last executing test programs: 2m52.353700744s ago: executing program 1 (id=149): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, 0x1403, 0x2, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040034}, 0x800) 2m52.275820622s ago: executing program 1 (id=150): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)={0x2, {{0x2, 0x2, @multicast2}}, 0x1}, 0x90) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000600)=0xfffffff7, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000093893b87b8155c61f3ff000001"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x29) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="28010000", @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES32=r7, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x20008010}, 0xc0) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x4004010) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r3) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f0a}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1b, @remote, 0xf79a}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r13, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r13, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x1c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "140000000000000060000040"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0xfffffc00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 2m51.959930894s ago: executing program 1 (id=153): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m51.033242016s ago: executing program 1 (id=165): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) syz_emit_ethernet(0x22, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x2086408, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000000)="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", 0xfc) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2m50.913761578s ago: executing program 1 (id=168): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1, 0x80, 0x10000002, 0x27a}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xb, "0476bc4b4c9e3e260c"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0xe, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010401020000000000000000018000cf7db3a624256b16f0"], 0x1c}}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfeda, 0x10000, 0x0, 0x53}, &(0x7f0000000180), &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_setup(0x5331, &(0x7f00000002c0)={0x0, 0x42c9, 0x88008, 0x0, 0x32d, 0x0, r9}, &(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r10, r11, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x2e, 0x400, 0x23456, {0x0, r13}}) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r14, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, r13, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd73, 0x0, 0x0, 0x1000, 0x68ba, r14, 0x0, 0x152}}}, 0x0) 2m50.645895027s ago: executing program 1 (id=171): syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty, [@srh={0x2b}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r1], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8db2}, 0x61) 2m50.608263066s ago: executing program 32 (id=171): syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @empty, [@srh={0x2b}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r1], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8db2}, 0x61) 1m57.192076765s ago: executing program 4 (id=936): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x8020000000075, 0x94101) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) lsetxattr$security_selinux(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000040)='system_u:object_r:etc_mail_t:s0\x00', 0x20, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) 1m57.166348824s ago: executing program 4 (id=938): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000001100), 0x80200, 0x0) ioctl$BLKCLOSEZONE(r0, 0x40101287, &(0x7f0000001140)={0xc000000000000000, 0x9}) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffe, @empty, 0x4}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000f2, 0xec000000, 0xcd}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={r6, 0x0, r5}) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r7, &(0x7f00000000c0)='net/packet\x00') 1m56.114840791s ago: executing program 4 (id=947): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) 1m56.005090108s ago: executing program 4 (id=948): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_emit_ethernet(0x68, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7"}}}}}}}, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x48}], 0x1}, 0x448c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) write$UHID_INPUT(r0, &(0x7f0000000080)={0xc, {"a2e3ada14fc752f91b3d1a0987f70e06d038e7ff7fc6e5539b3272078b089b080f384b090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef3195201c0ffe8d178708c523c921b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38dfcd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac4850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778ef85ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba551eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7ccef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c54efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e4b15f929b47f741f0efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bb9935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf9f394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa37ef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffffffffffff00", 0x1000}}, 0x1006) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) syz_emit_ethernet(0x68, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7"}}}}}}}, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x48}], 0x1}, 0x448c0) (async) 1m55.930932357s ago: executing program 4 (id=951): setresuid(0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1m55.284265879s ago: executing program 4 (id=963): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x22, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @vbi={0x8, 0x8, 0x6, 0x35323645, [0x0, 0x2], [0x40, 0xfffffffd], 0x108}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa0100ff}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m55.189859509s ago: executing program 33 (id=963): r0 = syz_open_dev$vim2m(&(0x7f0000000500), 0x22, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x1, @vbi={0x8, 0x8, 0x6, 0x35323645, [0x0, 0x2], [0x40, 0xfffffffd], 0x108}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa0100ff}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000ffffff7f00000000feffffff8500fba2f130000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.592183541s ago: executing program 2 (id=2082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x880000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="4a8772"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.661400309s ago: executing program 2 (id=2088): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x10001, 0x2, 0xa, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r1}, 0x38) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010010418e01400004fcff", 0x58}], 0x1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c, 0x20}) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder1\x00') r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) getsockopt$inet6_buf(r5, 0x29, 0x1b, &(0x7f00000002c0)=""/103, &(0x7f0000000400)=0x67) 15.550996706s ago: executing program 2 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xb, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x4, 0x6, 0x4, 0x9, 0x1000, 0x8, 0x471, 0xffffff7f, 0x383, 0x8001, 0x4]}) sendmsg$nl_generic(r0, &(0x7f0000007800)={0x0, 0x0, &(0x7f00000077c0)={&(0x7f0000004580)=ANY=[@ANYBLOB="4c25000036007bc32dbd7000fddbdf2503"], 0x254c}}, 0x4000) 15.550746544s ago: executing program 2 (id=2091): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000180020032bbd7000fddbdf2580561006ff02ff070028000008000200ac1414aa0c0009000600000122be7c9f9548", @ANYRES32=0x0, @ANYBLOB="06001d004e240000"], 0x38}, 0x1, 0x0, 0x0, 0x20040840}, 0x8004) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 15.491384977s ago: executing program 2 (id=2092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd00031c00e6000003a60c6eec00be202829ff"], 0xfdef) 14.940557711s ago: executing program 2 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a247e240012801100e3006272696467655fb42ed1b565000000000c00058005001d0000000000140003006272696267655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 14.860554069s ago: executing program 34 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a247e240012801100e3006272696467655fb42ed1b565000000000c00058005001d0000000000140003006272696267655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 3.14893977s ago: executing program 0 (id=2225): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x200) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a0004e16000008009f0005000000080026000816"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x21, 0x20}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}]}}}]}, 0x38}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x5}}}}}}}}, 0x0) 3.041797056s ago: executing program 0 (id=2228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/255, 0xff}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000580)=""/103, 0x67}, {&(0x7f0000000600)=""/220, 0xdc}], 0x4, &(0x7f0000000740)=""/17, 0x11}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/10, 0xa}], 0x1, &(0x7f0000000800)=""/116, 0x74}, 0x6}, {{&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000900)=""/209, 0xd1}, {&(0x7f0000000a40)=""/135, 0x87}], 0x2, &(0x7f0000000b80)=""/4096, 0x1000}, 0x80000000}, {{&(0x7f0000001b80)=@qipcrtr, 0x80, &(0x7f0000003e40)=[{&(0x7f0000001c00)=""/144, 0x90}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/110, 0x6e}, {&(0x7f0000002d40)=""/193, 0xc1}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x5, &(0x7f0000003ec0)=""/112, 0x70}, 0x9}], 0x4, 0x40002000, &(0x7f0000004040)={0x77359400}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x3}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1a}]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x24000040) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) io_uring_setup(0x1b94, &(0x7f0000000000)) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc1105511, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000040c0), 0x9, 0x2380) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x13, 0x4, [{0x2, 0x101}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000004080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000fe62000200000008000300e812e8a88db58bdbb085e49adfb687a069770474c1695eed85d324d9", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) 2.323155698s ago: executing program 6 (id=2239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @broadcast, @broadcast}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x50, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x26, 0x3}}]}]}, 0x50}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9a22}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x24008881) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0xffff}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x62, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r9, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 2.200940555s ago: executing program 0 (id=2241): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x5, 0x27, 0x2006, 0xf1, 0x20008, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x4, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x9f, 0x6, 0x4, 0xee, 0x4, 0x8000]}) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) (async) r3 = socket$inet(0x2, 0xa, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=0x0}}) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="7199dab04c5b", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "43e2b052"}}}}}}, 0x0) 2.120990036s ago: executing program 0 (id=2242): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 2.120875063s ago: executing program 0 (id=2243): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond_slave_0\x00', @ifru_names='bond0\x00'}) 2.031441752s ago: executing program 0 (id=2244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) capset(0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a0753883c8"], 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/95) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x24, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.457974179s ago: executing program 3 (id=2248): r0 = socket(0x15, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000480)={0x48, 0xb, r3, 0x0, r2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xf, 0xb}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) 1.280708717s ago: executing program 3 (id=2251): prctl$PR_GET_FPEMU(0x9, &(0x7f0000000140)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x80}, 0x30, 0x0) landlock_restrict_self(r2, 0x0) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) open_by_handle_at(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000fe0000000b"], 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000001fbdbdf256400000008000300", @ANYRES32=r5], 0x38}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f00000041c0)=0xe, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x81800}) (async) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14012800", @ANYRES16=r7, @ANYBLOB="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"], 0x114}}, 0x810) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r7, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6a7cfc7eb99e41580fc908708b2d4f135b9d86ed8fdef78e7fd1a8"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "f85f9ac6f9d4a6aef7cf5476b9f8869af0c53e477fee5e4a34b3b7"}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.279961004s ago: executing program 3 (id=2252): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x6, 0xfffffffc, 0x7d, "db8f2d2b3b7596160c6981acf8805944823a7f"}) (async) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) (async) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0x5eaa) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x2c754362, 0xc, 0x9, 0x8, 0x9, "0100e401878000000000000000000000000023"}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) (async) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x1, 0x2, {0x3, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) (async) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'bridge0\x00', @ifru_ivalue}) 1.190637043s ago: executing program 3 (id=2253): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000800)={@dev={0xfe, 0x80, '\x00', 0x3a}, @private0, @loopback, 0x0, 0x6, 0x0, 0x100, 0x6, 0x102}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, &(0x7f0000000080), 0x80000000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x6a, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1}}}}) 981.496835ms ago: executing program 6 (id=2254): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) move_pages(0x0, 0x42, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x1c26, &(0x7f0000000240)={0x0, 0x400000, 0x13290}, &(0x7f0000000200), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r2, 0x1, 0x0, 0x1, 0x0, 0x1000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0xb, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12020000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000010000041c2bbd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="0000000001020000140003006970766c616e3000000000000000000008002c00000000e008002800065800000a000100aaaaaaaaaaaa00001400350070696d72656700"/76], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4001000) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x58, 0x28, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0x5}, {0x10, 0xfff2}, {0xb, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_prio={0x9}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x72) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094) 980.928245ms ago: executing program 3 (id=2255): r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r0, 0x40187013, &(0x7f00000000c0)) (async) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMREADAUDIO(r1, 0x530e, &(0x7f0000000080)={@msf={0x6, 0x9, 0x6}, 0x2, 0x0, 0x0}) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x8001, 0x9}, 0x0) (async) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)='\x00', 0x1, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x5, &(0x7f0000000040)=[{0x0, 0x10, 0x7, 0x4}, {0x0, 0x1, 0x1, 0x7f}, {0x7, 0x1e, 0xfb, 0x400}, {0x2, 0x0, 0x5, 0x40}, {0x200, 0x40, 0x9, 0x1}]}) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 891.565686ms ago: executing program 3 (id=2256): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) (async) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000580)={0xc, @sliced={0x0, [0x4, 0x3, 0xfeff, 0xc, 0x3, 0x3, 0x4, 0x4, 0xe, 0x482, 0x8, 0x4, 0x6, 0x3c4, 0x401, 0x6, 0x3, 0x1ff, 0x6, 0x7ff, 0xc, 0x401, 0x2, 0x8, 0x10, 0x88a8, 0x2, 0x101, 0xe, 0x333c, 0x6000, 0xdc, 0x4, 0x8, 0x6fa7, 0x5, 0x0, 0x6, 0x7ff, 0x3, 0x7, 0x0, 0xd, 0xc, 0x8, 0x9, 0x2, 0x1], 0x80000000}}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) r8 = socket(0x10, 0x3, 0x0) recvmmsg(r8, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) syz_clone(0x22023500, 0x0, 0xff4e, 0x0, 0x0, 0x0) 891.282698ms ago: executing program 6 (id=2257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x810) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x80204705, &(0x7f0000000080)={0x8, 0x8, 0x609152b0, 0x2, 0xe, "3eccd2000500"}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 671.571161ms ago: executing program 6 (id=2260): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) read(r0, &(0x7f00000007c0)=""/4096, 0x1000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="95173bf21a2f4e83e1e640892395d356", 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r1, &(0x7f00000001c0)='[\\!