last executing test programs: 59.572395339s ago: executing program 0 (id=605): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x4) getdents(r0, &(0x7f0000000100)=""/77, 0x6a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x4, 0xf}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xe, 0x6, @vifc_lcl_ifindex=r3, @broadcast}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000180)) (async) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100001000000000000000000fe8000000000000000000000000000bbfc0200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 59.511283552s ago: executing program 0 (id=607): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x258, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xd, 0x3, 0x5919e514, 0x1}}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x101, 0x4033e375, 0x4bb5, 0x1400b, 0x8000, 0x80, 0x3}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x1, 0x0, 0x0, 0x300], 0x5, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x458) (async, rerun: 32) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'pimreg1\x00'}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async) getpeername$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in=@empty, @in=@broadcast}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000a00)=0xe8) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1041110}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)=@delpolicy={0xac, 0x14, 0x200, 0x70bd28, 0x25dfdbfe, {{@in=@local, @in6=@loopback, 0x4e23, 0xfc01, 0x4e24, 0x0, 0x2, 0x80, 0xea05ca2dce8bed37, 0x62, 0x0, r1}, 0x6e6bc0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha3-512-generic\x00'}}}, @coaddr={0x14, 0xe, @in=@remote}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x4) (rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0x58, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x9, 0x1, 0x1, 0x1, 0x5, 0x9f}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x3, 0x2, 0x1, 0x1, 0x1, 0x4}, 0x2, {0x1, 0x8, 0x2, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 59.50444036s ago: executing program 0 (id=609): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xffff, 0xc, 0x1, 0xe, 0x7}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x8000, 0x7, 0x200, 0x6, 0x8, 0x5a4, 0xffffff37, 0xffffffff, r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19020, 0x1000000000) 59.439631417s ago: executing program 0 (id=613): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fsopen(0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01ffffff7f00000000006700080008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c4"], 0x30}}, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) 58.20950327s ago: executing program 0 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x2000400c) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r5, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0x2}, &(0x7f0000000140)=0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write(r0, &(0x7f0000000540)="7b385cd8d5cdda485bb7aec4c5af92a63321bc05583328a930d39e76bf9e4f4e503d2b77776eded6b6415a94da0815e120e69e84f1e77b015ca6208e8efc83974822d343a368ae4fbea19157bda2e784e167ff458625b2b1a05b862df034fef0f5e969f8a24ea20ba75a8b90297e86862be7e1113565ca53d04bc58a55fa299b665ac6dbf3d6c32114ed18346d8025edd52c9a9967df244e443c850c5652ebfd44eb02847d46fcdd6832cd", 0xab) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x0, 0x700, 0xd, 0xffff, {{0x21, 0x4, 0x3, 0x8, 0x84, 0x64, 0x0, 0xf1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local, {[@ssrr={0x89, 0x23, 0x2c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @empty, @rand_addr=0x64010102, @multicast2, @broadcast]}, @timestamp_prespec={0x44, 0x4c, 0xdc, 0x3, 0xe, [{@private=0xa010100, 0x6}, {@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x8}, {@local, 0xfe}, {@rand_addr=0x64010102, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0xf54}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x7}]}]}}}}}) userfaultfd(0x80001) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=@ipv6_deladdrlabel={0x30, 0x49, 0x300, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x3f, 0x0, r11, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4044081) 57.259646395s ago: executing program 0 (id=636): r0 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xfct\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r2, 0xff99, 0x8, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x1c4}, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000040)=0x1f) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 42.036676831s ago: executing program 32 (id=636): r0 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xfct\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x24, r2, 0xff99, 0x8, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x1c4}, 0x4) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000040)=0x1f) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 25.827173207s ago: executing program 2 (id=1020): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, {0xeda7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) ioctl$KVM_RUN(r8, 0xae80, 0x0) write(r5, &(0x7f0000000040)="a9", 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff06350056", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf255300000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x40000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0x1ffd, 0x80, 0x3231564e, 0x1, [0x2], [0xfffffffd, 0xffffffff, 0x4ec], [0x0, 0x1, 0x800000, 0xfffffffc], [0xa1d6]}) socket$unix(0x1, 0x5, 0x0) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) bind$unix(r10, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 25.658126299s ago: executing program 2 (id=1025): r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet6(0xa, 0x4, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002740)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x29, 0x81, &(0x7f00000002c0)=""/129}, &(0x7f0000000140)="8536b60bfad6", 0x0, 0x9, 0x10000, 0x1, 0x0}) 25.554275806s ago: executing program 2 (id=1028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03032abd7000f0ffff000600000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 25.553777553s ago: executing program 2 (id=1030): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x40000, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000400)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000440)={0x3b, @multicast2, 0x4e22, 0x3, 'fo\x00', 0x20, 0x8, 0x4e}, 0x2c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x76) close(0x3) (async) open_by_handle_at(r3, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0x12, 0x9}}, 0x0) pread64(r0, &(0x7f0000000040)=""/152, 0x98, 0x7) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a8fdffffff0d7a9d3ac869f3a86091758e5086f64579f9cd656422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 25.479808994s ago: executing program 2 (id=1033): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbf6000000000086dd6100000000103afffe8000000000000000000000000000aa0000000000000000000000000000000186009078002d06009909000032590000"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', &(0x7f00000004c0), 0x8017, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000040)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, r3, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xfff, {0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r8 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {r4, r5}}, './file0\x00'}) write$FUSE_STATX(r2, &(0x7f0000000400)={0x130, 0x0, r3, {0xffffffffffffffc0, 0x7f, 0x0, '\x00', {0x1000, 0x0, 0x1, 0x7fffffff, r8, r9, 0x0, '\x00', 0x6, 0x110, 0x2, 0x6b, {0x1, 0x5}, {0x4, 0x40}, {0x2d, 0x1}, {0x0, 0xfffffe01}, 0x7, 0x1ff, 0x4, 0x7}}}, 0x130) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000040)={@remote, r7}, 0x14) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x101, r4, r5, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) ioctl$IOC_PR_RESERVE(r10, 0x401070c9, 0x0) 24.629518453s ago: executing program 2 (id=1037): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000000000ffffffff9500000000400000"], &(0x7f00000002c0)='syzkaller\x00', 0xf}, 0x94) 19.145185505s ago: executing program 3 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="03032abd70000000000006f0000008000300", @ANYRES32=r2], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 19.068128281s ago: executing program 3 (id=1097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c804}, 0x11) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080844) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x4000}, 0x4875) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb97}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0xf}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x89}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2b}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008090}, 