06 e8 b6 4e 0f fd [ 72.310332][ T6730] RSP: 0018:ffffc90004a67900 EFLAGS: 00010293 [ 72.312367][ T6730] RAX: 0000000000000000 RBX: ffff88805942c228 RCX: ffffffff84f9621b [ 72.314789][ T6730] RDX: ffff888023924a80 RSI: ffffffff84f962ad RDI: ffffffff90e1aa80 [ 72.317131][ T6730] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 72.319562][ T6730] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88805942c228 [ 72.322179][ T6730] R13: ffff888057999800 R14: ffffc90004a67990 R15: ffff88801d6c1000 [ 72.324583][ T6730] FS: 0000000000000000(0000) GS:ffff8880d6687000(0000) knlGS:0000000000000000 [ 72.327285][ T6730] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.329303][ T6730] CR2: 00007fc62018dfe0 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 72.331887][ T6730] Call Trace: [ 72.332930][ T6730] [ 72.333875][ T6730] p9_req_put+0x1ec/0x250 [ 72.335253][ T6730] p9_client_destroy.cold+0x20/0xe9 [ 72.336872][ T6730] ? ida_free+0x201/0x2f0 [ 72.338239][ T6730] ? __pfx_p9_client_destroy+0x10/0x10 [ 72.339935][ T6730] ? __pfx_ida_free+0x10/0x10 [ 72.341648][ T6730] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.343267][ T6730] v9fs_session_close+0x49/0x2d0 [ 72.344811][ T6730] v9fs_kill_super+0x4d/0xa0 [ 72.346254][ T6730] deactivate_locked_super+0xc1/0x1b0 [ 72.347907][ T6730] deactivate_super+0xe7/0x110 [ 72.349395][ T6730] cleanup_mnt+0x21f/0x450 [ 72.350824][ T6730] task_work_run+0x150/0x240 [ 72.352602][ T6730] ? __pfx_task_work_run+0x10/0x10 [ 72.354199][ T6730] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.355814][ T6730] do_exit+0x951/0x2af0 [ 72.357139][ T6730] ? __pfx_do_exit+0x10/0x10 [ 72.358600][ T6730] ? do_raw_spin_lock+0x128/0x260 [ 72.360177][ T6730] ? find_held_lock+0x2b/0x80 [ 72.362325][ T6730] ? get_signal+0x7e5/0x2210 [ 72.363775][ T6730] do_group_exit+0xd5/0x2a0 [ 72.365180][ T6730] get_signal+0x20ff/0x2210 [ 72.366602][ T6730] ? putname+0xb1/0x110 [ 72.367894][ T6730] ? __pfx_get_signal+0x10/0x10 [ 72.369399][ T6730] ? putname+0xb6/0x110 [ 72.370723][ T6730] arch_do_signal_or_restart+0x91/0x7e0 [ 72.372658][ T6730] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 72.374565][ T6730] ? __x64_sys_openat+0x12d/0x210 [ 72.376117][ T6730] ? rcu_is_watching+0x12/0xc0 [ 72.377602][ T6730] exit_to_user_mode_loop+0x98/0x670 [ 72.379262][ T6730] ? rcu_is_watching+0x12/0xc0 [ 72.380781][ T6730] do_syscall_64+0x666/0x870 [ 72.382463][ T6730] ? clear_bhb_loop+0x40/0x90 [ 72.383924][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.385749][ T6730] RIP: 0033:0x7f254c39ce59 [ 72.387129][ T6730] Code: Unable to access opcode bytes at 0x7f254c39ce2f. [ 72.389248][ T6730] RSP: 002b:00007f254d2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.392019][ T6730] RAX: fffffffffffffe00 RBX: 00007f254c616090 RCX: 00007f254c39ce59 [ 72.394438][ T6730] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c [ 72.396849][ T6730] RBP: 00007f254c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 72.399281][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.401948][ T6730] R13: 00007f254c616128 R14: 00007f254c616090 R15: 00007ffcd3ab77a8 [ 72.404375][ T6730] [ 72.405352][ T6730] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.407522][ T6730] CPU: 3 UID: 0 PID: 6730 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(full) [ 72.410307][ T6730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.413402][ T6730] Call Trace: [ 72.414456][ T6730] [ 72.415384][ T6730] dump_stack_lvl+0x100/0x190 [ 72.416843][ T6730] vpanic+0x552/0x970 [ 72.418099][ T6730] ? __pfx_vpanic+0x10/0x10 [ 72.419533][ T6730] panic+0xd1/0xe0 [ 72.420718][ T6730] ? __pfx_panic+0x10/0x10 [ 72.422127][ T6730] ? check_panic_on_warn+0x1f/0x90 [ 72.423714][ T6730] check_panic_on_warn.cold+0x19/0x34 [ 72.425369][ T6730] ? refcount_warn_saturate+0xf4/0x130 [ 72.427048][ T6730] __warn.cold+0x191/0x328 [ 72.428440][ T6730] __report_bug+0x296/0x3d0 [ 