\x00', 0x2802, &(0x7f0000000240)={@align=0xf8be, {0xa, 0x8, 0x2, 0x800}}, 0x7158, &(0x7f0000000280), &(0x7f0000000300)=0x7}) fallocate(r2, 0x41, 0x400, 0x7) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="200001"], 0x38}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x18) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) mount$afs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0xa00804, &(0x7f0000000640)=ANY=[@ANYRES16=r3, @ANYRESDEC=r3, @ANYRESDEC=r3, @ANYBLOB="84d538f9aba6879333368dd686fb2912f5987669d8a828a27de1cced43ad6d640aba7320d59709813df0bd2d7a92c1b8e7024dff6db32cbcf40f405993cb5d385e3e52a4dfaca681c48dc4f5ed06f3a94a7cbd1cd371a4edf8daf24bd322f719b7e0673bd5110a145c5ea48f178e7590f0e750edced9680e8c76a0779f81", @ANYRES64=0x0, @ANYBLOB="edf619295f3e2bd4a655bc494d13a7c21eef19a326801f8209b0683e69673141209cf779a2f55b80e92854f59bbdbe20a632fd7427b38d08ed1a5552411146c326ad876bc09b5027c5b3e5b20497920d737bd6a582fce38cd55b731001a1b25a7c0e16083b3b460805987378bb2ed9c42d04104929ac92a7adeca36c658dd312222a11361847b1bb119df078b95cde159c453a89b6d18316a8"]) 643.74269ms ago: executing program 5 (id=2261): ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'vlan0\x00', {0x4}, 0x5}) r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040)=0x9, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6146e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549b0559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb09e3c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x78, 0x0, 0x20ea9511, {0x20000, 0xcbfb, 0x0, {0x6, 0x4000000000000, 0x48b, 0xa, 0x194, 0xd, 0xfff7ffff, 0x7fff, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x573003, 0x80) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r3 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x1, {0xe2, 0x0, 0x0, '\x00', {0x0, 0x62, 0x0, 0x9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {0x2}, {}, {}, 0x0, 0x0, 0x80001}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r5, r4, 0x80000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r6, 0x540b, 0x1) 643.548035ms ago: executing program 6 (id=2262): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r1, r2, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x100004, 0x1, {0x0, 0x0, 0x0, r5, {0x4, 0x13}, {0x4, 0x10}, {0xc, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4004811) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r10, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r9, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r11, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0x0, 0x3473, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) sendto(r0, &(0x7f00000004c0)="145142ffe1abadb290813071aed4a9e1785303bcd73a48ef6cac5be18da0c7f19423cb76133d283065e0c49f6118281f4c45a25601febd3854474674d31348e060d6f7edac37dba5bd01b05be1a03f8a0d62e1bce4300914bc567c738589cfd0adf9e62eb683a1a6699b5e2bfc7511e0cdeded9ae2ef918f802d5bcf227f1a7cb1470f3fd690e1df48d4f2524e69ba8eaafb76fa97eb5aa0c296027235c8b7b61fad2b0caf5773f020c83609dfe0f725369e45b11c513342051f349f76", 0xbd, 0x22000000, &(0x7f0000000580)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="5e34a6dd225d2d875c02e50e3e1e12634d88e4909ff165d47787eca3fd093ef11e601f5baa70080d7cd08435633962ff06d9332dfd37719f76e23e30e83a55cf4abbd982d1e194724f0a8d1ec5056568fc0590041e8cc3d7111f683d487e673027b1705c8c1781c3de23539aa2c9803cda7e377f88cc7ce285eddb9e383d1bb581746ea248da", @ANYRESHEX=r8, @ANYBLOB="2c616e616d653d9e01680acdf183336791ab5099f456ba50a939a84e092ef50b97c5c4f47ee2a65e5c1a2084c72ae3f259c6b8a0a4602607912f9d71b5c253efcf12962be8d0ffff1dc684cfcbab71ca4621332c00"]) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x4000000, 0xf, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}]}}) r12 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r12, &(0x7f0000000200)={0xa, 0x4e22, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) 518.947653ms ago: executing program 5 (id=2263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="c4c1d5592966ba2100b0b8eeb9310a00000f3266baf80cb814cab68eef66bafc0c66ed66baf80cb824577689ef66bafc0cb8e5000000ef66baf80cb83e088183ef66bafc0c66b87b0066ef8adb66f30f09643e0fc7b100000100b9800000c00f3235004000000f30", 0x68}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r6 = fanotify_init(0xf00, 0x2) fanotify_mark(r6, 0x105, 0x8971, r5, 0x0) pread64$ublk_ch(r5, &(0x7f0000000f40)=@buf_max_buf, 0x1000, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000f00), 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000580)={0x1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, @broadcast}]}) 350.765887ms ago: executing program 5 (id=2264): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x3) landlock_restrict_self(r1, 0xa) 236.883898ms ago: executing program 6 (id=2265): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="d421000000000000000700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r2, 0x0, 0xffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [], {0x14}}, 0x28}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@mcast1}, &(0x7f0000000200)=0x14) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x23, 0xfffffffe, 0x4, 0x1, 0xb322, r3, 0x7, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000100)=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r10, &(0x7f0000000040), 0x0}, 0x20) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1d4c40, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r13, 0x4048aecb, &(0x7f0000000080)) 82.039069ms ago: executing program 5 (id=2266): r0 = socket(0x10, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, @dev={0xfe, 0x80, '\x00', 0x31}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getchain={0x54, 0x66, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0x8}, {0x0, 0x8}, {0xd, 0x9}}, [{0x8, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xec28}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x6699}, {0x8, 0xb, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) socket(0x10, 0x2, 0x7) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, @dev={0xfe, 0x80, '\x00', 0x31}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getchain={0x54, 0x66, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0x8}, {0x0, 0x8}, {0xd, 0x9}}, [{0x8, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xec28}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x6699}, {0x8, 0xb, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) (async) 81.354079ms ago: executing program 5 (id=2267): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009405, &(0x7f0000000040)) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) sendmsg$inet6(r0, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000140)="85eb1012", 0x4}], 0x1}, 0x200000c0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) (async) ioctl$TUNSETLINK(r2, 0x400454cc, 0x325) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000140)={0x1, 0x28, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000600626f6e64000000000c00028005000e0000000000961a8c714c7fc38b557cf7ec3ef08d0972686c15f84363e1f23b0685930a1c362f840c4823a45e24d3143db3aaf1f8c081d109bff7e830cce33baa185d85aa2e846d5b8c338a0ef129dc2a0d17e265b8718886a28767555abcd739ac2a"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x8, 0x1}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4084}, 0x40080c0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) (async) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r10, 0x7002) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01f40300000000000000070000000ab5e7b4ff823ed908000301", @ANYRES32=r9, @ANYBLOB="0c0099000800000030004000"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES16=r8, @ANYRESDEC=0x0, @ANYRES8=r1, @ANYBLOB, @ANYRES16=r10, @ANYRES16=r7, @ANYRES32=r2, @ANYRESHEX=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x4095) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) (async, rerun: 64) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000004c0)) (rerun: 64) ioctl$CDROM_DEBUG(0xffffffffffffffff, 0x5330, 0x0) socket$alg(0x26, 0x5, 0x0) 0s ago: executing program 5 (id=2268): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000280)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="19002abd7000fcdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20040050) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r8, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) (async) timer_settime(r8, 0x0, &(0x7f0000000600)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000640)) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYRES64=r11, @ANYBLOB="62d167f6f48b83e7b12681834b117c3a6f47ebf51d2e2a3d3af8ccc8c82f62694fd5976c75901136000379736824388d85a014705861dcf176eaa69cb9dc5b2d718dfa", @ANYBLOB="040029bd7000ffdbdf25170000000c00060001000000010000000c000600030000000000000008000300", @ANYRESHEX=r1, @ANYBLOB="101302"], 0x40}, 0x1, 0x0, 0x0, 0x24000840}, 0x80) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="64020000", @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbdf250d00000008000300", @ANYRES32=r9, @ANYBLOB="0c000600020000000200000008000c000100000008000100030000000c000600030000000300000008000c0005000000080001000200000008000c000100000008000d0001000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000020}, 0x24008820) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000327bd7000fedbdf2d07000000080001000100000008000300", @ANYRES32=r9, @ANYBLOB="e0e12532afeea6669afc60e0edf12d9f86cd3eef3628ab054eceefc614a5001e5c1f0f89ee57307cbedb610e17551cbbfd9d82056c59055b29726ef42316d9a5ba8075978018a1bb7c9b4b08f2b789939b9a9fba0c1e44b027ed9477dffa71613c9f3f4639137d0c5090836e61fc38deee602d5cb32edddd2cb5d63427279675128bb85e801f97aad22e2aa8a10a72ccd07e3d138fc2c467814315e6d5ffc67dc48e94fd5ba762e8477c422114de43554c89cdd2757e8619d1932ef5c1ea99274cd2b37f"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="910728bd706a8d6600ffdbdf251300000008", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4020000) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x840) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x1e) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) (async) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r16, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (rerun: 64) kernel console output (not intermixed with test programs): bmit urb 0, error -2: endpoint not enabled [ 168.521424][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.525055][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.528322][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.531892][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.535980][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.539467][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.543837][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.547358][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.550774][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.554483][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.558041][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.561545][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.565102][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.568565][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.572478][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.575787][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.579006][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.582453][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.585603][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.588565][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.591501][T11729] usb 10-1: cannot submit urb 0, error -2: endpoint not enabled [ 168.592724][ T40] usb 10-1: USB disconnect, device number 9 [ 168.594095][T11729] usb 10-1: cannot submit urb 0, error -19: no device [ 168.702771][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.783701][ T5736] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 168.868819][T11733] binder: BINDER_SET_CONTEXT_MGR already set [ 168.872312][T11733] binder: 11732:11733 ioctl 4018620d 200000000100 returned -16 [ 169.390877][ T42] audit: type=1400 audit(2000000071.306:927): avc: denied { mount } for pid=11744 comm="syz.2.1716" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 169.406821][ T42] audit: type=1400 audit(2000000071.326:928): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 169.438850][T11750] loop5: detected capacity change from 0 to 2640 [ 169.502295][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.519951][T11752] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1718'. [ 169.706679][ T42] audit: type=1400 audit(2000000071.626:929): avc: denied { setattr } for pid=11754 comm="syz.0.1719" name="KEY" dev="sockfs" ino=55316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 169.746680][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.806071][T11761] IPVS: fo: FWM 3 0x00000003 - no destination available [ 170.033035][ T5884] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 170.193585][ T5884] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61 [ 170.197090][ T5884] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.200788][ T5884] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 170.204323][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 170.206879][ T5884] usb 5-1: Product: syz [ 170.208295][ T5884] usb 5-1: Manufacturer: syz [ 170.209787][ T5884] usb 5-1: SerialNumber: syz [ 170.215363][ T5884] usb 5-1: config 0 descriptor?? [ 170.217707][T11759] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 170.226269][ T5884] usb 5-1: selecting invalid altsetting 0 [ 170.426785][ T10] usb 5-1: USB disconnect, device number 22 [ 170.559910][T11790] netlink: 'syz.2.1731': attribute type 7 has an invalid length. [ 170.782578][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.896366][T11803] binder: 11802:11803 ioctl 4018620d 200000004a80 returned -22 [ 170.941975][ T5736] Bluetooth: hci2: command 0x0406 tx timeout [ 171.277764][T11822] erofs (device loop0): cannot find valid erofs superblock [ 171.280623][T11820] PM: Enabling pm_trace changes system date and time during resume. [ 171.280623][T11820] PM: Correct system time has to be restored manually after resume. [ 171.450284][T11825] syzkaller0: entered promiscuous mode [ 171.452136][T11825] syzkaller0: entered allmulticast mode [ 171.459323][T11826] fuse: Bad value for 'fd' [ 171.459352][T11825] fuse: Bad value for 'fd' [ 171.818390][T11834] binder: 11833:11834 ioctl c00c620f 200000000500 returned -22 [ 171.832377][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.853847][T11836] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 171.928677][T11838] netlink: 'syz.3.1749': attribute type 21 has an invalid length. [ 171.977123][T11841] 9pnet_virtio: no channels available for device syz [ 171.983063][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 171.986451][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1750'. [ 172.171405][T11851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.221532][T11853] FAULT_INJECTION: forcing a failure. [ 172.221532][T11853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.226280][T11853] CPU: 0 UID: 0 PID: 11853 Comm: syz.0.1754 Not tainted syzkaller #0 PREEMPT(full) [ 172.226296][T11853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 172.226303][T11853] Call Trace: [ 172.226307][T11853] [ 172.226311][T11853] dump_stack_lvl+0x100/0x190 [ 172.226530][T11853] should_fail_ex.cold+0x5/0xa [ 172.226567][T11853] _copy_from_iter+0x1f4/0x1690 [ 172.226640][T11853] ? _copy_from_iter+0x270/0x1690 [ 172.226653][T11853] ? __pfx__copy_from_iter+0x10/0x10 [ 172.226668][T11853] ? __pfx__copy_from_iter+0x10/0x10 [ 172.226681][T11853] ? _copy_from_iter+0x270/0x1690 [ 172.226696][T11853] copy_page_from_iter+0x238/0x300 [ 172.226712][T11853] skb_copy_datagram_from_iter+0x399/0x720 [ 172.226841][T11853] tun_get_user+0x1889/0x3c20 [ 172.226919][T11853] ? __pfx_tun_get_user+0x10/0x10 [ 172.226941][T11853] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.226961][T11853] ? find_held_lock+0x2b/0x80 [ 172.227049][T11853] ? tun_get+0x191/0x370 [ 172.227062][T11853] ? tun_get+0x191/0x370 [ 172.227080][T11853] tun_chr_write_iter+0xdc/0x200 [ 172.227097][T11853] vfs_write+0x6ac/0x1050 [ 172.227137][T11853] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 172.227155][T11853] ? __pfx_vfs_write+0x10/0x10 [ 172.227170][T11853] ? find_held_lock+0x2b/0x80 [ 172.227194][T11853] ksys_write+0x12a/0x250 [ 172.227210][T11853] ? __pfx_ksys_write+0x10/0x10 [ 172.227229][T11853] do_syscall_64+0x115/0x870 [ 172.227366][T11853] ? clear_bhb_loop+0x40/0x90 [ 172.227381][T11853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.227391][T11853] RIP: 0033:0x7f784e19de99 [ 172.227402][T11853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.227412][T11853] RSP: 002b:00007f784f076028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.227440][T11853] RAX: ffffffffffffffda RBX: 00007f784e425fa0 RCX: 00007f784e19de99 [ 172.227447][T11853] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 0000000000000006 [ 172.227453][T11853] RBP: 00007f784f076090 R08: 0000000000000000 R09: 0000000000000000 [ 172.227459][T11853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.227465][T11853] R13: 00007f784e426038 R14: 00007f784e425fa0 R15: 00007fff89e220b8 [ 172.227478][T11853] [ 172.435093][T11858] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1756'. [ 172.444661][T11858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.489571][T11860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.861974][ T40] net_ratelimit: 1 callbacks suppressed [ 172.861988][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.084441][T11868] xt_hashlimit: size too large, truncated to 1048576 [ 173.107530][ T42] audit: type=1400 audit(2000000075.026:930): avc: denied { write } for pid=11870 comm="syz.3.1761" name="mouse0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 173.164897][T11869] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 173.176936][T11869] bond5 (unregistering): Released all slaves [ 173.456600][T11890] binder: 11883:11890 ioctl c0306201 200000000640 returned -22 [ 173.780887][T11905] veth0_to_bridge: mtu less than device minimum [ 173.785098][T11905] netlink: 'syz.0.1771': attribute type 9 has