0x8800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000001700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000680)={0x1034, r6, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "a301b378f84f0f152b5c23e131fe3ee8a381aa958d1af3465ac360b76fc0e9996b28cbcf9fc3c37554cac248ed58de81e175b683904ee365a1261315609292ee8a30afcaac898884fd2047a70224760a4e3d771dfbf86daf64180625cc7e5d505c4983d875181b07aa6e7fb7c9a2abd926a823a0b47968e573bd48cdc2e950bf500a96ecd350efdb2dc29d289f2f8873ca67c3ccd5352837696f79c4e0a25be5abdee08d249ec661938eabf564ec6b28c6e18fcbe361539246b80b79cbc0e351658b264ab62b21598058505336813331083d9c013e2ea0bf97065d91d33b0bdbb9f6fce4d87d9ab3989a1a95ca630034d578da621fd695fd11e3514b0af1854ce054f84a2301f33785de13375e3cb2c4af00746163aad76ba93d084b4f0b18416f5e55a647a7ab3857487be98cab2e3f76d182c7738d45c7fe880c59c071d297f716d93bc2a18f4e3751027f73456cfbbd09ea7fe693c32b1e6d072ccb085931485f8e1097f24232777fe4a12b783698dad329559a6d80dc4e463e11ce82ca5e40c4aa7e4af276b6341d2a538ff50f7d93b9a3aed560546cfea64ab1756a3a67049970c1d2d8ba44c8acacdfebaade2a3a9dfbba1eb0d4c9d1f39eb02418b4729438f23ea52186c363f79e544c66170c8f2f50244bdee6139230924abd89b6b93940d7222b37a161af21234d00f438b49e8fa4d848eabc18788bf76b1fb1433ba148c05138503b625bef4d1b44c9e5727a6b541101d83ff131fc81e427283cd062b0b235555ef285e82807950397f117bc7e087da01c3bf97c1dbcb057000602daaa8573340f3be46c65d7f99f1873798dbf4f057a0e288a20bb4d8488d77110fc7182e3cef5a9ef87424e382a09f1fcb2f3f51b2b8b399df5d83753611412a1c1a6a3c9185de3d4a6108f2b69ad03acd3f6483acd2e5717dc47328be522e499ae43834f385ee4528d454e4cd6eb7589a47bb66cba3f871f5dced2795e48fb3a74bd7671d339b87f3751ab6853d0f1da1ab8d9a6b70d06f980abc5603e9d266717261c23743bba13d62f58327946fc8020fc0dac57546e0ad129e504ef5bdae3937f1cc8770f4c50a724815b588ada091c3014a4b28be2821b676818dc271b4afea0b60a3d2231bf4a8150b8655b5a440dffb1f064f51d898c46b9dbd10f73aa0eb963e0fa3ad0d49397b286135834db7bb40ca449ca0c4dc7beb1e2eb246453cd850973066e45ae6834f3acc03a9c211171d3e58da561522d908e9d43424a615b08993cc3d6c391e671c1c3ff90548873436e16565d24e25db369509c3b44fac2ac320bdc5c7c8f68dfc7a6d1521da1a398c26ae3fb8903c095721954301cbde9328b4e5ffc72ff9e4170fdf295e1d60e9e1310de541506c676627aea1e2f329fc53723982ec33b17abff54554e1aba20bad5f184c9a7b8b920e1ce9cb4ad011991bedf85119937b77d08d1afce8614818e3a3a794bd81d4446d4a6740cfc6f420e6fb9c5394e4679b9bbb57ff334ab7a4ec401e92336c3f0dccb0d411c149385e422dd270656cdaab093bad009c41239b391accbb752485f8a03d1385793d6243c0544f5852c683c15daf5abd097dfbf21970a4b465f77aaea181ad5fc0bffd2c3a72844802b4a7b35259135345a07df64853958fecf40aea22219c305922e32f8b7a2269242904734ad09690fb4d2b912b2ac1905e79d4ab6634f7e42631a13267b91608ceb10450ecd9c22452dcfb0de4eb6d9999a67d7d595d1110436a27db1672c6dc229bc1755a1cb27eeca0328e8000551f046a0834a36e4763ae7c9fda4090d50691b35fd086cb7ba113d517cd0fe781f0d30f60589f7671aab08fbd2f7ff0e7431ca106fefae287766e717281cb527c6cc33cff23e19fa52a55b4bd19672393ca3370cf3490e45533e9c349092917932961027f690b48316aaed5791567b09bb1708fa6ce1e65c5b1360b00738e0b8d0d70847cfa52db61dc71b957f752cd52d7d06a9f9fba37e75304118ff84b40c1e6209b7903410f6a0a8df69c04245807328d262d861293672f8e10de23f9c016c32df0a4ef817982dcd638257c385b81b5fb350d13d63238a1b63748be60b0937c1df19a0d3ac11df6da789d74a1a118d9c2a80d999999461658caae6ebc8be8992a5867081a63e076ce98db05af3dc62ce7fae804af0073794dc8b61bf0eed09d96cdbca7021c0e8d7cf2684081e5d75910ccf377587e9fcfb811699e607de628a389086d2699847a69886dc603f4e558a074a7af1926f486d5f7c06a688f602e45cf02cd418abfa003fb6c64e72168bcbcdc7a5ff6264529cbf6ee5cc90f55494354c4041875b685882a3bf76f1a6f21f1e81008b5badaa527296e3447716f96341f686c508e49a8ac4c6fd2161dc12742fb46824efe00064ba181c52ee1138c67132eddb32618d06ce0549e8849287999b1b1f28eec368c4ad23a3efced1fe7ad75e3bea583920951b3538320e5089620b5a4ec564e1463a7486ed5d8473105cddd922fcb35c9af493bfa29d8dee50cc22ecbb1d8a0f4ebc3ea2a062070de14a6cca65e39a6f4a9aaeefb1dd516e79f4e9b2ea980c440615a68005d2bff8f70ff9e4a5cd4799ed339dffc8011275a08b464fe6289d908611aac06edc65913e9b2b8b94b1d609a930365c200fb3d8601d1a59f9988cd2bc3752bb86c4c79124bcc2d3519c667c0f5a989165e5da05271fa5a53bee6affc14f6faabf749db87225ee10bf1a86ae52069d432c557db3b9306f3440950b5c2237bf54598f9b9473229c25451da8058aedbb4c6e985baa2840c1de13d4378e75eeb6d63d2aa054698fe06bc14ddf0c8a845a2c98d0c4fc4f0424d059de68ce6961ae1ab9ec3e2cb2931a9c8f5ebc058a26a335c933ddf89ce2bfb53a4b3225557b0276ff3f9ffa212fd671e5d2b5b7ddb23e9666251a226c959a3e07c907258bae0f3ad5bde68830580e898597aaecb1ae9e7eca1fe44c94228fd37e3e61a9ff7add84ea90bf9c074511b6d08d67a5fd6f9f5a1b62b8c860be4aabd585b90e9d85bb981c2ffdbcb1cdf9e4c91a5974a98c5ed7c4a5223c23308bfa48d9866277917132776dc33c8f5fb02b77a587b1a65ad64b0afec2f3427a6f69025289ce1bb182a3eab54c7f9816219c095841055d61ed85a3cba6265f41ea4224a781faa2495ca119ff8db03e5e8c011f9b2fa0e6f791754c2fd092738810e1f71cfa8a5efc1a3d710fe6bd6090fbab9662c302582d27ac3c1bc951a1e14882c07e3fbd69453ec088b84415be0d14ac916dadc02b24814c5e83d12693bd4bf69ad4951e7c8ad5e18534f7199d43f3d628600227bba6e3476de40d70ea3cb25c4fea78f12726358cdb4e92f4a871fbb2cf329bfb9d933a7f21787f10682a32ccd45b9cb6613b123fbd236f9a12cc88b08e70f503a94c756c756d9e76b19b7fe47dd65f5f89500c63aa839d194c1c1530c7907274951590393389e264c8d6af975415360ec3501b44277090018f6e05041ad95b33ff510ea2b39e8ead9db2701a34952bfe3caf1d734a6a5dcae221143cdf8a2390543adbc186f304b5d0e304c8f0899bf1f055a250e9eae743b76299d0fc7dca4c90fc404793eec3a0eed0c53c41a1bee53a1881813bd7af3c733e078d9f6983caab2592ad58e3636d5580eb2881c8fb23aee1fabe76ffd83bb674280d437ae120a2d7b76eb14930461ec2144db4912e6b8869c09d34ac11bf0405d942bb0cef0317cb5bfebfb8462ed7672736fe0257f0779f0939bfc173a03f3f9c189f891279689fd17965d746dc2fad0a9079959580b2b8874a2a5cf5cfcfc025057b27c3100e28ced6838ecf323bdcf0946e283971ef73997ac9f326e9aada8d7f24bcba337e62ab37a7e038f0bfda19db89d4e7f9b9bae92ad2b15b407a97973a358d0ad58a9b87e2196da780fb6d1b5d1566ed9b21c66d532f4a309414800f7b6e783b414cc6a1ad4facde2abd27cc9b22864ce6fd12a02afde06e5bb60f6cce9582a61b47279d254ce2fd0f7d5e812b352063261307c7abace694a1cce2820bc4b169e11a405746ee47914cc3c7561f2a3d04401cbd14287d970791d6196daaaf77948798b015fcb9fdfdb3a14d879ac0fac95849568be3b704cd053ceb14b8a3acc38314f8ec67bd90e8065d8b3536ed35a78f033e8157ae5cf1e41f238333f07cbd502695fff42f37cce00b821c75eff419ea3743b5a925158378a4378ebfc60924d6052af2bbf349038e14dda761dbc0721b6f91a2685a167b4abd478aa84b7fd890462e275f9871270ddbfa7b151194ed942696ff3165b686f49d119ee2ed87da83b1b2ffa1dd11aff96ac3186491a486fe92670bc81ddfad6d98c22be6757eb94b380cb554c98b8d0c0e262aa064c080e3cb659be890aaacdf30929a61b658b1b861efc94d9eb19b6485d0ab72955fa25937bc904031d68a49ae5c97529cf48a943d5c05a8174037f5619c56af4b6e5dce9f1a3151d4683a71f2a9db270344c5757edb03e3c71a712385271495819fcf72650fb7626795cb9e7b869878b0ce554a66bbac32a1dfa30fa6347138c41ee745bae73333a140f7d1e5e5c4d881def730b6934174626c445ae0cb6e8dc21efa9c760e63b27d66ea43cdb0f646eaed3adbbb410a0840a1f2abf7c7d8043de1ff8a48cd7951bb8e40f7cd00fff63dd4a5fbbcf46d82c035e8c2d08ea50d0b26f9c9f64b2cc99403fb5ad3f8433c214cd805613d9eb2a956d06c47b29eb5bb5c7873062136870525cb07a3a6605f2e6e960a7e5247b455372ba84d4cefafc7a4f4d37ece42f898cf45afe5954b19ebd0a1ef20d869e0ed0f0047717af8bad8e9db88a7dd870288869cee05cd6beb31f289a5f53d3f7d34d178b7cf73d41048666bd97c4586b0ca5cbc3d050733d846ea80e9b2bc56a5a9f8e28f66d2a6c3b6b50f71087be32acaa8707a2814df21af58a680f5d0e4ec319ff4991e6d7f85d34b3740874176f97930728046f483113986a10f9462762142656d47cf03e7e37b927d3d1a3c98b864318512cf7bfbc880fb32252048c2a889876f4c79ea75eeea56bfdc3e719e929844ae8dfa5f4d6c1730fdfef3e906201298910f377a591efd9468479603a6f9c824a18db4d15aea3493edbea22d81cff92d32a7021fbb71f31c02bca17d84ad6adc2cc9baec2fdd37a128a5857d6f200948c8b073fdf9ddbd72ce33562ba187bf9a7c990a9d616d39923413945c32518e1592ab142f6ecfacb2d5540a9025cf28e1b1a8496ad48b69f91fccc84593256165c1410db17ac838e944b8a643fd877c334291ebfe2442b8404a4cce0d24fb6b029ed1167ec32a8f0d26459b2622b8556b10e642f99482ca98c0b51c8a253e13ea53f7a85b8a05b008f8061e4cc5ddb70e04e8ce687b98b2d0dce4f9c66f399808402b4640b3bfe76740ed0d537c64e9815955313ec2f7cce287756f80e601ffdc9f8e5868ec108a11cc740d579b8486fcdb5fc02dc1440c376f2388a10be79abbcf99558cd698cb341d368b1b7f3c5d392400a70115f8469818bfb10e0045e2539ffc575ff93a04316b1ff0b247042305a29ca8b73a1b2996772f71f5dd4add9006c44ba8531dcab1053b35cbe438765a1d3651758e9c3d42bd53a751447b075389fff5391a9b2f5dcd9d9b0b3d2bf5a615a7d759ca6698d9d864901023ea967d7bb40ce4b9fd2c93c8f12a5510ac8107f0a49e816af41c18b21b83dba4568acd23e05a1709dde935713dfaa33aef9bd02859ffdb34d1ef31f2aac374f26f"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x1034}, 0x1, 0x0, 0x0, 0x50}, 0x81) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000001740)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x83, 0x80, 0x86, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x2, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x450, 0xdb, 0x6, 0x4a}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x8, 0x1}}]}}}]}}]}}, &(0x7f00000019c0)={0xa, &(0x7f0000001780)={0xa, 0x6, 0x300, 0x8, 0xfd, 0xfa, 0x10, 0x8e}, 0x98, &(0x7f00000017c0)={0x5, 0xf, 0x98, 0x4, [@generic={0x86, 0x10, 0xa, "97e384131685516d51f28f61a65c4d5da69ec213b305d30c5116a6f26dbcaca8abcc373b766d4a2ea273d708013a828dc99c545c12360a7aa36cbb34e999eec0fb6ea2192a8968dfb7e372970d10f284d85c3c80d998e80250f1703dd3845ce0aa961814c45d7157328d2e04b93f98dc258e4b856805410de12b2e8f323fad9c6130ed"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x4, 0x3}, @ptm_cap={0x3}]}, 0x3, [{0xaf, &(0x7f0000001880)=@string={0xaf, 