72.429901][ T6730] ? refcount_warn_saturate+0xf4/0x130 [ 72.431604][ T6730] ? __pfx___report_bug+0x10/0x10 [ 72.433157][ T6730] ? lock_acquire+0x101/0x370 [ 72.434626][ T6730] ? refcount_warn_saturate+0xed/0x130 [ 72.436302][ T6730] ? refcount_warn_saturate+0x5b/0x130 [ 72.437982][ T6730] ? irq_work_queue+0xce/0x100 [ 72.439479][ T6730] ? __wake_up_klogd+0xe2/0x140 [ 72.441008][ T6730] report_bug_entry+0xe1/0x290 [ 72.442504][ T6730] ? refcount_warn_saturate+0xf4/0x130 [ 72.444185][ T6730] handle_bug+0x1cd/0x2a0 [ 72.445548][ T6730] exc_invalid_op+0x17/0x50 [ 72.446988][ T6730] asm_exc_invalid_op+0x1a/0x20 [ 72.448501][ T6730] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 72.450382][ T6730] Code: 06 e8 f0 4e 0f fd 48 8d 3d d9 47 e8 0b 67 48 0f b9 3a e8 df 4e 0f fd 5b 5d c3 cc cc cc cc e8 d3 4e 0f fd 48 8d 3d cc 47 e8 0b <67> 48 0f b9 3a e8 c2 4e 0f fd 5b 5d e9 db 59 93 06 e8 b6 4e 0f fd [ 72.456247][ T6730] RSP: 0018:ffffc90004a67900 EFLAGS: 00010293 [ 72.458123][ T6730] RAX: 0000000000000000 RBX: ffff88805942c228 RCX: ffffffff84f9621b [ 72.460582][ T6730] RDX: ffff888023924a80 RSI: ffffffff84f962ad RDI: ffffffff90e1aa80 [ 72.463003][ T6730] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 72.465426][ T6730] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88805942c228 [ 72.467851][ T6730] R13: ffff888057999800 R14: ffffc90004a67990 R15: ffff88801d6c1000 [ 72.470284][ T6730] ? refcount_warn_saturate+0x5b/0x130 [ 72.471994][ T6730] ? refcount_warn_saturate+0xed/0x130 [ 72.473689][ T6730] p9_req_put+0x1ec/0x250 [ 72.475043][ T6730] p9_client_destroy.cold+0x20/0xe9 [ 72.476664][ T6730] ? ida_free+0x201/0x2f0 [ 72.478018][ T6730] ? __pfx_p9_client_destroy+0x10/0x10 [ 72.479714][ T6730] ? __pfx_ida_free+0x10/0x10 [ 72.481187][ T6730] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.482809][ T6730] v9fs_session_close+0x49/0x2d0 [ 72.484355][ T6730] v9fs_kill_super+0x4d/0xa0 [ 72.485807][ T6730] deactivate_locked_super+0xc1/0x1b0 [ 72.487469][ T6730] deactivate_super+0xe7/0x110 [ 72.488954][ T6730] cleanup_mnt+0x21f/0x450 [ 72.490388][ T6730] task_work_run+0x150/0x240 [ 72.491829][ T6730] ? __pfx_task_work_run+0x10/0x10 [ 72.493419][ T6730] ? do_raw_spin_unlock+0x145/0x1e0 [ 72.495041][ T6730] do_exit+0x951/0x2af0 [ 72.496342][ T6730] ? __pfx_do_exit+0x10/0x10 [ 72.497777][ T6730] ? do_raw_spin_lock+0x128/0x260 [ 72.499350][ T6730] ? find_held_lock+0x2b/0x80 [ 72.500828][ T6730] ? get_signal+0x7e5/0x2210 [ 72.502275][ T6730] do_group_exit+0xd5/0x2a0 [ 72.503686][ T6730] get_signal+0x20ff/0x2210 [ 72.505104][ T6730] ? putname+0xb1/0x110 [ 72.506410][ T6730] ? __pfx_get_signal+0x10/0x10 [ 72.507922][ T6730] ? putname+0xb6/0x110 [ 72.509232][ T6730] arch_do_signal_or_restart+0x91/0x7e0 [ 72.510997][ T6730] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 72.512901][ T6730] ? __x64_sys_openat+0x12d/0x210 [ 72.514489][ T6730] ? rcu_is_watching+0x12/0xc0 [ 72.515980][ T6730] exit_to_user_mode_loop+0x98/0x670 [ 72.517624][ T6730] ? rcu_is_watching+0x12/0xc0 [ 72.519122][ T6730] do_syscall_64+0x666/0x870 [ 72.520604][ T6730] ? clear_bhb_loop+0x40/0x90 [ 72.522074][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.523891][ T6730] RIP: 0033:0x7f254c39ce59 [ 72.525273][ T6730] Code: Unable to access opcode bytes at 0x7f254c39ce2f. [ 72.527402][ T6730] RSP: 002b:00007f254d2eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.529942][ T6730] RAX: fffffffffffffe00 RBX: 00007f254c616090 RCX: 00007f254c39ce59 [ 72.532386][ T6730] RDX: 000000000000275a RSI: 0000200000000240 RDI: ffffffffffffff9c [ 72.534842][ T6730] RBP: 00007f254c432d6f R08: 0000000000000000 R09: 0000000000000000 [ 72.537251][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.539676][ T6730] R13: 00007f254c616128 R14: 00007f254c616090 R15: 00007ffcd3ab77a8 [ 72.542124][ T6730] [ 72.543746][ T6730] Kernel Offset: disabled [ 72.545090][ T6730] Rebooting in 86400 seconds..