an invalid length. [ 173.905651][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.985936][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 173.991168][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.994503][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.152039][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 174.158666][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.163826][ T10] usb 7-1: config 0 has no interface number 0 [ 174.165933][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.176370][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.183652][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.198840][ T10] usb 7-1: config 0 descriptor?? [ 174.209627][ T10] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 174.420730][ T10] usb 7-1: USB disconnect, device number 16 [ 174.953304][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.582401][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.982117][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.034560][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.171578][T11946] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 177.236278][T11955] netlink: 'syz.3.1783': attribute type 2 has an invalid length. [ 177.245933][T11955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11955 comm=syz.3.1783 [ 177.245945][T11956] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11956 comm=syz.3.1783 [ 177.268757][T11960] netlink: 'syz.3.1783': attribute type 4 has an invalid length. [ 177.282309][T11960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1783'. [ 177.284009][T11951] FAULT_INJECTION: forcing a failure. [ 177.284009][T11951] name failslab, interval 1, probability 0, space 0, times 0 [ 177.286368][T11956] netlink: 'syz.3.1783': attribute type 4 has an invalid length. [ 177.288530][T11891] syz.3.1766 (11891) used greatest stack depth: 19600 bytes left [ 177.290158][T11951] CPU: 3 UID: 0 PID: 11951 Comm: syz.2.1781 Not tainted syzkaller #0 PREEMPT(full) [ 177.290173][T11951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 177.290180][T11951] Call Trace: [ 177.290185][T11951] [ 177.290190][T11951] dump_stack_lvl+0x100/0x190 [ 177.290209][T11951] should_fail_ex.cold+0x5/0xa [ 177.290223][T11951] should_failslab+0xc2/0x120 [ 177.290269][T11951] kmem_cache_alloc_noprof+0x91/0x6a0 [ 177.290282][T11951] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 177.290300][T11951] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 177.290317][T11951] mmu_topup_memory_caches+0x25/0x170 [ 177.290334][T11951] kvm_mmu_load+0xd6/0x23e0 [ 177.290348][T11951] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 177.290360][T11951] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 177.290372][T11951] ? __pfx_kvm_mmu_load+0x10/0x10 [ 177.290386][T11951] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 177.290399][T11951] ? kvm_check_and_inject_events+0x961/0x1070 [ 177.290414][T11951] ? record_steal_time+0x370/0xbb0 [ 177.290426][T11951] vcpu_run+0x3a57/0x5d50 [ 177.290447][T11951] ? __pfx_vcpu_run+0x10/0x10 [ 177.290467][T11951] ? rcu_is_watching+0x12/0xc0 [ 177.290485][T11951] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 177.290500][T11951] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 177.290520][T11951] kvm_vcpu_ioctl+0x730/0x1700 [ 177.290548][T11951] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.290560][T11951] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 177.290575][T11951] ? do_vfs_ioctl+0x226/0x13e0 [ 177.290590][T11951] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 177.290604][T11951] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 177.290627][T11951] ? __fget_files+0x215/0x3d0 [ 177.290636][T11951] ? hook_file_ioctl_common+0x140/0x440 [ 177.290651][T11951] ? selinux_file_ioctl+0x13b/0x290 [ 177.290679][T11951] ? selinux_file_ioctl+0xb6/0x290 [ 177.290695][T11951] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.290707][T11951] __x64_sys_ioctl+0x18e/0x210 [ 177.290723][T11951] do_syscall_64+0x115/0x870 [ 177.290734][T11951] ? clear_bhb_loop+0x40/0x90 [ 177.290747][T11951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.290758][T11951] RIP: 0033:0x7f3360b9de99 [ 177.290768][T11951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.290778][T11951] RSP: 002b:00007f33619e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.290790][T11951] RAX: ffffffffffffffda RBX: 00007f3360e25fa0 RCX: 00007f3360b9de99 [ 177.290796][T11951] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 177.290803][T11951] RBP: 00007f33619e6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.290809][T11951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.290815][T11951] R13: 00007f3360e26038 R14: 00007f3360e25fa0 R15: 00007ffd59853828 [ 177.290830][T11951] [ 177.400905][T11956] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1783'. [ 177.501504][T11969] binder_alloc: 11968: pid 11968 spamming oneway? 1 buffers allocated for a total size of 4096 [ 177.506169][T11971] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 177.509088][T11971] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=63527 sclass=netlink_xfrm_socket pid=11971 comm=syz.2.1788 [ 177.527128][T11971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1788'. [ 177.573041][ T42] audit: type=1400 audit(2000000079.486:931): avc: denied { append } for pid=11968 comm="syz.3.1787" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 178.062712][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.622235][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.104333][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.107663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 179.112673][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.143182][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.182707][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.142527][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.222292][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.262637][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.583708][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.303229][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.182376][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.343187][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.382347][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.423899][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.223047][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.463249][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.345205][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.502730][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.542436][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.583237][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.382325][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.622209][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.679376][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 192.745925][T12003] FAULT_INJECTION: forcing a failure. [ 192.745925][T12003] name failslab, interval 1, probability 0, space 0, times 0 [ 192.749967][T12003] CPU: 0 UID: 0 PID: 12003 Comm: syz.5.1797 Not tainted syzkaller #0 PREEMPT(full) [ 192.749983][T12003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 192.749989][T12003] Call Trace: [ 192.749993][T12003] [ 192.749998][T12003] dump_stack_lvl+0x100/0x190 [ 192.750203][T12003] should_fail_ex.cold+0x5/0xa [ 192.750241][T12003] should_failslab+0xc2/0x120 [ 192.750321][T12003] kmem_cache_alloc_noprof+0x91/0x6a0 [ 192.750334][T12003] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 192.750353][T12003] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 192.750370][T12003] mmu_topup_memory_caches+0x25/0x170 [ 192.750387][T12003] kvm_mmu_load+0xd6/0x23e0 [ 192.750402][T12003] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 192.750413][T12003] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 192.750426][T12003] ? __pfx_kvm_mmu_load+0x10/0x10 [ 192.750440][T12003] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 192.750453][T12003] ? kvm_check_and_inject_events+0x961/0x1070 [ 192.750468][T12003] ? record_steal_time+0x370/0xbb0 [ 192.750480][T12003] vcpu_run+0x3a57/0x5d50 [ 192.750501][T12003] ? __pfx_vcpu_run+0x10/0x10 [ 192.750521][T12003] ? rcu_is_watching+0x12/0xc0 [ 192.750562][T12003] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 192.750577][T12003] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 192.750596][T12003] kvm_vcpu_ioctl+0x730/0x1700 [ 192.750609][T12003] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.750622][T12003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 192.750636][T12003] ? do_vfs_ioctl+0x226/0x13e0 [ 192.750652][T12003] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 192.750667][T12003] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 192.750752][T12003] ? __fget_files+0x215/0x3d0 [ 192.750762][T12003] ? hook_file_ioctl_common+0x140/0x440 [ 192.750777][T12003] ? selinux_file_ioctl+0x13b/0x290 [ 192.750791][T12003] ? selinux_file_ioctl+0xb6/0x290 [ 192.750807][T12003] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 192.750819][T12003] __x64_sys_ioctl+0x18e/0x210 [ 192.750834][T12003] do_syscall_64+0x115/0x870 [ 192.750974][T12003] ? clear_bhb_loop+0x40/0x90 [ 192.750988][T12003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.750999][T12003] RIP: 0033:0x7f1ec699de99 [ 192.751012][T12003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.751023][T12003] RSP: 002b:00007f1ec7948028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.751051][T12003] RAX: ffffffffffffffda RBX: 00007f1ec6c25fa0 RCX: 00007f1ec699de99 [ 192.751058][T12003] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 192.751064][T12003] RBP: 00007f1ec7948090 R08: 0000000000000000 R09: 0000000000000000 [ 192.751071][T12003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.751077][T12003] R13: 00007f1ec6c26038 R14: 00007f1ec6c25fa0 R15: 00007ffdb9aa45b8 [ 192.751091][T12003] [ 192.943264][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 192.947329][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1802'. [ 192.991684][T12041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12041 comm=syz.3.1805 [ 192.995657][T12045] openvswitch: netlink: Duplicate or invalid key (type 0). [ 192.998852][T12045] openvswitch: netlink: Actions may not be safe on all matching packets [ 193.000891][T12041] netlink: 'syz.3.1805': attribute type 1 has an invalid length. [ 193.002909][ T42] audit: type=1326 audit(2000000094.926:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.5.1806" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ec699de99 code=0x0 [ 193.033257][T12041] macvtap1: entered allmulticast mode [ 193.041578][T12040] macvtap2: entered allmulticast mode [ 193.050062][T12041] macvtap3: entered allmulticast mode [ 193.060851][T12040] bond4: (slave bridge10): making interface the new active one [ 193.064512][T12040] bond4: (slave bridge10): Enslaving as an active interface with an up link [ 193.122029][T12062] IPv6: Can't replace route, no match found [ 193.182132][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.251327][ T42] audit: type=1400 audit(2000000095.166:933): avc: denied { setattr } for pid=12079 comm="syz.0.1817" name="nbd0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.264128][ T42] audit: type=1400 audit(2000000095.176:934): avc: denied { create } for pid=12077 comm="syz.5.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 193.272004][ T42] audit: type=1400 audit(2000000095.176:935): avc: denied { bind } for pid=12077 comm="syz.5.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 193.290871][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1816'. [ 193.325624][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.391875][ T2325] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 193.554914][ T2325] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 193.557919][ T2325] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.560453][ T2325] usb 7-1: Product: syz [ 193.561831][ T2325] usb 7-1: Manufacturer: syz [ 193.563737][ T2325] usb 7-1: SerialNumber: syz [ 193.664496][ T40] net_ratelimit: 1 callbacks suppressed [ 193.664509][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.678125][T12101] xt_NFQUEUE: number of total queues is 0 [ 193.679391][ T42] audit: type=1400 audit(2000000095.596:936): avc: denied { setattr } for pid=12100 comm="syz.3.1822" name="video8" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 193.681715][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1822'. [ 193.749618][T12102] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 193.780051][ T2325] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 193.784015][ T2325] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 193.787347][ T2325] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 193.793793][ T2325] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 193.804393][ T2325] usb 7-1: USB disconnect, device number 17 [ 193.833046][T12106] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 194.087423][T12121] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1828'. [ 194.127903][ T42] audit: type=1326 audit(2000000096.046:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12127 comm="syz.0.1830" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f784e19de99 code=0x0 [ 194.330440][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1834'. [ 194.333687][T12137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.342573][T12137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.462825][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.473810][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.538308][T12149] block device autoloading is deprecated and will be removed. [ 194.703338][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.055885][T12159] gretap1: entered promiscuous mode [ 195.059945][T12159] netlink: 'syz.0.1840': attribute type 10 has an invalid length. [ 195.064785][T12159] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 195.287991][T12180] FAULT_INJECTION: forcing a failure. [ 195.287991][T12180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.301686][T12180] CPU: 1 UID: 0 PID: 12180 Comm: syz.0.1844 Not tainted syzkaller #0 PREEMPT(full) [ 195.301713][T12180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.301738][T12180] Call Trace: [ 195.301746][T12180] [ 195.301753][T12180] dump_stack_lvl+0x100/0x190 [ 195.301782][T12180] should_fail_ex.cold+0x5/0xa [ 195.301806][T12180] _copy_from_user+0x2e/0xd0 [ 195.301830][T12180] copy_msghdr_from_user+0x9f/0x4c0 [ 195.301999][T12180] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 195.302037][T12180] ___sys_sendmsg+0x106/0x1e0 [ 195.302066][T12180] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.302096][T12180] ? __lock_acquire+0x49f/0x1a40 [ 195.302119][T12180] ? get_pid_task+0x106/0x250 [ 195.302174][T12180] __sys_sendmsg+0x160/0x210 [ 195.302196][T12180] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.302230][T12180] do_syscall_64+0x115/0x870 [ 195.302248][T12180] ? clear_bhb_loop+0x40/0x90 [ 195.302270][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.302289][T12180] RIP: 0033:0x7f784e19de99 [ 195.302305][T12180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.302322][T12180] RSP: 002b:00007f784f076028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.302341][T12180] RAX: ffffffffffffffda RBX: 00007f784e425fa0 RCX: 00007f784e19de99 [ 195.302353][T12180] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 195.302364][T12180] RBP: 00007f784f076090 R08: 0000000000000000 R09: 0000000000000000 [ 195.302375][T12180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.302385][T12180] R13: 00007f784e426038 R14: 00007f784e425fa0 R15: 00007fff89e220b8 [ 195.302425][T12180] [ 195.376108][T12185] loop2: detected capacity change from 0 to 7 [ 195.381637][T12185] Dev loop2: unable to read RDB block 7 [ 195.383678][T12185] loop2: AHDI p1 p2 p3 [ 195.387125][T12185] loop2: partition table partially beyond EOD, truncated [ 195.391909][T12185] loop2: p1 start 1601398130 is beyond EOD, truncated [ 195.394373][T12185] loop2: p2 start 1702059890 is beyond EOD, truncated [ 195.422049][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.448393][ T42] audit: type=1400 audit(2000000097.366:938): avc: denied { mount } for pid=12191 comm="syz.2.1847" name="/" dev="configfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 195.457414][ T42] audit: type=1400 audit(2000000097.366:939): avc: denied { search } for pid=12191 comm="syz.2.1847" name="/" dev="configfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.466814][ T42] audit: type=1400 audit(2000000097.366:940): avc: denied { search } for pid=12191 comm="syz.2.1847" name="/" dev="configfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.474617][ T42] audit: type=1400 audit(2000000097.366:941): avc: denied { read } for pid=12191 comm="syz.2.1847" name="/" dev="configfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 195.501255][T12190] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 195.715954][T12215] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 195.729008][T12215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.745514][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.764815][T12215] bond5: (slave veth9): Enslaving as an active interface with a down link [ 195.788578][T12215] netlink: 'syz.2.1854': attribute type 10 has an invalid length. [ 195.791846][T12215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1854'. [ 196.131896][ T848] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 196.281839][ T848] usb 7-1: Using ep0 maxpacket: 8 [ 196.285994][ T848] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 196.289436][ T848] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 196.293438][ T848] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.297645][ T848] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.300469][ T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.307282][ T848] usbtmc 7-1:16.0: bulk