0x3, "fbb2ae8a1d22b6dcac15bde2d57ce5d81751a075291f390247b5562236763db6a47b59567915d607d846e26e1eb567af3fff8a613f1873486b3e5ebcceeefcc3e8f2f8168aa8a9216b042d1ad1ffb06cd271e202f73073a3e55f1a83a877f305620f4f4c165aff40dfec601e4f967e256d7c75738bd7622ea48b1ca4959cdb2832951df9e049047a62a98f596345150ef024b320c13b6ca664cad2d0a4a69d45c0b8be426a03e990d5e03c4594"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x44c}}]}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x71}}}}, ["", "", ""]}, 0x20}}, 0x40000c0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000001b00)={0x1f, 0x3, 0x4}, 0x6) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000009) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x3c, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x83}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x9c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffffffffffffffff}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24000054) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001ec0)={'wlan0\x00'}) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000002140)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002100)={&(0x7f0000001f80)={0x178, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_FRAME={0x124, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @device_b, @initial, {0x9, 0xf}, @value=@ver_80211n={0x0, 0x3862, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @void, @void, @val={0x3, 0x1, 0x15c}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x2, 0x0, {0x9, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x400, 0x2, 0x9}}, @void, [{0xdd, 0xa8, "fb02ea6e93f06bb0cd40e58a831926f095d4572c0e3f90ca1bc4bdcffb969fa52a34d1d70d5a1f1492a78d0a918e26e84c7dc814021d7c647af2c66ea42f90e6fc713ece42f7c167b5588660d52f78eb19a5dbd01a692458b49dc5f395352ea7a7a6fdbd8e707cdbb5e9646dd5bffbcfaee1d3c63fa82acf4b753e61e4f3a3ac1d0f6c377397ec73f3d6f3fec2db31ddccb8e10f0831ba624051167bdad8d37c13236f0854d3f393"}, {0xdd, 0x39, "f1333483df398d86e629b9dbf7ffe0ddc9d54d171fa75a81e975ec833542bc5d9fcf14e31f3ee8c62d9f061bbec47cb49a59bf5a0f6816b542"}]}}]}, 0x178}}, 0x4048081) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000021c0), r0) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x2c, r13, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x480) sendmsg$netlink(r0, &(0x7f0000002580)={&(0x7f00000022c0)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002340)=[{&(0x7f0000002300)={0x14, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x4, 0x46}]}, 0x14}], 0x1, &(0x7f0000002480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r10, r0, r8, r11, r0]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x14, 0x1, 0x1, [r10]}}, @rights={{0x1c, 0x1, 0x1, [r10, r9, r8]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, r8, r8, r11, 0xffffffffffffffff]}}], 0xf8, 0x8840}, 0x20000001) 17.898266038s ago: executing program 3 (id=1109): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x5, 0x0, 0x80000001, {}, {}, {}, 0x2, @canfd={{0x4, 0x1, 0x1}, 0x2a, 0x3, 0x0, 0x0, "64c42af2b1655b1799d789c2c809b3d7f9de635395977c2116c876779664d5df19ea62780080ed2d131655e920c594349ce4018ace69baa99cce0994f1a8670a"}}, 0x80}, 0x300, 0x0, 0x0, 0x20000000}, 0x0) 17.894204352s ago: executing program 3 (id=1111): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r1 = fsmount(r0, 0x0, 0x90) symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00') r2 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x8, 0x4, 0x7, 0x38, @remote, @remote, 0x8, 0x7, 0x100000, 0xfffff968}}) fsopen(&(0x7f0000000000)='bpf\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) (async) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) (async) chroot(&(0x7f0000001140)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') (async) fsmount(r0, 0x0, 0x90) (async) symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000300)='./file0\x00') (async) socket(0xa, 0x3, 0x3a) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x8, 0x4, 0x7, 0x38, @remote, @remote, 0x8, 0x7, 0x100000, 0xfffff968}}) (async) 17.813976999s ago: executing program 3 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x31, 0x455965fb809f3fbf}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x66}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x9}, @ETHTOOL_A_COALESCE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xa}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x9}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x101}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x3}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x20000800) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r6 = fsopen(&(0x7f0000000080)='ecryptfs\x00', 0x0) r7 = fsopen(&(0x7f0000000040)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x82) fchdir(r8) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x24008045}, 0x4000050) 17.813634706s ago: executing program 3 (id=1113): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, r2, &(0x7f0000000200)) r3 = dup(r0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) write$sysctl(r3, &(0x7f0000000400)='0\x00', 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x1, 0x0, r3, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17.704590644s ago: executing program 33 (id=1113): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, r2, &(0x7f0000000200)) r3 = dup(r0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) write$sysctl(r3, &(0x7f0000000400)='0\x00', 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x1, 0x0, r3, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9.558942003s ago: executing program 34 (id=1037): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000000000ffffffff9500000000400000"], &(0x7f00000002c0)='syzkaller\x00', 0xf}, 0x94) 2.699392923s ago: executing program 4 (id=1318): r0 = socket$l2tp(0x2, 0x2, 0x73) (async) setpriority(0x0, 0x0, 0x2) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b05, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3ff, 0x0, 0xd2}, 0x9c) (async) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) (async, rerun: 32) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @empty}, &(0x7f0000000240)=0xc) (async, rerun: 32) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) tkill(0x0, 0x29) (async, rerun: 64) sendmsg$kcm(r7, &(0x7f0000000e40)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x3, 0x2, {0xa, 0x4e20, 0x3c1b, @remote, 0x5}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="bd61b70eb54527d974cf69521f38", 0xe}, {&(0x7f0000000440)="10d7920f", 0x4}], 0x2}, 0x200008c0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x78, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x80000001}, @ETHTOOL_A_CHANNELS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xe}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x82b}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x9768814ca97e43ea) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e22, @broadcast}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd], 0x0, 0x8340}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) (async, rerun: 32) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0xfffffffc, 0x0, 0x300, 0x0, 0x54, 0x6, 0x1}, 0x9c) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x15, 0x800000000004}, 0x0) 2.645311754s ago: executing program 4 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x9b, 0x5, 0x8, 0x53, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x20, 0x20, 0x3, 0x5f5}}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newaddr={0x44, 0x14, 0x2, 0x70bd2b, 0x25dfdbfb, {0x2, 0x20, 0x9a, 0xfd, r1}, [@IFA_FLAGS={0x8, 0x8, 0x81}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3ff}, @IFA_LABEL={0x14, 0x3, 'syzkaller1\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x5) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4080, 0x4505}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4080, 0x4505}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000040) 2.096178406s ago: executing program 4 (id=1328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000050005000a00000005000100070000000900020073797a300000000005000400000000001400078008001340001f0000080006400000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xe3\xbd\xea\xb7q\x837\xff\xac\x1c\xba\xf0]\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\t\x00xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\x81*\\\x16:O\b\xe0\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf', 0x0) io_submit(r4, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340), 0x41}]) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ea, 0x5}}) poll(0x0, 0x0, 0x1ff) 1.878052145s ago: executing program 4 (id=1332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x4, 0x70bd2c, 0xffffffff, {0x0, 0xcf, 0x0, 0x0, 0x3}}, 0x20}}, 0x20040004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r3}}]}}) sendmsg$nl_generic(r1, &(0x7f0000002200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000021c0)={&(0x7f0000000100)={0x2090, 0x32, 0x2, 0x70bd2d, 0x25dfdbfd, {0xd}, [@generic="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", @nested={0xc, 0x2d, 0x0, 0x1, [@typed={0x7, 0x96, 0x0, 0x0, @str='\'/\x00'}]}, @typed={0x8, 