endpoints not found [ 196.341386][T12227] netlink: 'syz.5.1858': attribute type 1 has an invalid length. [ 196.344011][T12227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1858'. [ 196.348209][T12227] loop5: detected capacity change from 0 to 7 [ 196.350856][T12227] Dev loop5: unable to read RDB block 7 [ 196.352760][T12227] loop5: unable to read partition table [ 196.354625][T12227] loop5: partition table beyond EOD, truncated [ 196.356634][T12227] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 196.360005][T12227] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1858'. [ 196.465043][T12231] binder: 12229:12231 ioctl c0306201 2000000003c0 returned -14 [ 196.542485][T12236] ip6tnl1: entered promiscuous mode [ 196.703674][T12245] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 196.792177][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.241967][T12244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.449603][T12269] xt_hashlimit: size too large, truncated to 1048576 [ 197.652490][T12279] netlink: 'syz.0.1871': attribute type 10 has an invalid length. [ 197.666102][T12279] team0: Port device dummy0 added [ 197.716420][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 197.743696][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.833310][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.052268][ T40] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 198.073424][T12285] kvm: kvm [12284]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 198.077764][T12285] kvm: kvm [12284]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 198.161993][T12285] kvm_intel: kvm [12284]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 198.179242][T12285] kvm: kvm [12284]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 198.182427][T12285] kvm: kvm [12284]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 198.214080][ T40] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 198.216902][ T40] usb 5-1: config 0 has no interface number 0 [ 198.218859][ T40] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.222898][ T40] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.226391][ T40] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.229518][ T40] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 198.232455][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.244820][ T40] usb 5-1: config 0 descriptor?? [ 198.251253][ T40] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.120/input/input40 [ 198.455779][T12283] __nla_validate_parse: 1 callbacks suppressed [ 198.455799][T12283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1873'. [ 198.461053][T12283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1873'. [ 198.470473][T12283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.474301][T12283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.495242][ T50] usb 5-1: USB disconnect, device number 23 [ 198.507175][T12305] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 198.603016][T12323] syzkaller1: entered promiscuous mode [ 198.604866][T12323] syzkaller1: entered allmulticast mode [ 198.706400][T12334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1887'. [ 198.776527][T12339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1889'. [ 198.843938][ T5886] usb 7-1: USB disconnect, device number 18 [ 198.870008][ T40] net_ratelimit: 7 callbacks suppressed [ 198.870025][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.929544][T12361] tmpfs: Bad value for 'mpol' [ 198.978879][T12366] netlink: 'syz.0.1895': attribute type 1 has an invalid length. [ 199.008705][T12366] syz.0.1895: attempt to access beyond end of device [ 199.008705][T12366] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 199.013427][T12366] gfs2: error -5 reading superblock [ 199.052607][T12369] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 199.060842][T12369] Invalid argument reading file caps for ./file0 [ 199.100173][T12376] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 199.106019][T12376] 9pnet_virtio: no channels available for device syz [ 199.229131][T12393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48426 sclass=netlink_route_socket pid=12393 comm=syz.3.1905 [ 199.246571][T12388] xfrm0 speed is unknown, defaulting to 1000 [ 199.339926][T12403] loop2: detected capacity change from 0 to 7 [ 199.344743][T12403] Dev loop2: unable to read RDB block 7 [ 199.346554][T12403] loop2: AHDI p1 p2 p3 [ 199.348095][T12403] loop2: partition table partially beyond EOD, truncated [ 199.351254][T12403] loop2: p1 start 1601398130 is beyond EOD, truncated [ 199.354070][T12403] loop2: p2 start 1702059890 is beyond EOD, truncated [ 199.481818][ T5886] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 199.653712][ T5886] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 199.658439][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.661386][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.665192][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.668297][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.671229][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.674730][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.677750][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.684538][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.687879][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.688601][T12410] fuse: Bad value for 'fd' [ 199.690663][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.694823][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.698294][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.702425][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.705510][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.709060][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.712652][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.715860][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.722288][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.728321][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.731267][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.734813][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.737932][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 199.740794][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 199.744516][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 199.748239][ T5886] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 199.751184][ T5886] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 199.754463][ T5886] usb 7-1: Product: syz [ 199.755847][ T5886] usb 7-1: Manufacturer: syz [ 199.757371][ T5886] usb 7-1: SerialNumber: syz [ 199.762993][ T5886] usb 7-1: config 0 descriptor?? [ 199.768008][ T5886] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 199.912410][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.082341][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 200.082573][ T5849] usb 7-1: USB disconnect, device number 19 [ 200.093605][T12418] yurex 7-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 200.098639][ T5849] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 200.377649][T12425] comedi comedi2: dt2817: I/O base address or length out of range [ 200.381618][T12425] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 200.734400][T12431] FAULT_INJECTION: forcing a failure. [ 200.734400][T12431] name failslab, interval 1, probability 0, space 0, times 0 [ 200.743631][T12431] CPU: 1 UID: 0 PID: 12431 Comm: syz.2.1917 Not tainted syzkaller #0 PREEMPT(full) [ 200.743657][T12431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 200.743666][T12431] Call Trace: [ 200.743672][T12431] [ 200.743679][T12431] dump_stack_lvl+0x100/0x190 [ 200.744091][T12431] should_fail_ex.cold+0x5/0xa [ 200.744156][T12431] should_failslab+0xc2/0x120 [ 200.744279][T12431] __kmalloc_cache_noprof+0x91/0x6c0 [ 200.744309][T12431] ? find_held_lock+0x2b/0x80 [ 200.744357][T12431] ? u32_init+0x3ec/0xbd0 [ 200.744523][T12431] u32_init+0x3ec/0xbd0 [ 200.744544][T12431] ? __pfx_u32_classify+0x10/0x10 [ 200.744563][T12431] tc_new_tfilter+0x105c/0x24a0 [ 200.744615][T12431] ? avc_has_perm_noaudit+0x100/0x3b0 [ 200.744686][T12431] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 200.744698][T12431] ? __pfx_tc_new_tfilter+0x10/0x10 [ 200.744728][T12431] ? find_held_lock+0x2b/0x80 [ 200.744743][T12431] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 200.744802][T12431] ? __pfx_tc_new_tfilter+0x10/0x10 [ 200.744818][T12431] rtnetlink_rcv_msg+0x95e/0xe90 [ 200.744832][T12431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.744849][T12431] ? ref_tracker_free+0x37e/0x6c0 [ 200.744867][T12431] netlink_rcv_skb+0x159/0x420 [ 200.744884][T12431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 200.744898][T12431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.744919][T12431] ? netlink_deliver_tap+0x1ae/0xcc0 [ 200.744937][T12431] netlink_unicast+0x585/0x850 [ 200.744955][T12431] ? __pfx_netlink_unicast+0x10/0x10 [ 200.744974][T12431] netlink_sendmsg+0x8b0/0xda0 [ 200.744993][T12431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.745010][T12431] ? selinux_socket_sendmsg+0x198/0x2f0 [ 200.745027][T12431] ____sys_sendmsg+0xa4d/0xbe0 [ 200.745061][T12431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.745078][T12431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.745099][T12431] ___sys_sendmsg+0x190/0x1e0 [ 200.745115][T12431] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.745130][T12431] ? __lock_acquire+0x49f/0x1a40 [ 200.745142][T12431] ? get_pid_task+0x106/0x250 [ 200.745174][T12431] __sys_sendmsg+0x160/0x210 [ 200.745216][T12431] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.745247][T12431] do_syscall_64+0x115/0x870 [ 200.745397][T12431] ? clear_bhb_loop+0x40/0x90 [ 200.745412][T12431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.745423][T12431] RIP: 0033:0x7f3360b9de99 [ 200.745433][T12431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.745443][T12431] RSP: 002b:00007f33619e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.745472][T12431] RAX: ffffffffffffffda RBX: 00007f3360e25fa0 RCX: 00007f3360b9de99 [ 200.745478][T12431] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 200.745485][T12431] RBP: 00007f33619e6090 R08: 0000000000000000 R09: 0000000000000000 [ 200.745492][T12431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.745498][T12431] R13: 00007f3360e26038 R14: 00007f3360e25fa0 R15: 00007ffd59853828 [ 200.745513][T12431] [ 200.943160][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.502120][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.705689][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 201.705741][ T42] audit: type=1400 audit(2000000103.626:950): avc: denied { connect } for pid=12439 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 201.736218][ T42] audit: type=1400 audit(2000000103.656:951): avc: denied { bind } for pid=12441 comm="syz.2.1921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.787173][T12449] loop5: detected capacity change from 0 to 2640 [ 201.797061][T12449] buffer_io_error: 652 callbacks suppressed [ 201.797073][T12449] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 201.802060][T12449] Buffer I/O error on dev loop5, logical block 1, lost async page write [ 201.805000][T12449] Buffer I/O error on dev loop5, logical block 2, lost async page write [ 201.807843][T12449] Buffer I/O error on dev loop5, logical block 3, lost async page write [ 201.810441][T12449] Buffer I/O error on dev loop5, logical block 4, lost async page write [ 201.813086][T12449] Buffer I/O error on dev loop5, logical block 5, lost async page write [ 201.815792][T12449] Buffer I/O error on dev loop5, logical block 6, lost async page write [ 201.818487][T12449] Buffer I/O error on dev loop5, logical block 7, lost async page write [ 201.821033][T12449] Buffer I/O error on dev loop5, logical block 8, lost async page write [ 201.824184][T12449] Buffer I/O error on dev loop5, logical block 9, lost async page write [ 201.982652][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.691040][T12410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.784058][T12456] loop2: detected capacity change from 0 to 7 [ 202.787420][T12456] Dev loop2: unable to read RDB block 7 [ 202.789285][T12456] loop2: AHDI p1 p2 p3 [ 202.790877][T12456] loop2: partition table partially beyond EOD, truncated [ 202.794053][T12456] loop2: p1 start 1601398130 is beyond EOD, truncated [ 202.796250][T12456] loop2: p2 start 1702059890 is beyond EOD, truncated [ 202.857913][T12453] geneve3: entered promiscuous mode [ 202.859643][T12453] geneve3: entered allmulticast mode [ 202.863392][T12453] batman_adv: batadv0: Adding interface: geneve3 [ 202.865465][T12453] batman_adv: batadv0: Interface activated: geneve3 [ 203.033800][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.104598][T12473] xt_CT: No such helper "pptp" [ 203.209959][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 203.266599][T12481] tipc: Enabled bearer , priority 0 [ 203.273907][T12481] loop4: detected capacity change from 0 to 7 [ 203.570123][T12481] Dev loop4: unable to read RDB block 7 [ 203.575619][T12481] loop4: unable to read partition table [ 203.579864][T12481] loop4: partition table beyond EOD, truncated [ 203.584522][T12481] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 203.605127][T12480] tipc: Disabling bearer [ 203.715883][ T42] audit: type=1400 audit(2000000105.636:952): avc: denied { shutdown } for pid=12502 comm="syz.2.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 203.724721][T12504] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 203.732221][T12503] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1939'. [ 203.788890][T12507] loop2: detected capacity change from 0 to 7 [ 203.795146][T12507] Dev loop2: unable to read RDB block 7 [ 203.797433][T12507] loop2: AHDI p1 p2 p3 [ 203.798957][T12507] loop2: partition table partially beyond EOD, truncated [ 203.802060][T12507] loop2: p1 start 1601398130 is beyond EOD, truncated [ 203.804580][T12507] loop2: p2 start 1702059890 is beyond EOD, truncated [ 203.874845][T12510] comedi comedi3: unsupported base address 0x2000 [ 204.061936][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.065533][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.123781][T12523] i2c i2c-1: dtv_property_process_set: SET cmd 0x2f131a8c undefined [ 204.152095][ T40] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 204.282202][ T40] usb 5-1: device descriptor read/64, error -71 [ 204.542054][ T40] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 204.542147][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.671948][ T40] usb 5-1: device descriptor read/64, error -71 [ 204.703542][ T3269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.792240][ T40] usb usb5-port1: attempt power cycle [ 204.910928][T12566] kAFS: No cell specified [ 204.978481][T12568] kAFS: unable to lookup cell '1' [ 205.112061][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.133869][ T40] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 205.152615][ T40] usb 5-1: device descriptor read/8, error -71 [ 205.401858][ T40] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 205.412259][ T2325] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 205.422860][ T40] usb 5-1: device descriptor read/8, error -71 [ 205.519397][T12588] input: syz1 as /devices/virtual/input/input42 [ 205.543526][ T40] usb usb5-port1: unable to enumerate USB device [ 205.573773][ T2325] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 205.576461][ T2325] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 205.579579][ T2325] usb 10-1: config 0 interface 0 has no altsetting 0 [ 205.583754][ T2325] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 205.586737][ T2325] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 205.589612][ T2325] usb 10-1: Product: syz [ 205.591351][ T2325] usb 10-1: Manufacturer: syz [ 205.594926][ T2325] usb 10-1: SerialNumber: syz [ 205.599811][ T2325] usb 10-1: config 0 descriptor?? [ 205.604146][ T2325] hub 10-1:0.0: bad descriptor, ignoring hub [ 205.606275][ T2325] hub 10-1:0.0: probe with driver hub failed with error -5 [ 205.610319][ T2325] usb 10-1: selecting invalid altsetting 0 [ 205.925166][ T964] usb 10-1: USB disconnect, device number 10 [ 205.957980][T12611] ata1.00: invalid cdb length 6 [ 205.983689][ T42] audit: type=1400 audit(2000000107.906:953): avc: denied { mounton } for pid=12613 comm="syz.2.1972" path="/514/file0" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 206.041979][ T42] audit: type=1326 audit(2000000107.956:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.2.1972" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3360b9de99 code=0x0 [ 206.142266][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.616149][T12621] ipt_ECN: cannot use operation on non-tcp rule [ 206.892437][ T5739] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 207.043610][ T5739] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.048589][ T5739] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 207.062987][ T5739] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.066911][ T5739] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 207.070380][ T5739] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 207.083444][ T5739] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.088008][ T5739] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.092877][ T5739] usb 10-1: Product: syz [ 207.094407][ T5739] usb 10-1: Manufacturer: syz [ 207.107171][ T5739] cdc_wdm 10-1:1.0: skipping garbage [ 207.111122][ T5739] cdc_wdm 10-1:1.0: skipping garbage [ 207.115555][ T5739] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 207.117959][ T5739] cdc_wdm 10-1:1.0: Unknown control protocol [ 207.192206][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.335489][T12645] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1984'. [ 207.435865][T12653] 9pnet_fd: Insufficient options for proto=fd [ 207.439225][T12653] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.593877][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.714428][ T10] usb 10-1: USB disconnect, device number 11 [ 207.845561][T12672] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 207.878808][ T42] audit: type=1400 audit(2000000109.796:955): avc: denied { read } for pid=12673 comm="syz.2.1994" path="socket:[60374]" dev="sockfs" ino=60374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.211634][T12722] loop4: detected capacity change from 0 to 2640 [ 208.218530][T12722] buffer_io_error: 320 callbacks suppressed [ 208.218544][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.223975][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.226619][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.229396][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.232280][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.234344][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.234851][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.240733][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.245732][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.250081][T12722] ldm_validate_partition_table(): Disk read failed. [ 208.252709][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.255225][T12722] Buffer I/O error on dev loop4, logical block 0, async page read [ 208.257759][T12722] Dev loop4: unable to read RDB block 0 [ 208.262085][T12722] loop4: unable to read partition table [ 208.268954][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'. [ 208.269224][T12722] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 208.300833][T12732] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.325208][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2010'. [ 208.357688][T12737] cgroup: release_agent respecified [ 208.571923][ T848] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 208.702165][ T848] usb 10-1: device descriptor read/64, error -71 [ 208.941966][ T848] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 209.071838][ T848] usb 10-1: device descriptor read/64, error -71 [ 209.182399][ T848] usb usb10-port1: attempt power cycle [ 209.263398][ T2325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.275239][T12752] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2017'. [ 209.526803][ T848] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 209.542311][ T848] usb 10-1: device descriptor read/8, error -71 [ 209.745917][T12761] ata1.00: invalid multi_count 128 ignored [ 209.781954][ T848] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 209.795831][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 209.802811][ T848] usb 10-1: device descriptor read/8, error -71 [ 209.820702][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.912158][ T848] usb usb10-port1: unable to enumerate USB device [ 209.922941][T12765] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 210.017681][T12771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.020476][T12771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.024374][ T42] audit: type=1400 audit(2000000111.946:956): avc: denied { accept } for pid=12769 comm="syz.0.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 210.024629][T12771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.079325][T12776] ufs: You didn't specify the type of your ufs filesystem [ 210.079325][T12776] [ 210.079325][T12776] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 210.079325][T12776] [ 210.079325][T12776] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 210.091779][T12776] ufs: ufstype=old is supported read-only [ 210.095678][T12776] ufs: ufs_fill_super(): bad magic number [ 210.233932][T12786] : renamed from vlan0 (while UP) [ 210.302422][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.483164][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 210.512356][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 210.632044][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.851528][T12772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.857291][T12772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.947007][ T42] audit: type=1400 audit(2000000112.866:957): avc: denied { map } for pid=12806 comm="syz.0.2034" path="socket:[62492]" dev="sockfs" ino=62492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 210.953416][T12807] binder: Bad value for 'max' [ 211.053983][T12811] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 211.056057][T12811] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 211.058460][T12811] vhci_hcd vhci_hcd.0: Device attached [ 211.061131][T12812] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 211.063884][ T5813] vhci_hcd vhci_hcd.0: stop threads [ 211.066322][ T5813] vhci_hcd vhci_hcd.0: release socket [ 211.068229][T12811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.068458][ T5813] vhci_hcd vhci_hcd.0: disconnect device [ 211.075592][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.378149][T12815] loop5: detected capacity change from 0 to 2640 [ 211.475348][T12817] xfrm0 speed is unknown, defaulting to 1000 [ 211.617669][T12827] 9pnet_virtio: no channels available for device syz [ 211.846475][T12841] qnx6: unable to read the first superblock [ 211.849903][T12841] qnx6: unable to read the first superblock [ 211.855087][T12841] qnx6: unable to read the first superblock [ 211.887713][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2045'. [ 211.949977][T12845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2045'. [ 211.996998][T12845] team0: Port device dummy0 removed [ 212.007747][T12845] bond0: (slave bond_slave_0): Releasing backup interface [ 212.033907][T12845] bond0: (slave bond_slave_1): Releasing backup interface [ 212.043125][T12845] team0: Port device team_slave_0 removed [ 212.049589][T12845] team0: Port device team_slave_1 removed [ 212.051919][T12845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.055627][T12845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.059269][T12845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.061600][T12845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.089826][T12848] team0: Port device xfrm0 added [ 212.097261][ T5739] xfrm0 speed is unknown, defaulting to 1000 [ 212.100197][ T964] xfrm0 speed is unknown, defaulting to 1000 [ 212.121975][T12857] comedi: valid board names for 8255 driver are: [ 212.123954][T12857] 8255 [ 212.124856][T12857] comedi: valid board names for vmk80xx driver are: [ 212.126899][T12857] vmk80xx [ 212.127952][T12857] comedi: valid board names for usbduxsigma driver are: [ 212.130468][T12857] usbduxsigma [ 212.132669][T12857] comedi: valid board names for usbduxfast driver are: [ 212.136479][T12857] usbduxfast [ 212.138804][T12857] comedi: valid board names for usbdux driver are: [ 212.142344][T12857] usbdux [ 212.144348][T12857] comedi: valid board names for ni6501 driver are: [ 212.146234][T12857] ni6501 [ 212.147239][T12857] comedi: valid board names for dt9812 driver are: [ 212.149571][T12857] dt9812 [ 212.150508][T12857] comedi: valid board names for ni_labpc_cs driver are: [ 212.153188][T12857] ni_labpc_cs [ 212.154269][T12857] comedi: valid board names for ni_daq_700 driver are: [ 212.156558][T12857] ni_daq_700 [ 212.157635][T12857] comedi: valid board names for labpc_pci driver are: [ 212.159786][T12857] labpc_pci [ 212.160854][T12857] comedi: valid board names for adl_pci9118 driver are: [ 212.163459][T12857] pci9118dg [ 212.164481][T12857] pci9118hg [ 212.165528][T12857] pci9118hr [ 212.166669][T12857] comedi: valid board names for 8255_pci driver are: [ 212.168821][T12857] 8255_pci [ 212.169881][T12857] comedi: valid board names for s526 driver are: [ 212.173214][T12857] s526 [ 212.174171][T12857] comedi: valid board names for multiq3 driver are: [ 212.176373][T12857] multiq3 [ 212.177475][T12857] comedi: valid board names for pcmuio driver are: [ 212.179533][T12857] pcmuio48 [ 212.180575][T12857] pcmuio96 [ 212.181609][T12857] comedi: valid board names for pcmmio driver are: [ 212.183684][T12857] pcmmio [ 212.184610][T12857] comedi: valid board names for pcmda12 driver are: [ 212.186749][T12857] pcmda12 [ 212.187793][T12857] comedi: valid board names for pcmad driver are: [ 212.189752][T12857] pcmad12 [ 212.190714][T12857] pcmad16 [ 212.192231][T12857] comedi: valid board names for ni_labpc driver are: [ 212.194680][T12857] lab-pc-1200 [ 212.195794][T12857] lab-pc-1200ai [ 212.196927][T12857] lab-pc+ [ 212.197967][T12857] comedi: valid board names for atmio16 driver are: [ 212.200004][T12857] atmio16 [ 212.200963][T12857] atmio16d [ 212.202209][T12857] comedi: valid board names for ni_at_ao driver are: [ 212.204213][T12857] at-ao-6 [ 212.205163][T12857] at-ao-10 [ 212.206173][T12857] comedi: valid board names for ni_at_a2150 driver are: [ 212.208235][T12857] ni_at_a2150 [ 212.209294][T12857] comedi: valid board names for adq12b driver are: [ 212.211282][T12857] adq12b [ 212.212660][T12857] comedi: valid board names for mpc624 driver are: [ 212.214651][T12857] mpc624 [ 212.215554][T12857] comedi: valid board names for c6xdigio driver are: [ 212.217663][T12857] c6xdigio [ 212.218671][T12857] comedi: valid board names for aio_iiro_16 driver are: [ 212.220795][T12857] aio_iiro_16 [ 212.222936][T12857] comedi: valid board names for aio_aio12_8 driver are: [ 212.225048][T12857] aio_aio12_8 [ 212.226121][T12857] aio_ai12_8 [ 212.227193][T12857] aio_ao12_4 [ 212.228331][T12857] comedi: valid board names for fl512 driver are: [ 212.230284][T12857] fl512 [ 212.231188][T12857] comedi: valid board names for dmm32at driver are: [ 212.233629][T12857] dmm32at [ 212.234620][T12857] comedi: valid board names for dt282x driver are: [ 212.236598][T12857] dt2821 [ 212.237581][T12857] dt2821-f [ 212.238733][T12857] dt2821-g [ 212.239947][T12857] dt2823 [ 212.241150][T12857] dt2824-pgh [ 212.242438][T12857] dt2824-pgl [ 212.243515][T12857] dt2825 [ 212.244751][T12857] dt2827 [ 212.245960][T12857] dt2828 [ 212.247135][T12857] dt2829 [ 212.248253][T12857] dt21-ez [ 212.249272][T12857] dt23-ez [ 212.250498][T12857] dt24-ez [ 212.252598][T12857] dt24-ez-pgl [ 212.253946][T12857] comedi: valid board names for dt2817 driver are: [ 212.256388][T12857] dt2817 [ 212.257614][T12857] comedi: valid board names for dt2815 driver are: [ 212.259893][T12857] dt2815 [ 212.261172][T12857] comedi: valid board names for dt2814 driver are: [ 212.264019][T12857] dt2814 [ 212.265035][T12857] comedi: valid board names for dt2811 driver are: [ 212.266139][T12868] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 212.267609][T12857] dt2811-pgh [ 212.271702][T12869] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 1 [ 212.272633][T12857] dt2811-pgl [ 212.277330][T12870] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 2 [ 212.278711][T12857] comedi: valid board names for dt2801 driver are: [ 212.280290][T12871] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 3 [ 212.282419][T12857] dt2801 [ 212.282427][T12857] comedi: valid board names for das6402 driver are: [ 212.282434][T12857] das6402-12 [ 212.282438][T12857] das6402-16 [ 212.282443][T12857] comedi: valid board names for das1800 driver are: [ 212.282449][T12857] das-1701st [ 212.282453][T12857] das-1701st-da [ 212.282458][T12857] das-1702st [ 212.282463][T12857] das-1702st-da [ 212.282468][T12857] das-1702hr [ 212.282472][T12857] das-1702hr-da [ 212.282476][T12857] das-1701ao [ 212.282481][T12857] das-1702ao [ 212.307261][T12857] das-1801st [ 212.308720][T12857] das-1801st-da [ 212.310103][T12857] das-1802st [ 212.310244][ T42] audit: type=1400 audit(2000000114.226:958): avc: denied { append } for pid=12849 comm="syz.5.2047" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 212.311222][T12857] das-1802st-da [ 212.319331][T12857] das-1802hr [ 212.320436][T12857] das-1802hr-da [ 212.321630][T12857] das-1801hc [ 212.323343][T12857] das-1802hc [ 212.324495][T12857] das-1801ao [ 212.325662][T12857] das-1802ao [ 212.326710][T12857] comedi: valid board names for das800 driver are: [ 212.328777][T12857] das-800 [ 212.329791][T12857] cio-das800 [ 212.330845][T12857] das-801 [ 212.332266][T12857] cio-das801 [ 212.333426][T12857] das-802 [ 212.334387][T12857] cio-das802 [ 212.335598][T12857] cio-das802/16 [ 212.336879][T12857] comedi: valid board names for isa-das08 driver are: [ 212.339000][T12857] isa-das08 [ 212.339987][T12857] das08-pgm [ 212.340990][T12857] das08-pgh [ 212.342518][T12857] das08-pgl [ 212.343704][T12857] das08-aoh [ 212.344774][T12857] das08-aol [ 212.346036][T12857] das08-aom [ 212.347350][T12857] das08/jr-ao [ 212.348726][T12857] das08jr-16-ao [ 212.350028][T12857] pc104-das08 [ 212.351448][T12857] das08jr/16 [ 212.354589][T12857] comedi: valid board names for das16m1 driver are: [ 212.356740][T12857] das16m1 [ 212.357889][T12857] comedi: valid board names for dac02 driver are: [ 212.360053][T12857] dac02 [ 212.361061][T12857] comedi: valid board names for rti802 driver are: [ 212.363253][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 212.366798][T12857] rti802 [ 212.368284][T12857] comedi: valid board names for rti800 driver are: [ 212.370972][T12857] rti800 [ 212.373140][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2053'. [ 212.373626][T12857] rti815 [ 212.377158][T12857] comedi: valid board names for pcm3724 driver are: [ 212.379667][T12857] pcm3724 [ 212.380729][T12857] comedi: valid board names for pcl818 driver are: [ 212.388876][T12857] pcl818l [ 212.390044][T12857] pcl818h [ 212.391331][T12857] pcl818hd [ 212.396436][T12857] pcl818hg [ 212.397458][T12857] pcl818 [ 212.398390][T12857] pcl718 [ 212.401012][T12857] pcm3718 [ 212.402492][T12857] comedi: valid board names for pcl816 driver are: [ 212.405855][T12857] pcl816 [ 212.407833][T12857] pcl814b [ 212.408928][T12857] comedi: valid board names for pcl812 driver are: [ 212.411106][T12857] pcl812 [ 212.413079][T12857] pcl812pg [ 212.414317][T12857] acl8112pg [ 212.415607][T12857] acl8112dg [ 212.416624][T12857] acl8112hg [ 212.417650][T12857] a821pgl [ 212.418682][T12857] a821pglnda [ 212.419995][T12857] a821pgh [ 212.421231][T12857] a822pgl [ 212.421845][ T40] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 212.422513][T12857] a822pgh [ 212.425851][T12857] a823pgl [ 212.426849][T12857] a823pgh [ 212.427975][T12857] pcl813 [ 212.428923][T12857] pcl813b [ 212.430206][T12857] acl8113 [ 212.431508][T12857] iso813 [ 212.432950][T12857] acl8216 [ 212.434219][T12857] a826pg [ 212.435391][T12857] comedi: valid board names for pcl730 driver are: [ 212.437503][T12857] pcl730 [ 212.438723][T12857] iso730 [ 212.439920][T12857] acl7130 [ 212.441200][T12857] pcm3730 [ 212.442402][T12857] pcl725 [ 212.443355][T12857] p8r8dio [ 212.444423][T12857] acl7225b [ 212.445807][T12857] p16r16dio [ 212.447146][T12857] pcl733 [ 212.448174][T12857] pcl734 [ 212.449140][T12857] opmm-1616-xt [ 212.450530][T12857] pearl-mm-p [ 212.452795][T12857] ir104-pbf [ 212.454163][T12857] comedi: valid board names for pcl726 driver are: [ 212.456426][T12857] pcl726 [ 212.457459][T12857] pcl727 [ 212.458693][T12857] pcl728 [ 212.459896][T12857] acl6126 [ 212.461204][T12857] acl6128 [ 212.462672][T12857] comedi: valid board names for pcl724 driver are: [ 212.465453][T12857] pcl724 [ 212.466676][T12857] pcl722 [ 212.467945][T12857] pcl731 [ 212.468949][T12857] acl7122 [ 212.470139][T12857] acl7124 [ 212.471460][T12857] pet48dio [ 212.473239][T12857] pcmio48 [ 212.474540][T12857] onyx-mm-dio [ 212.476009][T12857] comedi: valid board names for pcl711 driver are: [ 212.478257][T12857] pcl711 [ 212.479288][T12857] pcl711b [ 212.480579][T12857] acl8112hg [ 212.482029][T12857] acl8112dg [ 212.483507][T12857] comedi: valid board names for amplc_pc263 driver are: [ 212.486068][T12857] pc263 [ 212.487168][T12857] comedi: valid board names for amplc_pc236 driver are: [ 212.489953][T12857] pc36at [ 212.491188][T12857] comedi: valid board names for amplc_dio200 driver are: [ 212.493683][T12857] pc212e [ 212.494982][T12857] pc214e [ 212.499247][T12857] pc215e [ 212.500249][T12857] pc218e [ 212.501232][T12857] pc272e [ 212.502531][T12857] comedi: valid board names for comedi_parport driver are: [ 212.504846][T12857] comedi_parport [ 212.506096][T12857] comedi: valid board names for comedi_test driver are: [ 212.508349][T12857] comedi_test [ 212.509472][T12857] comedi: valid board names for comedi_bond driver are: [ 212.511660][T12857] comedi_bond [ 212.514116][ T10] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 212.516836][ T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 212.519898][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 212.523865][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 212.526912][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 212.529613][ T10] usb 7-1: Product: syz [ 212.530914][ T10] usb 7-1: Manufacturer: syz [ 212.532656][ T10] usb 7-1: SerialNumber: syz [ 212.539243][ T10] usb 7-1: config 0 descriptor?? [ 212.542436][ T10] hub 7-1:0.0: bad descriptor, ignoring hub [ 212.544368][ T10] hub 7-1:0.0: probe with driver hub failed with error -5 [ 212.548646][ T10] usb 7-1: selecting invalid altsetting 0 [ 212.561911][ T40] usb 5-1: device descriptor read/64, error -71 [ 212.812974][ T40] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 212.900110][T12899] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 212.903495][T12899] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 212.908022][T12899] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 212.911327][T12899] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 212.942054][ T40] usb 5-1: device descriptor read/64, error -71 [ 212.985365][ T42] audit: type=1326 audit(2000000114.906:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 212.993561][ T42] audit: type=1326 audit(2000000114.906:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 213.000401][ T42] audit: type=1326 audit(2000000114.906:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 213.007659][ T42] audit: type=1326 audit(2000000114.906:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 213.017100][ T42] audit: type=1326 audit(2000000114.906:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 213.027781][ T42] audit: type=1326 