0x81, 0x0, 0x0, @uid=r3}, @nested={0x1047, 0x87, 0x0, 0x1, [@nested={0x4, 0x116}, @nested={0x4, 0x135}, @generic="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", @nested={0x4, 0xa9}, @typed={0x8, 0x4f, 0x0, 0x0, @u32=0x35e}, @nested={0x4, 0xc7}, @generic="67c4ad048735384e903cd54a1ad1ea7f7e00e7f56ac7076b650075737f27f1", @typed={0xc, 0x138, 0x0, 0x0, @u64=0x7fffffff}]}, @nested={0x20, 0x142, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0xd5}, @nested={0x4, 0x135}, @nested={0x4, 0xd8}, @nested={0x4, 0x6e}, @nested={0x4, 0xc0}]}]}, 0x2090}, 0x1, 0x0, 0x0, 0x4}, 0x4) 1.877416037s ago: executing program 4 (id=1334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x10}, @void, @eth={@empty, @local, @val={@val={0x88a8, 0x4, 0x0, 0x5}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "17007e", 0x8, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x4}, @mcast2, {[@hopopts]}}}}}}, 0x4a) ioctl$FIOCLEX(r0, 0x5451) (async) ioctl$FIOCLEX(r0, 0x5451) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xbc3, 0x100, 0x551, 0x0, 0x1}}) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x2, 0x100, 0x0, 0x4000}}) (async) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x4f00, 0x2, 0x100, 0x0, 0x4000}}) 1.648407947s ago: executing program 1 (id=1339): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x3, 0xfffffffd, 0x0, 0x3f30, 0x4}) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, &(0x7f0000000080)="c6b8d72769", 0x5, 0x24058880, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0xa0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000000) r6 = syz_open_dev$loop(&(0x7f0000000580), 0x9, 0xc00) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0xf, &(0x7f00000007c0)=@raw=[@ldst={0x1, 0x0, 0x0, 0xa, 0x9, 0x1, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x9b}], &(0x7f0000000840)='syzkaller\x00', 0x0, 0xd5, &(0x7f0000000880)=""/213, 0x41100, 0x8, '\x00', r5, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x5, 0xd, 0x9, 0x6}, 0x10, 0x2522b, 0xffffffffffffffff, 0x3, &(0x7f00000009c0)=[0xffffffffffffffff], &(0x7f0000000a00)=[{0x4, 0x1, 0x2, 0x7}, {0x1, 0x2, 0xe, 0xa}, {0x2, 0x3, 0x7, 0x3}], 0x10, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x15, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x4}, @ldst={0x2, 0x3, 0x0, 0x8, 0x2, 0x18, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x1, 0xc, 0x6, 0x1, 0x60, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000700)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x28, '\x00', r5, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x7, 0x10001, 0x2}, 0x10, 0x0, r8, 0x2, 0x0, &(0x7f0000000b00)=[{0x4, 0x1, 0x10, 0x6}, {0x0, 0x4, 0x5, 0x3}], 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x4f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r10, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x28000010}, 0x8101) r11 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3a) ioctl$KVM_CAP_DISABLE_QUIRKS2(r11, 0x4068aea3, &(0x7f0000000ec0)={0xd5, 0x0, 0x40}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001000)={'syztnl1\x00', &(0x7f0000000f80)={'ip6_vti0\x00', r5, 0x4, 0x16, 0x0, 0x10, 0x40, @mcast1, @local, 0x700, 0x8000, 0xd, 0x5}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)={@ifindex=r12, r8, 0x1b, 0x24, 0x0, @void, @void, @void, @value=r4}, 0x20) ioctl$XFS_IOC_FSGEOMETRY_V4(r7, 0x8070587c, &(0x7f0000001040)) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xae3, '\x00', r5, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002200)={r13, &(0x7f0000001140)="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", &(0x7f0000002140)=""/185, 0x4}, 0x20) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r14, 0x3, r1, &(0x7f0000002240)={0x80002006}) r15 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r15, 0x0, 0xca, &(0x7f0000002300)={0x0, 0x4, 0x8, 0xd5, @vifc_lcl_ifindex, @local}, 0x10) 1.529279751s ago: executing program 1 (id=1343): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (fail_nth: 26) 1.379702822s ago: executing program 1 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003b00)={0x1c, 0x2a, 0x1, 0x7fff8, 0x4, {0x3}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="f30fbcc5660f3a21fa370f0666260f09f30f09642e0f01c848b800000000000000000f23c00f21f83500000d000f23f8c443696a17b4450f22c4c4e205bb84eb00000000", 0x44}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048804) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRES8=r5, @ANYRES64=r6, @ANYRESOCT=r5, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYBLOB="40ae9763083a414794b97c07330d9221ef16a9138a14024f23f7607f433a205b606cdc728f5b45ddf0e36baed4b427a2ac255cf2f9efb02e2dda3afa4c6068c53270e9f5ec60775de182a434f334b0358b6965fb5991c5bf5aa693cbb9b8d0006ff662e6a2764d96e382c8f743553afb497024209ea974"], 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)=@mmap={0x3, 0x7012441395ff4a6b, 0x4, 0x200, 0x4, {0x77359400}, {0x1, 0x8, 0xa2, 0xf, 0x87, 0x0, "265091c1"}, 0xb4, 0x1, {}, 0x7ff, 0x0, r8}) 1.170082275s ago: executing program 1 (id=1354): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x2, 0x103000) (async) r1 = fsopen(&(0x7f0000000340)='befs\x00', 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r2, 0x1, 0x2e, 0x0, &(0x7f0000000080)) (async, rerun: 32) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#X\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000100)={0x7, 'batadv_slave_1\x00', {0x7fffffff}, 0x9}) (async) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x1d}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x3}]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864d0, &(0x7f00000003c0)={0x2b, 0x0, 0x0, 0xb0b0b0b0}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f00000000c0)=@echo=0x5) 1.109380702s ago: executing program 5 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (fail_nth: 27) 1.04946195s ago: executing program 1 (id=1361): sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="ec6f87", 0x3, 0x20008800, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) close_range(r0, r1, 0x0) (async) poll(&(0x7f0000000380)=[{r4, 0x10}], 0x1, 0x5) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x6, 0x0, 0x7, 0x1ff, 0x1, 0x1}, 0x1c) (async) r6 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats}) (async) recvmmsg$unix(r5, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/207, 0xcf}], 0x1}}], 0x1, 0x400123a0, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}]}, 0x28}, 0x1, 0x0, 0x0, 0x1004}, 0x20008000) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0xb2b9, 0x24, 0x81, 0xe4, 0x6, 0xfc000000, 0x10003, 0xbbf, 0x1000, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x14001, 0x4, 0x91, 0x4, 0xe769, 0x14, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0xa, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x4, 0xa7, 0x1000, 0x0, 0x3, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x8, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x1, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x7, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xc, 0x800, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0x9, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @empty, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = dup(r12) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r12, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 918.460742ms ago: executing program 1 (id=1362): r0 = syz_usb_connect$uac3(0x5, 0xe1, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x7, 0x0, 0x8, {0x8, 0xb, 0x1, 0x1, 0x1, 0x4, 0x30, 0xa8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x21, 0x1ff}, [@extension_unit={0x11, 0x24, 0xa, 0x1, 0x6, [0x1, 0x1, 0x0]}, @cluster_info_segment={0x6, 0x20, 0x0, 0x22, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x9}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x48, "d6ffd446769978"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x5, 0x0, {0xa, 0x25, 0x25, 0x7, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x64, 0x4, 0x0, 0xfa, "50a0a4", "7e68c1"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0x200, 0x5, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x5}, @as_header={0x17, 0x24, 0x1, 0x3, 0x0, 0x3, 0x2, 0xe, 0x4, 0xfffd, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xb8, 0x5, 0xe, {0xa, 0x25, 0x25, 0x6, 0xa2, 0x101}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x8, 0x4, 0x9, 0x8, 0x40}, 0x23, &(0x7f0000000240)={0x5, 0xf, 0x23, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xb5, 0x9, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x4, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xb, 0x5, 0x15}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x100a}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x40, 0xd, 0xff, {0xff, 0xf, "13ab2578c5239b9016750e82e77666d521d6cf53bddef2ca347f261efb621486b96f89817f992b3360bf96dd3f92552bc5485e0726d6a01c2ac38d430801152af078e705dbc237db3565d088ff46c77932a67306c9ba15300baed57cd9f44bba04de21f52689c3a390552120c9810c84ea54883d3616ac378b49ce106f32aa8fd740d0c00cd522b9da123ec1f18a63a6ae019e4fa94329295959db7b2d90653b901cb9922dcf3352f5382977d68ac8098abaa958801287cc027af4efae31dd74bdbccf5d004e0521aca8f99672d26907b400d997d5f58dad8edaff35b100f856cc25149942241c70244fd536ce97f3702b9d958ee74c6388c63242f766"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x40, 