audit(2000000114.906:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 213.035869][ T42] audit: type=1326 audit(2000000114.906:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 213.043303][ T42] audit: type=1326 audit(2000000114.906:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 213.050418][ T42] audit: type=1326 audit(2000000114.906:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 213.057764][ T40] usb usb5-port1: attempt power cycle [ 213.059575][ T42] audit: type=1326 audit(2000000114.906:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.5.2062" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ec699de99 code=0x7ffc0000 [ 213.158328][ T964] usb 7-1: USB disconnect, device number 22 [ 213.284320][T12917] binder: 12916:12917 ioctl c0306201 200000000480 returned -14 [ 213.323199][ T964] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 213.401937][ T40] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 213.411554][T12923] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2068'. [ 213.432905][ T40] usb 5-1: device descriptor read/8, error -71 [ 213.544850][ T964] usb 7-1: unable to get BOS descriptor or descriptor too short [ 213.548867][ T964] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 213.551340][ T964] usb 7-1: can't read configurations, error -71 [ 213.569352][T12929] 9pnet_virtio: no channels available for device syz [ 213.636011][T12932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2071'. [ 213.682130][ T40] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 213.694646][T12934] kvm: user requested TSC rate below hardware speed [ 213.702305][ T40] usb 5-1: device descriptor read/8, error -71 [ 213.719719][T12934] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 213.812920][ T40] usb usb5-port1: unable to enumerate USB device [ 213.855515][T12903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 213.889765][T12940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2074'. [ 213.894312][T12940] xt_hashlimit: size too large, truncated to 1048576 [ 213.997536][T12945] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.024414][T12945] veth3: entered promiscuous mode [ 214.030855][T12945] bond5: (slave veth3): Enslaving as an active interface with an up link [ 214.268942][T12964] input: syz1 as /devices/virtual/input/input44 [ 214.303415][ T848] net_ratelimit: 6 callbacks suppressed [ 214.303434][ T848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.462636][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.467642][ T9329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.472692][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.477236][ T5739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.303612][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.306429][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.309015][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.313139][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.315786][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.318536][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.321421][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.325834][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.329440][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.334422][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.337308][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.339909][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.342575][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.345019][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.347626][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.350266][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.354435][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.357097][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.359579][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.362219][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.364915][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.367493][T13004] comedi comedi2: das16m1: I/O port conflict (0x140,16) [ 215.368098][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.374097][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.376672][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.379143][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.381592][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.384565][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.387175][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.389605][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.392120][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.395402][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.398097][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.400608][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.405216][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.408755][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.412018][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.414576][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.417084][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.420438][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.427006][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.429571][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.432254][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.435427][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.438796][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.442461][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.444958][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.448438][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.451914][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.455461][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.459008][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.462860][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.466908][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.469422][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.472206][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.474797][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.477750][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.481036][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.484912][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.487717][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.490775][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.493430][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.496086][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.499796][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.502507][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.503713][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.508736][T13000] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 215.792418][T13018] binder: 13017:13018 ioctl 4018620d 0 returned -22 [ 215.795408][T13018] binder: 13017:13018 ioctl 401c5504 200000000000 returned -22 [ 215.799033][T13018] binder: 13017:13018 ioctl 4018620d 0 returned -22 [ 215.867243][T13023] futex_wake_op: syz.5.2097 tries to shift op by -1; fix this program [ 216.150833][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.153403][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.157691][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.160644][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.164381][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.169874][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.170266][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.172846][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.176507][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.179205][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.184013][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.186240][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.189531][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.192640][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.192683][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.196674][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.199567][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.203508][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.206878][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.211926][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.222006][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.222263][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.224758][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.225985][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.230091][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.230386][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.231457][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.231498][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.232918][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.234583][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.236614][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.237344][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.237537][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.239660][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.242669][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.246303][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.247886][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.247928][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.253241][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.253284][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.253325][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.253364][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.255625][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.258636][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.261613][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.268311][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.270817][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.274653][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.277357][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.280209][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.283385][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.283427][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.283466][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.287471][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.290279][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.290320][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.295846][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.297615][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.301511][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.305728][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.309572][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.310766][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.316430][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.317479][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.321127][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.324248][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.332517][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.333548][T13037] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.336781][T13036] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 216.360863][T13050] __nla_validate_parse: 2 callbacks suppressed [ 216.360876][T13050] netlink: 45 bytes leftover after parsing attributes in process `syz.5.2103'. [ 216.429783][T13039] xfrm0 speed is unknown, defaulting to 1000 [ 216.452272][T13058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2106'. [ 216.500544][T13063] loop2: detected capacity change from 0 to 7 [ 216.503827][T13063] Dev loop2: unable to read RDB block 7 [ 216.506355][T13063] loop2: AHDI p1 p2 p3 [ 216.508611][T13063] loop2: partition table partially beyond EOD, truncated [ 216.511210][T13063] loop2: p1 start 1601398130 is beyond EOD, truncated [ 216.515828][T13063] loop2: p2 start 1702059890 is beyond EOD, truncated [ 216.611510][T13039] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.614894][T13039] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.617866][T13039] bridge_slave_0: entered allmulticast mode [ 216.622137][T13039] bridge_slave_0: entered promiscuous mode [ 216.626657][T13039] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.629563][T13039] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.634058][T13039] bridge_slave_1: entered allmulticast mode [ 216.637838][T13039] bridge_slave_1: entered promiscuous mode [ 216.662905][T13039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.669220][T13039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.708719][T13039] team0: Port device team_slave_0 added [ 216.712396][T13039] team0: Port device team_slave_1 added [ 216.735005][T13039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.737850][T13039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.747300][T13039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.753569][T13039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.756118][T13039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.766309][T13039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.803884][T13039] hsr_slave_0: entered promiscuous mode [ 216.806960][T13039] hsr_slave_1: entered promiscuous mode [ 216.809703][T13039] debugfs: 'hsr0' already exists in 'hsr' [ 216.812021][T13039] Cannot create hsr debugfs directory [ 216.940395][T13039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 216.945107][T13039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.949606][T13039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 216.954143][T13039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.957271][T13039] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 216.961183][T13039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.963979][T13039] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 216.967671][T13039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.008792][T13039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.018249][T13039] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.023388][ T9335] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.025629][ T9335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.034076][ T9335] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.036263][ T9335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.287364][T13039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.435514][T13039] veth0_vlan: entered promiscuous mode [ 217.440928][T13039] veth1_vlan: entered promiscuous mode [ 217.461200][T13039] veth0_macvtap: entered promiscuous mode [ 217.469224][T13039] veth1_macvtap: entered promiscuous mode [ 217.478289][T13039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.484355][T13039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.491431][ T5814] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.494777][ T5814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.498143][ T5814] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.500751][ T5814] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.617073][ T5957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.620698][ T5957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.648870][ T651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.652761][ T651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.693829][T13121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2116'. [ 217.698177][T13121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2116'. [ 217.737985][T13128] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2100'. [ 217.749881][T13130] qnx4: unable to read the superblock [ 217.774462][T13130] overlayfs: missing 'lowerdir' [ 217.868661][T13144] cgroup: release_agent respecified [ 217.900810][T13146] netlink: 'syz.5.2125': attribute type 2 has an invalid length. [ 217.905784][T13146] netlink: 46 bytes leftover after parsing attributes in process `syz.5.2125'. [ 217.911970][T13146] netlink: 'syz.5.2125': attribute type 11 has an invalid length. [ 217.954925][T13156] comedi comedi2: comedi_parport: I/O port conflict (0x140,3) [ 217.994163][T13162] team_slave_0: left allmulticast mode [ 218.000385][T13162] team0 (unregistering): Port device team_slave_0 removed [ 218.004644][T13162] team_slave_1: left allmulticast mode [ 218.011308][T13162] team0 (unregistering): Port device team_slave_1 removed [ 218.033928][T13163] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 218.036866][T13163] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 218.074410][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2132'. [ 218.120170][T13176] netlink: 'syz.5.2133': attribute type 1 has an invalid length. [ 218.302074][ T5750] Bluetooth: hci1: command tx timeout [ 218.461851][ T848] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 218.632016][ T848] usb 5-1: Using ep0 maxpacket: 16 [ 218.636974][ T848] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 247, changing to 7 [ 218.642190][ T848] usb 5-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice= 0.40 [ 218.645006][ T848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.647512][ T848] usb 5-1: Product: syz [ 218.648815][ T848] usb 5-1: Manufacturer: syz [ 218.650441][ T848] usb 5-1: SerialNumber: syz [ 218.887379][ T848] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.895980][ T848] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 218.915439][T13186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2137'. [ 218.917701][ T848] usb 5-1: USB disconnect, device number 32 [ 218.919224][T13186] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.952685][T13188] FAT-fs (nullb0): bogus number of reserved sectors [ 218.955012][T13188] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 219.015321][T13199] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2140'. [ 219.017438][T13192] netlink: 700 bytes leftover after parsing attributes in process `syz.5.2141'. [ 219.150994][T13207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.153814][T13207] IPv6: NLM_F_CREATE should be set when creating new route [ 219.282226][ T5849] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 219.412403][ T5849] usb 11-1: device descriptor read/64, error -71 [ 219.463312][T13229] loop2: detected capacity change from 0 to 7 [ 219.467751][T13229] Dev loop2: unable to read RDB block 7 [ 219.469716][T13229] loop2: AHDI p1 p2 p3 [ 219.471100][T13229] loop2: partition table partially beyond EOD, truncated [ 219.473461][T13229] loop2: p1 start 1601398130 is beyond EOD, truncated [ 219.476170][T13229] loop2: p2 start 1702059890 is beyond EOD, truncated [ 219.662385][ T5849] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 219.793309][ T5849] usb 11-1: device descriptor read/64, error -71 [ 219.902875][ T5849] usb usb11-port1: attempt power cycle [ 220.242825][ T5849] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 220.263399][ T5849] usb 11-1: device descriptor read/8, error -71 [ 220.382110][ T5750] Bluetooth: hci1: command tx timeout [ 220.407959][T13303] loop2: detected capacity change from 0 to 7 [ 220.411297][T13303] Dev loop2: unable to read RDB block 7 [ 220.413800][T13303] loop2: AHDI p1 p2 p3 [ 220.415360][T13303] loop2: partition table partially beyond EOD, truncated [ 220.417805][T13303] loop2: p1 start 1601398130 is beyond EOD, truncated [ 220.420164][T13303] loop2: p2 start 1702059890 is beyond EOD, truncated [ 220.502067][ T5849] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 220.522619][ T5849] usb 11-1: device descriptor read/8, error -71 [ 220.632653][ T5849] usb usb11-port1: unable to enumerate USB device [ 220.902001][ T40] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 221.001267][T13283] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 221.150701][T13330] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 221.153426][T13330] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 221.155919][T13330] netlink: 'syz.3.2167': attribute type 2 has an invalid length. [ 221.158421][T13330] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 221.160869][T13330] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 221.164331][T13330] netlink: 'syz.3.2167': attribute type 2 has an invalid length. [ 221.166913][T13330] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 221.169236][T13330] netlink: 'syz.3.2167': attribute type 1 has an invalid length. [ 221.221970][T13334] program syz.3.2168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.261681][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 221.261696][ T42] audit: type=1400 audit(2000000123.176:983): avc: denied { append } for pid=13337 comm="syz.3.2170" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 221.347215][T13338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.350861][T13338] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 221.358992][T13338] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.360872][T13338] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 221.370158][T13338] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 221.375947][T13338] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.378223][T13338] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 221.392241][T13338] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 221.431243][T13343] __nla_validate_parse: 34 callbacks suppressed [ 221.431263][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'. [ 221.464541][ T42] audit: type=1326 audit(2000000123.386:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13342 comm="syz.3.2171" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88fc79de99 code=0x0 [ 221.491936][ T5509] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 221.641880][ T5509] usb 5-1: Using ep0 maxpacket: 32 [ 221.646163][ T5509] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 221.650363][ T5509] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 221.655249][ T5509] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.659671][ T5509] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 221.668550][ T5509] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 221.674836][ T5509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.677798][ T5509] usb 5-1: Product: syz [ 221.679323][ T5509] usb 5-1: Manufacturer: syz [ 221.681026][ T5509] usb 5-1: SerialNumber: syz [ 221.692766][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 221.703747][ T5509] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input45 [ 221.902248][ T5509] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 221.904988][ T5509] (id 0x00) [ 221.951855][ T5509] rc_core: IR keymap rc-imon-pad not found [ 221.953853][ T5509] Registered IR keymap rc-empty [ 221.955543][ T5509] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 221.958756][ T5509] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 222.043335][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2172'. [ 222.080681][T13349] veth1_macvtap: left promiscuous mode [ 222.082624][T13349] macsec0: entered promiscuous mode [ 222.084688][T13349] macsec0: entered allmulticast mode [ 222.090208][T13349] veth1_macvtap: entered promiscuous mode [ 222.092347][T13349] veth1_macvtap: entered allmulticast mode [ 222.096381][T13349] macsec0: left promiscuous mode [ 222.098164][T13349] macsec0: left allmulticast mode [ 222.099774][T13349] veth1_macvtap: left allmulticast mode [ 222.104168][ T5509] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 222.109848][ T5509] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input46 [ 222.119287][ T5509] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:33> initialized [ 222.574991][T13339] imon:send_packet: task interrupted [ 222.577073][T13339] imon:send_packet: packet tx failed (-512) [ 222.580242][T13339] imon:vfd_write: send packet #1 failed [ 222.582131][ T42] audit: type=1400 audit(2000000124.496:985): avc: denied { getopt } for pid=13359 comm="syz.6.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 222.593302][ T34] usb 5-1: USB disconnect, device number 33 [ 223.272728][ T5585] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 223.423083][ T5736] Bluetooth: hci1: command 0x0419 tx timeout [ 223.425003][ T5736] Bluetooth: hci3: command 0x0405 tx timeout [ 223.426854][ T5750] Bluetooth: hci2: command 0x0406 tx timeout [ 223.637109][T13383] efs: cannot read volume header [ 223.695865][T13386] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 223.748990][T13384] MINIX-fs: unable to read superblock [ 223.799176][ T42] audit: type=1400 audit(2000000125.716:986): avc: denied { read } for pid=13387 comm="syz.5.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 223.858126][ T5736] Bluetooth: hci3: unexpected event for opcode 0x202a [ 224.067333][ T5736] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 224.083870][T13407] validate_nla: 91 callbacks suppressed [ 224.083884][T13407] netlink: 'syz.3.2193': attribute type 29 has an invalid length. [ 224.091372][T13407] syz.3.2193: vmalloc error: size 4294959104, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 224.098564][T13407] CPU: 0 UID: 0 PID: 13407 Comm: syz.3.2193 Not tainted syzkaller #0 PREEMPT(full) [ 224.098583][T13407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.098597][T13407] Call Trace: [ 224.098602][T13407] [ 224.098608][T13407] dump_stack_lvl+0x100/0x190 [ 224.098839][T13407] warn_alloc.cold+0x94/0xa8 [ 224.098878][T13407] ? __pfx_warn_alloc+0x10/0x10 [ 224.098971][T13407] ? kasan_save_stack+0x3f/0x50 [ 224.098986][T13407] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 224.099005][T13407] ? vb2_vmalloc_alloc+0xf9/0x410 [ 224.099136][T13407] ? __vb2_queue_alloc+0x8d5/0x1160 [ 224.099153][T13407] ? vb2_core_create_bufs+0x5fa/0xa30 [ 224.099169][T13407] ? vb2_create_bufs+0x40c/0x830 [ 224.099182][T13407] ? v4l_create_bufs+0x17d/0x270 [ 224.099224][T13407] ? __video_do_ioctl+0xb2a/0xdf0 [ 224.099236][T13407] ? video_usercopy+0x47a/0x1730 [ 224.099250][T13407] ? __x64_sys_ioctl+0x18e/0x210 [ 224.099268][T13407] ? do_syscall_64+0x115/0x870 [ 224.099414][T13407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.099430][T13407] ? vb2_vmalloc_alloc+0x135/0x410 [ 224.099449][T13407] __vmalloc_node_range_noprof+0x136c/0x1630 [ 224.099473][T13407] ? vb2_vmalloc_alloc+0x135/0x410 [ 224.099496][T13407] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 224.099517][T13407] ? kasan_save_track+0x14/0x30 [ 224.099531][T13407] ? __kasan_kmalloc+0xaa/0xb0 [ 224.099545][T13407] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 224.099562][T13407] ? vb2_vmalloc_alloc+0x135/0x410 [ 224.099579][T13407] vmalloc_user_noprof+0x9e/0xe0 [ 224.099600][T13407] ? vb2_vmalloc_alloc+0x135/0x410 [ 224.099619][T13407] vb2_vmalloc_alloc+0x135/0x410 [ 224.099637][T13407] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 224.099657][T13407] __vb2_queue_alloc+0x8d5/0x1160 [ 224.099683][T13407] vb2_core_create_bufs+0x5fa/0xa30 [ 224.099703][T13407] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 224.099723][T13407] ? trace_contention_end+0x126/0x160 [ 224.099766][T13407] ? __mutex_lock+0x26d/0x1bd0 [ 224.099801][T13407] vb2_create_bufs+0x40c/0x830 [ 224.099819][T13407] ? __pfx_vb2_create_bufs+0x10/0x10 [ 224.099837][T13407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.099853][T13407] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.099869][T13407] v4l_create_bufs+0x17d/0x270 [ 224.099890][T13407] __video_do_ioctl+0xb2a/0xdf0 [ 224.099906][T13407] ? __might_fault+0xc5/0x140 [ 224.099926][T13407] ? __pfx___video_do_ioctl+0x10/0x10 [ 224.099946][T13407] video_usercopy+0x47a/0x1730 [ 224.099959][T13407] ? __pfx___video_do_ioctl+0x10/0x10 [ 224.099972][T13407] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 224.100060][T13407] ? __pfx_video_usercopy+0x10/0x10 [ 224.100085][T13407] v4l2_ioctl+0x1bd/0x250 [ 224.100100][T13407] ? __pfx_v4l2_ioctl+0x10/0x10 [ 224.100116][T13407] __x64_sys_ioctl+0x18e/0x210 [ 224.100134][T13407] do_syscall_64+0x115/0x870 [ 224.100146][T13407] ? clear_bhb_loop+0x40/0x90 [ 224.100160][T13407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.100172][T13407] RIP: 0033:0x7f88fc79de99 [ 224.100184][T13407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.100195][T13407] RSP: 002b:00007f88fd690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.100228][T13407] RAX: ffffffffffffffda RBX: 00007f88fca25fa0 RCX: 00007f88fc79de99 [ 224.100236][T13407] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000005 [ 224.100244][T13407] RBP: 00007f88fc833eaf R08: 0000000000000000 R09: 0000000000000000 [ 224.100253][T13407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.100263][T13407] R13: 00007f88fca26038 R14: 00007f88fca25fa0 R15: 00007ffd3817d998 [ 224.100285][T13407] [ 224.167840][T13410] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2194'. [ 224.172972][T13407] Mem-Info: [ 224.180303][T13410] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2194'. [ 224.181436][T13407] active_anon:27266 inactive_anon:8579 isolated_anon:0 [ 224.181436][T13407] active_file:2740 inactive_file:23305 isolated_file:0 [ 224.181436][T13407] unevictable:1768 dirty:66 writeback:0 [ 224.181436][T13407] slab_reclaimable:8716 slab_unreclaimable:81350 [ 224.181436][T13407] mapped:23978 shmem:27983 pagetables:3935 [ 224.181436][T13407] sec_pagetables:304 bounce:0 [ 224.181436][T13407] kernel_misc_reclaimable:0 [ 224.181436][T13407] free:442656 free_pcp:10270 free_cma:0 [ 224.261424][T13407] Node 0 active_anon:108648kB inactive_anon:34316kB active_file:10960kB inactive_file:88088kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95896kB dirty:248kB writeback:0kB shmem:108396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16960kB pagetables:8352kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 224.275630][T13407] Node 1 active_anon:292kB inactive_anon:0kB active_file:0kB inactive_file:5132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:7388kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 224.288727][T13407] Node 0 DMA free:15252kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.300511][T13407] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 224.304741][T13407] Node 0 DMA32 free:132352kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108668kB inactive_anon:34316kB active_file:10960kB inactive_file:88084kB unevictable:3536kB writepending:248kB zspages:0kB present:2080628kB managed:1255352kB mlocked:0kB bounce:0kB free_pcp:37644kB local_pcp:8924kB free_cma:0kB [ 224.320216][T13407] lowmem_reserve[]: 0 0 0 0 0 [ 224.322152][T13407] Node 1 Normal free:1622920kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:292kB inactive_anon:0kB active_file:0kB inactive_file:5132kB unevictable:3536kB writepending:16kB zspages:2944kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:3572kB local_pcp:212kB free_cma:0kB [ 224.333884][T13407] lowmem_reserve[]: 0 0 0 0 0 [ 224.335889][T13407] Node 0 DMA: 11*4kB (UM) 15*8kB (UM) 15*16kB (UM) 16*32kB (UM) 14*64kB (UM) 13*128kB (UM) 6*256kB (U) 10*512kB (UM) 5*1024kB (UM) 0*2048kB 0*4096kB = 15252kB [ 224.342286][T13407] Node 0 DMA32: 729*4kB (UME) 722*8kB (UME) 177*16kB (UME) 182*32kB (UME) 187*64kB (UME) 69*128kB (UME) 68*256kB (UME) 28*512kB (UM) 39*1024kB (UM) 11*2048kB (UM) 0*4096kB = 132356kB [ 224.347935][T13407] Node 1 Normal: 315*4kB (UM) 367*8kB (UME) 345*16kB (UME) 325*32kB (UME) 314*64kB (UME) 259*128kB (UME) 247*256kB (UME) 211*512kB (UME) 144*1024kB (UM) 11*2048kB (UE) 295*4096kB (UM) = 1622932kB [ 224.353825][T13407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.357183][T13407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.359945][T13407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.362829][T13407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.365619][T13407] 54113 total pagecache pages [ 224.367098][T13407] 88 pages in swap cache [ 224.368372][T13407] Free swap = 107664kB [ 224.369672][T13407] Total swap = 124996kB [ 224.370964][T13407] 1048443 pages RAM [ 224.372243][T13407] 0 pages HighMem/MovableOnly [ 224.373725][T13407] 285294 pages reserved [ 224.374966][T13407] 0 pages cma reserved [ 225.502169][ T5736] Bluetooth: hci2: command 0x0406 tx timeout [ 225.502190][ T5750] Bluetooth: hci1: command 0x0419 tx timeout [ 225.685274][T13433] loop2: detected capacity change from 0 to 7 [ 225.698557][T13433] Dev loop2: unable to read RDB block 7 [ 225.700306][T13433] loop2: AHDI p1 p2 p3 [ 225.701608][T13433] loop2: partition table partially beyond EOD, truncated [ 225.709004][T13433] loop2: p1 start 1601398130 is beyond EOD, truncated [ 225.711419][T13433] loop2: p2 start 1702059890 is beyond EOD, truncated [ 225.972871][ T42] audit: type=1800 audit(2000000127.896:987): pid=13416 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2195" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 226.181063][T13367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.263012][T13457] kernel profiling enabled (shift: 5) [ 226.274736][T13450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13450 comm=syz.6.2200 [ 226.287074][ T42] audit: type=1400 audit(2000000128.206:988): avc: denied { execute } for pid=13453 comm="syz.5.2202" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 226.402769][T13466] sctp: [Deprecated]: syz.5.2205 (pid 13466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.402769][T13466] Use struct sctp_sack_info instead [ 226.409757][T13466] erofs (device loop5): cannot find valid erofs superblock [ 226.628088][ T42] audit: type=1400 audit(2000000128.546:989): avc: denied { mounton } for pid=13473 comm="syz.5.2208" path="/syzcgroup/unified/syz5" dev="configfs" ino=3120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 226.672878][T13476] trusted_key: encrypted_key: master key parameter is missing [ 226.867790][T13480] netlink: 'syz.5.2210': attribute type 9 has an invalid length. [ 226.918114][T13482] loop2: detected capacity change from 0 to 7 [ 226.921331][T13482] Dev loop2: unable to read RDB block 7 [ 226.923859][T13482] loop2: AHDI p1 p2 p3 [ 226.925588][T13482] loop2: partition table partially beyond EOD, truncated [ 226.928991][T13482] loop2: p1 start 1601398130 is beyond EOD, truncated [ 226.931428][T13482] loop2: p2 start 1702059890 is beyond EOD, truncated [ 227.071693][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2212'. [ 227.075474][T13484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2212'. [ 227.085212][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.085271][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2212'. [ 227.088931][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.092223][T13484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2212'. [ 227.096238][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.102344][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.422627][T13497] XFS (nbd0): SB validate failed with error -5. [ 227.562360][T13507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2218'. [ 227.583731][ T5750] Bluetooth: hci1: command 0x0419 tx timeout [ 227.682136][T13514] efs: device does not support 512 byte blocks [ 227.684123][T13514] device does not support 512 byte blocks [ 227.684123][T13514] [ 227.749876][T13520] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 227.831961][T13532] netlink: 'syz.0.2225': attribute type 10 has an invalid length. [ 227.834937][T13532] syz_tun: entered promiscuous mode [ 227.845903][T13532] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 227.858562][T13536] loop2: detected capacity change from 0 to 7 [ 227.862291][T13536] Dev loop2: unable to read RDB block 7 [ 227.864276][T13536] loop2: AHDI p1 p2 p3 [ 227.866079][T13536] loop2: partition table partially beyond EOD, truncated [ 227.868519][T13536] loop2: p1 start 1601398130 is beyond EOD, truncated [ 227.870722][T13536] loop2: p2 start 1702059890 is beyond EOD, truncated [ 228.015078][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 228.017964][T13541] netlink: 'syz.0.2228': attribute type 30 has an invalid length. [ 228.026401][ T5814] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.029383][ T5814] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.032328][ T5814] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.035185][ T5814] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.059983][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2228'. [ 228.376226][T13546] Cannot find add_set index 0 as target [ 228.432893][T13553] pimreg: tun_chr_ioctl cmd 1074025672 [ 228.435273][T13553] pimreg: ignored: set checksum enabled [ 228.464241][T13555] I!q: renamed from lo [ 228.496168][T13557] SELinux: syz.5.2234 (13557) wrote to checkreqprot. This is no longer supported. [ 228.500166][T13557] netlink: 11148 bytes leftover after parsing attributes in process `syz.5.2234'. [ 228.541039][ T5886] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 228.553968][ T5886] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 228.580063][T13565] Bluetooth: MGMT ver 1.23 [ 228.640880][T13563] fido_id[13563]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 228.710241][T13575] loop2: detected capacity change from 0 to 7 [ 228.713102][T13575] Dev loop2: unable to read RDB block 7 [ 228.714796][T13575] loop2: AHDI p1 p2 p3 [ 228.716088][T13575] loop2: partition table partially beyond EOD, truncated [ 228.718530][T13575] loop2: p1 start 1601398130 is beyond EOD, truncated [ 228.720576][T13575] loop2: p2 start 1702059890 is beyond EOD, truncated [ 228.803149][ T42] audit: type=1400 audit(228.690:990): avc: denied { write } for pid=13580 comm="syz.0.