0x23, 0x3f, "afed5996711fde40fcd4655a6b79565b1a23173c3d302ed923755839afeab79b529430281b98972fafa995ff40eb37adf0028728a4c06b4199851a0de36c56"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x81, 0x2, "9905"}, &(0x7f0000000780)={0x20, 0x82, 0x3, "7fa434"}, &(0x7f00000007c0)={0x20, 0x83, 0x2, '!j'}, &(0x7f0000000800)={0x20, 0x84, 0x2, "30fd"}, &(0x7f0000000840)={0x20, 0x85, 0x3, "f72113"}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, 0x0, &(0x7f0000000200)) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000080)={0x1}) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd2c, 0x25dfd9fb, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 918.09388ms ago: executing program 5 (id=1363): ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x8, 0x80, 0x70}, 0x0, 0x0, 0x0, 0x80000001}, 0x80, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x0, @multicast1}}) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff, 0x700, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000140)="cb56254cdbf4b6fe6407e504a739f4a00d9f034a8c57e892e718144cbbb11b398997e3f059ac07578dec733db04d078711f89ad5d4e5409e8cc405277806258732b8c7f21d298dc39c19b8acc33cbf04fa3b9852e6f86cf8b704d675bd04a60cdd51324fbe96378466c553388730977f0049d840001333866124038ef078d2770479e055", &(0x7f0000000200)=@buf="89fc42c52308c965c1b427a47c28ce1f76afee298fe1da32ffd0082c802715f7fb37b7b30f79cf81db158ed0ff1a809075768b48b928f51bfd4c09972af8eb1ef00388d7a30b892b0c87208bd0d0a895f7db58d8896b5fffc4f1cd795d2c312e723d5219788e8dad7ab1e5ed99fc63d9cd99a4dfb453091cc0ecc8c7f52fdcda236aabe6397e8e7fe084ebd2488dd6bc9d9d4fb968320acd503fd2970c324e7f8b2597de25d5b1fdfc729b0c53c514b2832b6fef49efd630eacfb7215056fc26f88c7cde1dd9e974afbcff3bad45aa"}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680)=0x0) sendmmsg$sock(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="c0968195854211a9c773547e4249022cd4c802623edf3efd51fd725ffc5059f3de6f35b7252d6be252ac2b827a3838e2bce7d63801d5809d41c1a9e26db36295e27243bc1345e508b992348275a414f090a6b64b7c937f7e5339bc2e0f83ac51d8f8c0a872a686cf0da2284eba5384b9b2ba88e819db4452e69b28634642822dc2c613eac4", 0x85}, {&(0x7f0000000400)="bc50bcee0c4f155ced5f0ccd6b7371f6e85c63cf8320971d2cf788cd911c5a8a6698bbbeb46063f8c3c848f49734e7c0a71ecc77ffac4de86e551129c918a8ceda33efbfd692da8383db976eee4c970f6ca3eb5efcbef3561653944e93e08c8ae92ae331d086b895dd6666ce565db4cbd509da3063440f3763034311e239f73abca3f2d223ee2bef9a0d5132b1becca88cb8cd01859ad7efa011794f6ac6f1379727d257a09bdd1df805e73bddad6023a945c954103ed4519a68ab13f705cfbb3594a7a24e666a", 0xc7}, {&(0x7f0000000500)="3047622023363b0850cbb9fa0ad943c82ee6e3fb94c957943ad06295e5d05566e8387be9abffb063c1ac9189dc81fb77dd91b27e9df9798a17513266b9321beb55f5c5f64d57cfe9d1e403034a4c13a16f869ded4e8684b8", 0x58}, {&(0x7f0000000580)="14960da975b1b0c2ac19a794fdc3b4a9d25166809b6b537dc2406fe133ef9d1f94a3284147de7d89c9dc9a9b53911bf0040517d69d5325fb9cc648f4593de7c2d68c8cfaf608e758b0a17852b01f130e", 0x50}], 0x4, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x6bc1}}], 0x30}}, {{&(0x7f00000006c0)=@nfc_llcp={0x27, r3, 0xffffffffffffffff, 0x5, 0x4, 0x1, "5a68269bb0c0efb8772854c794699ad723c124525d1d23e5f20eff40bcd3ed725743fc92be2921b0cf03e625eb2bfdededb58a74c9eaaa8f879215bc26dea1", 0x25}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)="20bc89c3408a1e0d66e6cbfdacdbe63ce4c96c9968d2b0df66321bdfba236c850595fb9ba55fa8693aaaff06e9046b478817f4daf3caec", 0x37}, {&(0x7f0000000780)="6ba2c041e76a01fc666f056a1d2457497b2749bc4c7e072e8c03200983", 0x1d}, {&(0x7f00000007c0)="15270b099735dfa2c166ee5432a3ca0f9099eb57419d6a0561f376e36bbf986d92afa45829c10859f3b98483c49a04b33b08110e6fd47471a26eeb89b837194596e557831e5114530850019846358ec47e636bfc1387b7fb26fe2c1de621747abd27e330f70852098e3457f3deee49b2259aebd3ea48af0d5c71d001a5791fd91d3226fd1556530e7720d63183397df4cd7bcd1482f2f2121486394f209e74571d56a277910d2decabc7ef1a959532b859900d992195d2feda82c928c6fcbbc70a75", 0xc2}, {&(0x7f00000008c0)="f67ab91a060113e6a7e435ed517362c5bbeb70fc68f3d5a70b8a5ee13a0f39cf254192f137a321b0cfe6aee6c237fb11", 0x30}, {&(0x7f0000000900)="cdbcd6eda3980d02492b8b0b69dd07e4b0887afe9a3503ccbb8fb2225ac99c98d4dd524449f79a17665f82bc3c45a0b5527594e56a08ace7f4176700d679d59f679d2f363486461d5acf05d5c219a7c5d8230957dd35f95ab5771946203de5b77c4a98df15d0fe6a5f1ab7fc18038cbd12fd9b8043e2bd3bc3b2812017badede95892b5fdb369eeb2b784b0be6f9f35a309d356fe6024f5d11d4d978661c7635bafd3d42a7a0ea062bdacf7d3aa3956d639bfe6c76044c2f9661efae0aa7454aef0a564a83bb30e379494985c2765c67677459ece9eb4e18e42d5b36842f36378c08785857e3", 0xe6}, {&(0x7f0000000a00)="0f014266abe0d79bfa56e18a327f53498bca97cce4e16870937dcf8e77f2df94ad8c2c3332058aaa0d46f4fb097fd900f50771474ea7737d185b2bdd00671fab76b21fa85f5e98347a3dfaad84a2991e5063ed04c45d9490463f80d18425", 0x5e}], 0x6}}], 0x2, 0x800) r4 = fsmount(0xffffffffffffffff, 0x1, 0x83) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b80)={0x0, r4}, 0x8) io_uring_enter(r4, 0x7474, 0x2d2a, 0x4, &(0x7f0000000bc0)={[0x3]}, 0x8) syz_emit_vhci(&(0x7f0000000c00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001c40), 0x8) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x7, [@fwd={0x3}, @var={0x1, 0x0, 0x0, 0xe, 0x2}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x3e, 0x2}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x61, 0x5f, 0x51, 0x2e, 0x2e]}}, &(0x7f0000001d00)=""/104, 0x6f, 0x68, 0x1, 0xe614}, 0x28) connect$vsock_stream(r4, &(0x7f0000001dc0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x7, &(0x7f0000001e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x5, 0xb, 0x8, 0x0, 0x4}, @exit, @map_fd={0x18, 0x3, 0x1, 0x0, r2}]}, &(0x7f0000001e40)='syzkaller\x00', 0xc7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000001e80)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001ec0)=[r2, r2, r2, r4, r4, r4, r2, 0xffffffffffffffff, r2], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002280)={r6, 0xe0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000002080)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000020c0), &(0x7f0000002100), 0x8, 0x57, 0x8, 0x8, &(0x7f0000002140)}}, 0x10) socketpair(0x1a, 0x2, 0x6, &(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r8) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x40, r11, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40) listen(r10, 0x7fbe) write$cgroup_subtree(r4, &(0x7f0000002440)={[{0x2d, 'net_prio'}, {0x6, 'memory'}, {0x0, 'freezer'}]}, 0x1b) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f00000024c0)={0x0, @qipcrtr={0x2a, 0x4, 0xfffffffe}, @can={0x1d, r7}, @generic={0xe, "cc875571f595a049752643ee1b8e"}, 0x5b2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002480)='syzkaller0\x00', 0xd3}) socket$inet6(0xa, 0x800, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f0000002540)={0x5, 0x6, 0x3, 0x6, 0xc0, 0x4, 0x7, 0x6}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000026c0)={&(0x7f00000025c0), 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x50, r11, 0x100, 0x9, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x57d4, 0x78}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b47247fa1df202b7bd55d993f6"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000002740)={{0x2, 0x3, 0x7, 0x44feaa8b, 'syz1\x00', 0x4}, 0x2, 0x10, 0x8, 0x0, 0x3, 0xa40, 'syz1\x00', &(0x7f0000002700)=['memory', 'nl80211\x00', 'freezer'], 0x15}) 917.837813ms ago: executing program 5 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x4000, 0x0, {}, 0x0, 0x2}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffdd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089a500000000000000000000000000000000000000000000000000000000000000000000e6ffffff00"}}) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x4000, 0x0, {}, 0x0, 0x2}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffdd000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000089a500000000000000000000000000000000000000000000000000000000000000000000e6ffffff00"}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0), 0x802, 0x0) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0xee) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000540)={'\x00', 0x0, 0x5, 0x7, 0x0, 0x8, 0xa5000, 0x200000, '\x00', 0xe3}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 668.709266ms ago: executing program 5 (id=1365): syz_emit_ethernet(0x36, &(0x7f00000046c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x0, 0x2b, 0x0, @empty, @local}}}}, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000001ac0)={0x0, 0x6, 0x0, 0x2}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x80000cbf, 0x2, @remote, @remote, 0x40, 0x7, 0x101, 0xd66}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x2, 0xffffffc1, 0x5, @empty, @empty, 0x0, 0x0, 0x80, 0x3}}) 601.99552ms ago: executing program 5 (id=1366): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x48}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000140)={r3}) 599.406328ms ago: executing program 5 (id=1368): bpf$BPF_PROG_DETACH(0x25, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000094) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x3c, r4, 0x101, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048004) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROMREADAUDIO(r5, 0x5392, &(0x7f0000000140)={@msf={0x0, 0x5, 0x9}, 0x1, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000090a01042e877000fddbdf2505000007"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x60) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000140)={r7, 0x4, 0xfffffffe, 0x7ff, 0x1, [], [0x9, 0x9, 0xe, 0x9], [0xb7d, 0x6, 0x8, 0x2], [0x100000000, 0x4, 0x3, 0x8001]}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000100)={0x1, r2, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) 309.951005ms ago: executing program 6 (id=1373): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000340)={{r0}, "2fa136e4e7c1975a4cee74b96d10c032f2a2e20251e7a3f0a6e36b678d3cb7d2287b0997b84425a75b740379d4ac4539aeb67a52be2e521a2e79c79e66e43d0fe65acea2f272f5af930780e933b039ee652444a55f5c4aa5e798415c7dec684ba29f76b0ea0635fce3afbdceb7b3a7e15ab419b0b10f8a078e8cf96036c07e6cba796092b0be1979efe0963f9c282352ec4f37d3ef3dadae7164f5f9d594e96b97ebc47546307eae77ee17ad92be310ec094476d70984f5ae20bc013f3597fa6848d3c9f8e1979b6df33a8536daa812534fbb71fc87a84567c9f2251c8f41fd0a3f121f1d03aa892a0c6b47ec025c6b4e174246ad01746d8fa8001251951682f42846f167a75cb662551337198bb84b6f3472cc0e766e25c8fd514f1130e2b6b3a5b16ccb8e27df6f0bcac571ac6a31e32dd89b73dd54cdea756b4ac1d41093d7c453f4fdbf7bb35ef432070e8072bc96a4b244572f11ec634f72ba0cdfafe07189c4cdc9f00ebfe53a85e0cbc5c52dc5125637d826c2e27831d6cbb640cc332327961ccdb83f5fe0db147d0c0728c16b0eac032dccd2680bdfccc6bbc1b6989768c162606d24c0c867f093fed4ae1fe8a9152c9e2f9322cdc3394725b64a6b882063aedb3b889c0b7c46b997faccaf54a77e5ab3b100d38b284e1cf67c62c0a87e95396dbdf85e12ac5af1a87751c24b9daf43c1922851ce822bd9aae53f71f12cc3b99d96e9c32a0bd927d9d018f1781952449068ee63d83b2f649002a9577fe6e5bdb07515451af462538c690e38bf83e5d2275d9a929461265bb7d3bc39202fd2a373558badde831af268ea5f8a3a2d1bd521899e11a3b908f3799fdd15a6ba12f0b07094c6bb5a9b098b18d2cf0aafa9e9ec343f192e2bf0feb48732f7a585abd1cc1a714899b87964168a94571e9adcc20fb2e9e2377d44fadb4fd8172707e8db2a4d27db9873ee6ff1bf509ceadbb327682517834a4c7db862c5596839d01413dcf17f515dc99014c260245016d9cb6ecfc3dbf174cb024a25afd19856faa099669548afd1949c37df78a18195abebd43d3898ef74620bf84ae71e0b4107e4f3b6d97d1fc0affcf4f59df61b8b35a39ab3128c97f3e60d085d61ca813a5be34b2637f44c5712b0563f4824fca72b58e24568ca7d1f0d198ed2ce661877d19302e5c1d6b4aeffa9125e043f0a5072668fb4f7c30b55de956c878f6d53b2811e838c8e4ff076c6e0228f31eb4c5a297611672ea66db41c99bc4a6dcf9674bc0c757814039e14e8e162ab1ec926158e112faf10d85bce05033b48271e6c2b729fca717b6648e67974537b5dfc7ecbd94c3ffa4c398b1b0b2dfb3fa19fd216af997d1776e4fcbdd02d397e37e31e7a9017ec3aafe3f793248556658e935787ace699270f23bccc99480e514e613c9702fdde66490d548fae5b47f9961138fa670e5c4161f9614764f60accf8f6f6b46634732349fc4ad2f9f722ab40098e4beee47ed63bae88044a9fa4f32a111f28a8b696fc371b8f74a52fb6c29208dd6b4c54c6a04db6dd296a0ec1f63490a1b6271554950e13a546cad953f79d863027243c04169ecaed172ef67f3c9070e56d04d5befc6af2283b963b702528895b233fe736967c73b1521660161558a67f2a6a8e23d302a6a7ff4b4499365757e945f82184852aceb6ded8f76c15a7a148993747b1540f8d19f1ef7cedf358739328eec9fcb09f02e4e5b614b90412709a71c09975b146801318becee1b0b12f98942661d3f6bbf87db00c989bd0f9e5b1e2646ee64c00f16b2a1184134e395588348fde181b8e2495d86e1e5d074a32fc04ad8e768158e543adc51d68c0265130d6c87a117492ab4a04731eb992df901058175db442a23d23531694c554c4b26809c9422d3c44d6ed1410dd0f3f7423ae79572091ff493d2b3f256259a9044fe1a99b1acc3e121dd44533cfdee1fdb90175dabeef26a336bed3242753d10711ab4140500be6f0b7593afbfc7ab84a2530768c222c9f60f982ce7ba532e47b612e40bd7d73e5a9c745a7a85da2ad7561b85bbc87d68c4836149574457efb82fb63d9b7cac44f93fff3d0d211fc1fde94cdccaf00312b56fcc7017f626f26c3b8f5568e361189c4d4a50c0a116a0079e74516b54610f4df07b672b347d0c2ef660124722ed051a249d7e4ae750f713aa8215180cfc86455194fa106594e0ea72c49abae1a95fd7645a313dafe9b90a334dbc0eea4b4b1589a4e7e99c97448362727bd4ea074b3665f09bc9b14e603b601596af7a7a87639a9569b6f58c69540ad1e0577b361f3f8aa748035302f52a00af447ee0e3e162a6cf0de4c667b1efb8c04e05a49852ad52b3b0972c92a7de2163a53f7e75c3302702bfe6aa2cf0cc127807cdb52c26a564e22ecdd3d9b77852d174566120271f94f0e0070fc454023a598dc87c09e7547355d439be3721f6c786878bf76c73f41cc3b8a0c523724a939c80da3d596ad9f084eed619587b7cd42d36fe4a20924306cc3e050a357c168633d4d4839db4bb395e68f7a2f5d7874380f487c3382efeecc4bc7519c6867e4ddc1002b7d70677749fef5b5bf6d608f41ae1a4523cbdc7d996e51d2ccbf4cc04bd8f222c2ab60b9d64a5b0735aa7e3de8198c2c24ec85a4c1891b40be631f694e45d9391fb3369adf71c4a9cc6010c84cb1bb83fe44bae93c4849ad9df045a3d0e1bcb1ff72d0c1746173fd05f95abf0bd41c3e0e8c3767f88e419e381dff305a1003961513a119ef843cdb69e233307f90e7ad6d421b97817d485f26e6afb766d6a2503240249fdd9441d04fee42f9352b639b76e731ac0608717aefc4793117b9b8d8bb6db7e69af72786771a8149e9a0542fc074f7a711d6ca82a479f318eb9390dd5897b2eb76047c3df340dd2310cee9c52ec61381d82b6ac4e91ad073d811b713408326efd29d1dd95dbc46fca2aa60005ca8c7643e4b6e5814d6212974982c4056bd80a1229578734ccd393405528e4843b78a786058fd92e7f889e43f1c8bbb0c869edf8ca63790502fadc78aafc6990184184fda70781df7cb073d11f85fd629ebbb008c502338393ea38a8fa1c06176b0db6b1fe30b3d715e2f81d6c922bcb2c1f29661b52966744bd40089b517ab4e8b5d4a608af395920f32d04e7518ab0f613ab61c01b2787e7996baabaeb4a09e587a8190bbe0b84b5ed9cf0e1575bd20a1bc6ce70f8b3a956db69f7b6ba19024ee6038129961ca4583eba8da668ba6f23acb35ca0ea3f82e1bff20303109b2efda9101f986757883437482cbfd56ba53941d48df2bb75e47087748dc50c13dda7fc4e31b6ca97000726570c4a04e45970a37dfa31bacf3efdca373fcd48cce597aedfd7502e61bcb1e359c6142aac8138f7b106effc32ce0606cb1e38788cf3dfc755b1b4407c3f8b8147b888acb440978fb624ec026378b685a58db2c3d73a1f669547ede32efe785feef6371c4931ce76aa1b56afa30e7ff8c079b52f557a93876b42f8d05e7c993a5124652fe376e75162ccc2524bff5b2d77f920a0906efca4a770e55af4078c42d779c6860a4237f19eef304b8e6a1960de5a31a5384395819b4fb38adb358949e00bf7f01c6b3d6085fbc5f64cbbc78c45b39b203f8f90dd24cb3125ddadeddc365f6d2913c03047a7ea64b66c556d64ca9ae2f88dd91954013514096a712c0399ef285297c9b82666fea32f3208a91bc4f2128d00eba9eb159a67d9e517de2e59f078db1d5661c6653f1f140e96ca841566b5b17c99e2701534bc9c4bc37c0d444c3aa9ad94264dc57f8391d55703fb4b715f88b27ecc0dd39adbd284b1dac81cef1077c942132a78be9e7417fbd20ba0441f1ca084a975fcafaa30de23961d3cb24271df1ee4807f36a571d5617675b2fb20cfc0fbb86c4e09d44432c8b0cefe967e1e022f2aacad6c7219de87f2c5ead196cd9d7650eda29d20e422a44c117d4aec5d706563bfe7b7a249f21ff3c9527c5c72a4052012068daafe506caef5902d0526d036a23c3ee5e759adc5465886f04bb832f947d960b2a86f3a21430954acf23dcb98f5e023722dc8b3c04d95fa50aa4154e6afbba79094c0d38b4664a86a5accfd24985d47b584a65cc6d7d0315c0014091bff71e5fea7769d42cd13b0d43b2056b6dab7fe07f03280bb4bf19a09594d865490747e7c4a1a92dc7d5b07967644e2222249080455ab10817b1207ea37dc5d60f0f202c9ed0031c9de2cd2b56ecc9dd97b5b7cecacdcfee429623b752bce65bee53931337721b060e2be2e3aa8d40f578b6e903b0c37bce84d555cb15a56582295bff49b4fa11856e7e0bb22eddffe6cecfb08f94dc3f2a19c0d8b337941d704ecce01df8700c68b5a44edb7ac3fe98c5682dec9e0f6feab9a25eeb1cd9594ccda4aac2440db6039071dd24d7756fb6aeae6c991fd37d95481216385522a816119912fd6fc09fd3d0a2ea0f240c6ac924634b76d86e17b9b178c18448a9a5c8e01bd2979db625349a20d309f8514d43a62a65c4ab413cb0aa698ad93cdc9fa700bdced12115ba3adbee4e1c35bf0163f7bf77322ab7c223bf8414d192477308b0e37e46fde3ac2eeb0d50380c55533bf27563221ddfb96fc4df3928866eb65804a908f3888f7a07bf26daf761ed8628b0caab9b4c54c79b45b2e308ec35a53dc645e096b0d90e897b06a446c2923986b4c0d7e930f679cea628725db3e8e64a8e1e9abb3292be689bfd9bfcda5595fbc846c05a6505c613c000c400e866c3aa2f8a58bb20e12bfaf7a99bc6dcfd0c4bf7988b61f3d1e6352fef2ee691a15cc4b578d83e97520db2666ff6c4fe3c290e4200048d120ee29f0065cabfd65e5cbcca44dc1626cd74e2990a8b91d6a5bd0feca40a310d288279aa229fe7c57b80d1c13c35805b9ef350f13fb45a0d09861ef502e4e1bdac51cf143b9348c04b0d6c5fb238708e27e0769a0a0aca8e6219bc9e956ec69153b0099bfe2320495ce7032300d55da977b3e640ffec8cea8bda23f384898806a09b3eb6d8d7608c4a42df3008a2603ce5729f60f62c5a6d2a57d75266d635e161e1264aab8547c498784895e4ed76b9341317a16343d94a7dc68df035dd55790281010ebfb4eea9b0a1744f5b6a07cc801bd44fa2f47e9e396c4c51089e197eacbfa0c05d74a16c327f25a7e6d2306c056754b33ba15dc491881b8476087d1ad67c17833f233e590bbc67cb321e0d0d2e67a8335f414573d4e72224f8316a1586a82e84f7f5987b3ff28ab497764e3ec33c22fb8747675d25322f802dd54563d9344b731778197ca52f97a8080054b25d802261fe4ab7552b1421cfab2900ee95d191ff5b8e4364242af9c8613cfc8cb6984a3a7ef81b8186908d3d98d570aed6386e5fcbd919597a32dae1b255ba9db0eb772d04e50d2f8dae4a8ea74acd27ff19321385c7ce91d03318cac0adc4299d90cc239ad391ad17d46abe09170b567293e7f6ea9bca3800d5cb37093965e4f31a4037d9a716cc3fd9523efae6a65c941b518722bbd0b44367229241af5ef28d263ab774a43743a5b933e68fd00336e5d40d7d35995536badc063a2f214b0fc93f08052f3bfd83ff0774be9b8c7312c34237b9076029bc477f16bc8db3525b4181afc810bec295778bea1330096a2025086c021a7dd908a9e9f7a8686c6ca7618b9abb79dc664595a36197bc952253a4ec90983cae2105b1e7ee76abb14fce53887aac7aed64f9212417adc2923a150f20426cca56bd97026861c96329211fa23"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x8000, 0x8, 0x101, 0xd66}}) r1 = epoll_create1(0x0) syz_open_dev$media(&(0x7f0000000000), 0x4, 