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 228.872285][ T40] usb 11-1: new low-speed USB device number 6 using dummy_hcd [ 229.026920][ T40] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 229.031440][ T40] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 229.034996][ T40] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.038588][ T40] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 229.042102][ T40] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 229.046503][ T40] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 229.048924][ T40] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 229.052514][ T40] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.056098][ T40] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 229.059522][ T40] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 229.063925][ T40] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 229.066320][ T40] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 229.069614][ T40] usb 11-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.073288][ T40] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 229.076727][ T40] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 229.083519][ T40] usb 11-1: string descriptor 0 read error: -22 [ 229.085677][ T40] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 229.088674][ T40] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.097567][ T40] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 229.141957][ T5849] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 229.249672][T13589] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2245'. [ 229.274314][T13594] netlink: 'syz.5.2246': attribute type 39 has an invalid length. [ 229.291948][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 229.295238][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.298742][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.301790][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.302933][T13572] syzkaller1: entered promiscuous mode [ 229.305774][ T5849] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 229.305790][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.310652][T13572] syzkaller1: entered allmulticast mode [ 229.317910][ T5849] usb 5-1: config 0 descriptor?? [ 229.377430][ T848] usb 11-1: USB disconnect, device number 6 [ 229.395966][T13596] input: syz0 as /devices/virtual/input/input47 [ 229.421154][T13596] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2247'. [ 229.432224][T12006] udevd[12006]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 229.474794][T13604] syzkaller0: entered promiscuous mode [ 229.476616][T13604] syzkaller0: entered allmulticast mode [ 229.525530][ T42] audit: type=1326 audit(229.410:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.0.2244" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f784e19de99 code=0x0 [ 229.548390][ T42] audit: type=1400 audit(229.430:992): avc: denied { create } for pid=13608 comm="syz.5.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 229.662751][ T5750] Bluetooth: hci1: command 0x0419 tx timeout [ 229.678735][ T42] audit: type=1400 audit(229.560:993): avc: denied { getopt } for pid=13618 comm="syz.3.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 229.778972][ T5849] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 229.782887][ T5849] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 229.786085][ T5849] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 229.788458][ T5849] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 229.792380][ T5849] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 229.794713][ T5849] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 229.797098][ T5849] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 229.799316][ T5849] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 229.801473][ T5849] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 229.804084][ T5849] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 229.821910][ T5849] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input48 [ 229.932431][ T5849] microsoft 0003:045E:07DA.0006: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 229.966752][T13628] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.973006][T13628] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.989722][ T42] audit: type=1400 audit(229.870:994): avc: denied { append } for pid=13630 comm="syz.3.2255" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.064484][T13640] netlink: 'syz.6.2257': attribute type 10 has an invalid length. [ 230.074666][T13640] geneve2: entered promiscuous mode [ 230.076933][T13640] geneve2: entered allmulticast mode [ 230.209273][T13647] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.216059][T13647] fuse: Unknown parameter '' [ 230.260125][T13651] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 230.263326][T13651] afs: Unknown parameter '0000000000429496729500000000004294967295836ֆ)viب(}Cmd [ 230.263326][T13651] s ՗ ' [ 230.316000][T13655] KVM: debugfs: duplicate directory 13655-5 [ 230.323515][T13655] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 230.328124][ T42] audit: type=1400 audit(230.210:995): avc: denied { mounton } for pid=13654 comm="syz.6.2262" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 230.328136][T13655] 9p: Bad value for 'rfdno' [ 230.346357][T13653] fuse-io-uring is disabled [ 230.591198][ T964] libceph: connect (1)[c::]:6789 error -22 [ 230.593563][ T964] libceph: mon0 (1)[c::]:6789 connect error [ 230.692115][T13662] ceph: No mds server is up or the cluster is laggy [ 230.727658][ T9329] Bluetooth: (null): Too short H5 packet [ 230.740030][ T9329] Bluetooth: (null): Invalid header checksum [ 230.982773][ T5849] usb 5-1: reset high-speed USB device number 34 using dummy_hcd [ 231.423464][ T5821] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 231.426321][ T5821] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 231.431837][ C3] ------------[ cut here ]------------ [ 231.434408][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 231.437094][ C3] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#3: syz.3.2256/13637 [ 231.440516][ C3] Modules linked in: [ 231.442263][ C3] CPU: 3 UID: 0 PID: 13637 Comm: syz.3.2256 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.446059][ C3] Tainted: [L]=SOFTLOCKUP [ 231.447639][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.450711][ C3] RIP: 0010:__queue_work+0xd31/0x12b0 [ 231.452379][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 33 3d 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 231.458580][ C3] RSP: 0018:ffffc900006f8be0 EFLAGS: 00010046 [ 231.460471][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100782494e [ 231.462902][ C3] RDX: ffff8880270dc170 RSI: ffffffff8aad4260 RDI: ffffffff91258440 [ 231.465387][ C3] RBP: ffff88803c124a58 R08: 0000000000000005 R09: 0000000000000000 [ 231.467788][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880270dc000 [ 231.470244][ C3] R13: 0000000000000000 R14: ffffffff81cf4ca0 R15: 0000000000000001 [ 231.472691][ C3] FS: 0000000000000000(0000) GS:ffff8880d60e6000(0000) knlGS:0000000000000000 [ 231.475449][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.477562][ C3] CR2: 0000000000000000 CR3: 000000000e992000 CR4: 0000000000352ef0 [ 231.480040][ C3] Call Trace: [ 231.481107][ C3] [ 231.482046][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 231.483851][ C3] call_timer_fn+0x19a/0x610 [ 231.485315][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 231.486948][ C3] ? __run_timers+0x560/0xb00 [ 231.488438][ C3] ? __run_timers+0x560/0xb00 [ 231.489928][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 231.491753][ C3] __run_timers+0x570/0xb00 [ 231.493213][ C3] ? __pfx___run_timers+0x10/0x10 [ 231.494825][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 231.496490][ C3] run_timer_base+0x114/0x190 [ 231.498033][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 231.499685][ C3] run_timer_softirq+0x1a/0x50 [ 231.501212][ C3] handle_softirqs+0x1ea/0x9b0 [ 231.502724][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 231.504385][ C3] ? _raw_spin_unlock+0x28/0x50 [ 231.505892][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 231.507670][ C3] __irq_exit_rcu+0x162/0x210 [ 231.509168][ C3] irq_exit_rcu+0x9/0x30 [ 231.510508][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 231.512280][ C3] [ 231.513195][ C3] [ 231.514145][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.516029][ C3] RIP: 0010:__fput+0x51e/0xb50 [ 231.517550][ C3] Code: 00 01 00 31 ff 44 89 e6 e8 8f fd 7a ff 45 85 e4 0f 85 9b 01 00 00 e8 11 03 7b ff 48 8b 7c 24 10 e8 87 36 07 00 44 8b 64 24 0c <31> ff 41 81 e4 00 00 00 10 44 89 e6 e8 61 fd 7a ff 45 85 e4 0f 85 [ 231.523468][ C3] RSP: 0018:ffffc900034e7a70 EFLAGS: 00000293 [ 231.525374][ C3] RAX: 0000000000000000 RBX: ffff888037421180 RCX: 0000000000000000 [ 231.527848][ C3] RDX: ffff888045418000 RSI: ffffffff82961044 RDI: ffffffff8c401480 [ 231.530348][ C3] RBP: ffff8880374211c0 R08: 0000000000000001 R09: 0000000000000000 [ 231.532805][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000002080003 [ 231.535261][ C3] R13: 0000000000000003 R14: ffff8880374211c8 R15: 0000000000000000 [ 231.537702][ C3] ? dput+0x24/0x30 [ 231.538902][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.540532][ C3] task_work_run+0x150/0x240 [ 231.542000][ C3] ? __pfx_task_work_run+0x10/0x10 [ 231.543603][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 231.545245][ C3] do_exit+0x951/0x2ae0 [ 231.546558][ C3] ? __pfx_do_exit+0x10/0x10 [ 231.548035][ C3] ? do_raw_spin_lock+0x128/0x260 [ 231.549625][ C3] ? find_held_lock+0x2b/0x80 [ 231.551128][ C3] ? get_signal+0x7e0/0x21e0 [ 231.552594][ C3] do_group_exit+0xd5/0x2a0 [ 231.554046][ C3] get_signal+0x1ec7/0x21e0 [ 231.555481][ C3] ? __pfx_get_signal+0x10/0x10 [ 231.557048][ C3] ? do_futex+0x190/0x440 [ 231.558417][ C3] arch_do_signal_or_restart+0x91/0x7e0 [ 231.560179][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 231.562106][ C3] exit_to_user_mode_loop+0x139/0x6f0 [ 231.563798][ C3] ? rcu_is_watching+0x12/0xc0 [ 231.565322][ C3] do_syscall_64+0x666/0x870 [ 231.566794][ C3] ? clear_bhb_loop+0x40/0x90 [ 231.568276][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.570119][ C3] RIP: 0033:0x7f88fc79de99 [ 231.571513][ C3] Code: Unable to access opcode bytes at 0x7f88fc79de6f. [ 231.573669][ C3] RSP: 002b:00007f88fd6900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 231.576240][ C3] RAX: fffffffffffffe00 RBX: 00007f88fca25fa8 RCX: 00007f88fc79de99 [ 231.578718][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f88fca25fa8 [ 231.581178][ C3] RBP: 00007f88fca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 231.583599][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.586032][ C3] R13: 00007f88fca26038 R14: 00007ffd3817d8b0 R15: 00007ffd3817d998 [ 231.588493][ C3] [ 231.589479][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 231.591712][ C3] CPU: 3 UID: 0 PID: 13637 Comm: syz.3.2256 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.595056][ C3] Tainted: [L]=SOFTLOCKUP [ 231.596358][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.599493][ C3] Call Trace: [ 231.600545][ C3] [ 231.601465][ C3] dump_stack_lvl+0x100/0x190 [ 231.602969][ C3] vpanic+0x552/0x970 [ 231.604242][ C3] ? __pfx_vpanic+0x10/0x10 [ 231.605692][ C3] panic+0xd1/0xe0 [ 231.606916][ C3] ? __pfx_panic+0x10/0x10 [ 231.608333][ C3] ? check_panic_on_warn+0x1f/0x90 [ 231.609970][ C3] check_panic_on_warn.cold+0x19/0x34 [ 231.611653][ C3] ? __queue_work+0xd2d/0x12b0 [ 231.613162][ C3] __warn.cold+0x191/0x318 [ 231.614569][ C3] __report_bug+0x30f/0x440 [ 231.615986][ C3] ? __queue_work+0xd2d/0x12b0 [ 231.617519][ C3] ? __pfx___report_bug+0x10/0x10 [ 231.619116][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 231.620946][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 231.622592][ C3] ? find_held_lock+0x2b/0x80 [ 231.624014][ C3] ? look_up_lock_class+0x55/0x120 [ 231.625544][ C3] report_bug_entry+0xe1/0x290 [ 231.626976][ C3] ? __queue_work+0xd31/0x12b0 [ 231.628406][ C3] handle_bug+0x1cd/0x2a0 [ 231.629689][ C3] exc_invalid_op+0x17/0x50 [ 231.631084][ C3] asm_exc_invalid_op+0x1a/0x20 [ 231.632606][ C3] RIP: 0010:__queue_work+0xd31/0x12b0 [ 231.634297][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d 33 3d 56 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 231.640211][ C3] RSP: 0018:ffffc900006f8be0 EFLAGS: 00010046 [ 231.642107][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100782494e [ 231.644531][ C3] RDX: ffff8880270dc170 RSI: ffffffff8aad4260 RDI: ffffffff91258440 [ 231.647130][ C3] RBP: ffff88803c124a58 R08: 0000000000000005 R09: 0000000000000000 [ 231.649702][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880270dc000 [ 231.652174][ C3] R13: 0000000000000000 R14: ffffffff81cf4ca0 R15: 0000000000000001 [ 231.654634][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 231.656457][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 231.658222][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 231.660054][ C3] call_timer_fn+0x19a/0x610 [ 231.661525][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 231.663128][ C3] ? __run_timers+0x560/0xb00 [ 231.664604][ C3] ? __run_timers+0x560/0xb00 [ 231.666093][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 231.667945][ C3] __run_timers+0x570/0xb00 [ 231.669387][ C3] ? __pfx___run_timers+0x10/0x10 [ 231.670980][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 231.672591][ C3] run_timer_base+0x114/0x190 [ 231.674097][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 231.675728][ C3] run_timer_softirq+0x1a/0x50 [ 231.677276][ C3] handle_softirqs+0x1ea/0x9b0 [ 231.678778][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 231.680466][ C3] ? _raw_spin_unlock+0x28/0x50 [ 231.682007][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 231.683767][ C3] __irq_exit_rcu+0x162/0x210 [ 231.685257][ C3] irq_exit_rcu+0x9/0x30 [ 231.686596][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 231.688377][ C3] [ 231.689325][ C3] [ 231.690277][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.692151][ C3] RIP: 0010:__fput+0x51e/0xb50 [ 231.693680][ C3] Code: 00 01 00 31 ff 44 89 e6 e8 8f fd 7a ff 45 85 e4 0f 85 9b 01 00 00 e8 11 03 7b ff 48 8b 7c 24 10 e8 87 36 07 00 44 8b 64 24 0c <31> ff 41 81 e4 00 00 00 10 44 89 e6 e8 61 fd 7a ff 45 85 e4 0f 85 [ 231.699623][ C3] RSP: 0018:ffffc900034e7a70 EFLAGS: 00000293 [ 231.701541][ C3] RAX: 0000000000000000 RBX: ffff888037421180 RCX: 0000000000000000 [ 231.703998][ C3] RDX: ffff888045418000 RSI: ffffffff82961044 RDI: ffffffff8c401480 [ 231.706455][ C3] RBP: ffff8880374211c0 R08: 0000000000000001 R09: 0000000000000000 [ 231.709016][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000002080003 [ 231.711476][ C3] R13: 0000000000000003 R14: ffff8880374211c8 R15: 0000000000000000 [ 231.713961][ C3] ? dput+0x24/0x30 [ 231.715195][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.716863][ C3] task_work_run+0x150/0x240 [ 231.718321][ C3] ? __pfx_task_work_run+0x10/0x10 [ 231.719950][ C3] ? do_raw_spin_unlock+0x145/0x1e0 [ 231.721602][ C3] do_exit+0x951/0x2ae0 [ 231.722931][ C3] ? __pfx_do_exit+0x10/0x10 [ 231.724394][ C3] ? do_raw_spin_lock+0x128/0x260 [ 231.726039][ C3] ? find_held_lock+0x2b/0x80 [ 231.727543][ C3] ? get_signal+0x7e0/0x21e0 [ 231.729027][ C3] do_group_exit+0xd5/0x2a0 [ 231.730476][ C3] get_signal+0x1ec7/0x21e0 [ 231.731894][ C3] ? __pfx_get_signal+0x10/0x10 [ 231.733393][ C3] ? do_futex+0x190/0x440 [ 231.734769][ C3] arch_do_signal_or_restart+0x91/0x7e0 [ 231.736476][ C3] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 231.738446][ C3] exit_to_user_mode_loop+0x139/0x6f0 [ 231.740130][ C3] ? rcu_is_watching+0x12/0xc0 [ 231.741616][ C3] do_syscall_64+0x666/0x870 [ 231.743033][ C3] ? clear_bhb_loop+0x40/0x90 [ 231.744485][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.746330][ C3] RIP: 0033:0x7f88fc79de99 [ 231.747699][ C3] Code: Unable to access opcode bytes at 0x7f88fc79de6f. [ 231.749827][ C3] RSP: 002b:00007f88fd6900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 231.752395][ C3] RAX: fffffffffffffe00 RBX: 00007f88fca25fa8 RCX: 00007f88fc79de99 [ 231.754919][ C3] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f88fca25fa8 [ 231.757371][ C3] RBP: 00007f88fca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 231.759802][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.762273][ C3] R13: 00007f88fca26038 R14: 00007ffd3817d8b0 R15: 00007ffd3817d998 [ 231.764715][ C3] [ 231.766493][ C3] Kernel Offset: disabled [ 231.767879][ C3] Rebooting in 86400 seconds..