0x62602) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x2, 0xffffffc1, 0x5, @empty, @empty, 0x0, 0x0, 0x80, 0x3}}) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000340)={{r0}, "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"}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x8000, 0x8, 0x101, 0xd66}}) (async) epoll_create1(0x0) (async) syz_open_dev$media(&(0x7f0000000000), 0x4, 0x62602) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x2, 0xffffffc1, 0x5, @empty, @empty, 0x0, 0x0, 0x80, 0x3}}) (async) 217.689804ms ago: executing program 6 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009110b4000000000095000000000000005c999dfa9bbe92ffcd23e84b256d9b28cfd4d361cc3eb3f9c67c52f44791597ac921e9c9a361c7a12ab6989ec6a2aa85748c0ba34837928359ddc311095c6e44bd51c09c886df35de65aa89b702b276bccccb51442a611b347250a05bc05f42fe3ebb3b141b91e342bd1cf1abba7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@delneigh={0x28, 0x1d, 0x200, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, [@NDA_DST_MAC={0xa}]}, 0x28}}, 0x0) 217.256274ms ago: executing program 6 (id=1375): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="800066180a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff0000ffffffffffff000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e00b90f177020000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 32) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r8, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf0, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xac72}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0xf0}}, 0x4040001) (rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000002c0)) 120.105027ms ago: executing program 6 (id=1376): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r1, 0x0, &(0x7f00007e6000/0x4000)=nil, 0x4000, 0xffffffffff7ffffc}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xa, 0x6, 0x0, 0x7fc00100}]}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) 119.737983ms ago: executing program 6 (id=1377): prctl$PR_SET_THP_DISABLE(0x41, 0x3) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0xf91}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 119.021011ms ago: executing program 4 (id=1378): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x33e, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0x980900, 0x9}) r1 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000140)=0x4, 0x4) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000300), 0xff, 0x288000) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x25, &(0x7f0000000340)=[{0x39, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x0, @uvalue=0x2}, {0x2, @uvalue=0x3}, {0x0, @svalue=0x25eb18db}]}, 0x8fd}, {0x2a, '\x00', @buffer={"f64024aa16dcf0601da63478c3057c6aab49aad0e861aa038e68044cd171a2b2", 0x20}, 0xb4}]}) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000706010000000000050001000600000083f9feee2b9d629a21d9716ea31daa608f792c67d33962824b67e0d0e678fcf83aac2fd956cb957686f65fe77d333c13eeb84dd12c37f7a8ac69e68dda7987a1aebf104ae3cf3723f93de373b13ab990666741f221e351acd6121eaebc31258cc2c796026ef53a9e56daea733799ce376a5047de337840beeffab872b777b71cac23e710befe0aa81a79e079943068db5984a8f4399e67fa13eb45ed51ffaf922b32c607e80855a1f82e64fe"], 0x1c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f00000000c0)=""/104, 0x12) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) 0s ago: executing program 6 (id=1379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r1, 0x400caed0, &(0x7f0000000400)={0x2, 0x0, @ioapic={0xffffffff, 0xb, 0x8, 0x2, 0x0, [{0xc, 0xe, 0x5, '\x00', 0x4}, {0xf, 0x0, 0x4, '\x00', 0x4}, {0xff, 0x7, 0xf, '\x00', 0x7f}, {0x8, 0x9f, 0x2, '\x00', 0x9}, {0x1, 0x0, 0x0, '\x00', 0x80}, {0x1, 0x8, 0x7f, '\x00', 0x7f}, {0x9, 0x0, 0xd1, '\x00', 0x4}, {0x9, 0x1, 0x49}, {0xb8, 0x5a, 0x4, '\x00', 0x33}, {0x7, 0x3, 0x80, '\x00', 0x4}, {0x8, 0x2, 0xfc, '\x00', 0xff}, {0x5, 0xb, 0xc4, '\x00', 0x4}, {0x8, 0x5, 0x4, '\x00', 0x9}, {0x5, 0x1}, {0x1, 0x9, 0xc5, '\x00', 0x4}, {0x9, 0xc, 0x48, '\x00', 0x9}, {0x2, 0x8, 0x0, '\x00', 0xe}, {0x7, 0x6, 0x1b, '\x00', 0x2}, {0x4, 0x2, 0x3, '\x00', 0x4}, {0x2, 0x4e, 0x5, '\x00', 0x4}, {0xf0, 0x1, 0x7, '\x00', 0x1}, {0x78, 0x81, 0x5d, '\x00', 0x8}, {0xf, 0x10, 0xdb, '\x00', 0x5}, {0x7f, 0x63, 0x5, '\x00', 0x3}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setregid(0xee00, r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ae053d2c3e58519}, 0x50) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) kernel console output (not intermixed with test programs): agmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.045346][ T8582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.097141][ T8582] hsr_slave_0: entered promiscuous mode [ 113.100265][ T8582] hsr_slave_1: entered promiscuous mode [ 113.103189][ T8582] debugfs: 'hsr0' already exists in 'hsr' [ 113.105600][ T8582] Cannot create hsr debugfs directory [ 113.119498][ T40] audit: type=1400 audit(2000000000.289:817): avc: denied { append } for pid=8640 comm="syz.2.808" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 113.140920][ T8643] netlink: 'syz.1.809': attribute type 2 has an invalid length. [ 113.146999][ T8643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.809'. [ 113.153792][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 113.157565][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 113.222177][ T8647] random: crng reseeded on system resumption [ 113.225241][ T40] audit: type=1400 audit(2000000000.399:818): avc: denied { write } for pid=8646 comm="syz.1.810" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 113.235559][ T50] tipc: Node number set to 1 [ 113.364881][ T8582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.370999][ T8582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.374895][ T8582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.380843][ T8582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.386032][ T8582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.391892][ T8582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.395311][ T8582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.405084][ T8582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.426299][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.429104][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.431447][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.433844][ T8582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.456483][ T8654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.465821][ T8582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.474904][ T8641] comedi comedi0: pcl730: I/O base address not correctly aligned [ 113.480032][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.485161][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.493441][ T8582] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.500691][ T7181] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.503520][ T7181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.512257][ T7181] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.515226][ T7181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.572786][ T5839] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 113.721843][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 113.725362][ T5839] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 31, changing to 7 [ 113.731360][ T5839] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 113.735864][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.739011][ T5839] usb 6-1: Product: В [ 113.740640][ T5839] usb 6-1: Manufacturer: я [ 113.745040][ T5839] usb 6-1: SerialNumber: ࠊ [ 113.790781][ T8680] netlink: get zone limit has 4 unknown bytes [ 113.800780][ T8680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3062 sclass=netlink_route_socket pid=8680 comm=syz.3.817 [ 113.916099][ T8684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.920428][ T8684] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.938134][ T8582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.960407][ T40] audit: type=1400 audit(2000000001.129:819): avc: denied { read write } for pid=8651 comm="syz.1.812" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 113.969621][ T40] audit: type=1400 audit(2000000001.129:820): avc: denied { open } for pid=8651 comm="syz.1.812" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 114.019954][ T8684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.025939][ T8684] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.041548][ T5144] pmem0: [POWERTEC] [ 114.052769][ T5839] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 114.056766][ T5839] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.060748][ T5839] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 114.084976][ T5839] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 114.093091][ T5839] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.096286][ T5839] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 114.103018][ T5839] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 114.106094][ T5839] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.150802][ T8684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.156795][ T8684] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.183221][ T5839] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 114.191919][ T5839] usb 6-1: USB disconnect, device number 15 [ 114.202568][ T8582] veth0_vlan: entered promiscuous mode [ 114.211488][ T8582] veth1_vlan: entered promiscuous mode [ 114.223183][ T6244] udevd[6244]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.246469][ T8684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.250037][ T8684] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.282344][ T8582] veth0_macvtap: entered promiscuous mode [ 114.288419][ T8582] veth1_macvtap: entered promiscuous mode [ 114.303435][ T8582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.314041][ T8582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.324592][ T7179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.328347][ T7179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.333838][ T7179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.337572][ T7179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.341829][ T5095] Bluetooth: hci4: command tx timeout [ 114.451915][ T7178] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.462982][ T7178] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.517019][ T7179] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.520402][ T7179] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.543712][ T7178] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.546898][ T7178] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.550510][ T7178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.556155][ T40] audit: type=1400 audit(2000000001.729:821): avc: denied { set_context_mgr } for pid=8702 comm="syz.2.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 114.557128][ T7178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.557849][ T8703] netlink: 148 bytes leftover after parsing attributes in process `syz.2.821'. [ 114.624448][ T7183] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.627380][ T7183] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.650652][ T7179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.654779][ T7179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.680671][ T40] audit: type=1400 audit(2000000001.849:822): avc: denied { mounton } for pid=8582 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 114.691778][ T40] audit: type=1400 audit(2000000001.849:823): avc: denied { mounton } for pid=8582 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 115.246049][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.277197][ T40] audit: type=1400 audit(2000000002.449:824): avc: denied { name_bind } for pid=8731 comm="syz.1.830" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 115.283889][ T40] audit: type=1400 audit(2000000002.449:825): avc: denied { name_connect } for pid=8731 comm="syz.1.830" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 115.297225][ T8730] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.305965][ T8732] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 115.308469][ T8732] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 115.310877][ T8732] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 115.446523][ T8744] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=8744 comm=syz.3.834 [ 115.451584][ T8744] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=100 sclass=netlink_xfrm_socket pid=8744 comm=syz.3.834 [ 115.457244][ T8744] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=8744 comm=syz.3.834 [ 115.503638][ T8751] netlink: 'syz.1.837': attribute type 4 has an invalid length. [ 115.508463][ T8751] netlink: 152 bytes leftover after parsing attributes in process `syz.1.837'. [ 115.522741][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 115.524093][ T8751] .`: renamed from bond0 (while UP) [ 115.525566][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 115.543162][ T8750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.551949][ T8750] bond3: (slave bond0): Enslaving as a backup interface with a down link [ 115.701002][ T8762] binder: 8760:8762 ioctl 4048587b 200000001cc0 returned -22 [ 115.747738][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.753113][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.757666][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.767711][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.772451][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.775706][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.779037][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.782979][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.788629][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.793091][ T8770] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 115.804962][ T8765] comedi comedi3: comedi_config --init_data is deprecated [ 115.909334][ T8784] binder: 8783:8784 ioctl 4018620d 0 returned -22 [ 116.015202][ T8795] netlink: 32 bytes leftover after parsing attributes in process `syz.4.851'. [ 116.146386][ T8801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.177575][ T5745] Bluetooth: hci4: unexpected cc 0x080d length: 7 > 3 [ 116.420388][ T8813] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 116.707175][ T8824] xt_policy: neither incoming nor outgoing policy selected [ 116.744255][ T5095] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 116.855734][ T8831] netlink: 'syz.1.861': attribute type 7 has an invalid length. [ 116.862317][ T8831] netlink: 'syz.1.861': attribute type 8 has an invalid length. [ 116.958519][ T8840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8840 comm=syz.2.864 [ 116.968171][ T8840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8840 comm=syz.2.864 [ 116.972955][ T8840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8840 comm=syz.2.864 [ 116.977820][ T8840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8840 comm=syz.2.864 [ 116.985268][ T8840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8840 comm=syz.2.864 [ 117.000410][ T8840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8840 comm=syz.2.864 [ 117.046183][ T8850] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 117.053341][ T8850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.134088][ T8862] netlink: 'syz.3.872': attribute type 21 has an invalid length. [ 117.136364][ T8860] A link change request failed with some changes committed already. Interface 1x9 may have been left with an inconsistent configuration, please check. [ 117.143661][ T8862] netlink: 'syz.3.872': attribute type 21 has an invalid length. [ 117.245235][ T8873] syzkaller1: entered promiscuous mode [ 117.247707][ T8873] syzkaller1: entered allmulticast mode [ 117.251615][ T8877] netlink: 'syz.3.877': attribute type 12 has an invalid length. [ 117.269413][ T8877] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.275789][ T7176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.278744][ T7176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.357365][ T8882] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 117.598496][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 117.598512][ T40] audit: type=1400 audit(2000000004.769:836): avc: denied { sqpoll } for pid=8905 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 117.664040][ T40] audit: type=1400 audit(2000000004.829:837): avc: denied { create } for pid=8903 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.670977][ T40] audit: type=1400 audit(2000000004.839:838): avc: denied { write } for pid=8903 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.864817][ T8914] loop9: detected capacity change from 0 to 7 [ 117.872047][ T29] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 117.883231][ T8914] Dev loop9: unable to read RDB block 7 [ 117.885314][ T8914] loop9: unable to read partition table [ 117.887248][ T8914] loop9: partition table beyond EOD, truncated [ 117.891517][ T8914] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 117.932895][ T8919] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 117.950420][ T7176] tipc: Subscription rejected, illegal request [ 118.006056][ T40] audit: type=1400 audit(2000000005.179:839): avc: denied { read } for pid=8927 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 118.033948][ T29] usb 8-1: not running at top speed; connect to a high speed hub [ 118.037584][ T29] usb 8-1: config 0 has an invalid interface number: 22 but max is 0 [ 118.040226][ T29] usb 8-1: config 0 has no interface number 0 [ 118.042460][ T29] usb 8-1: config 0 interface 22 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0 [ 118.045486][ T29] usb 8-1: config 0 interface 22 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 118.049227][ T29] usb 8-1: config 0 interface 22 altsetting 2 endpoint 0xC has invalid maxpacket 1024, setting to 1023 [ 118.053881][ T29] usb 8-1: config 0 interface 22 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 118.058120][ T29] usb 8-1: config 0 interface 22 altsetting 2 endpoint 0x6 has an invalid bInterval 27, changing to 4 [ 118.061493][ T29] usb 8-1: config 0 interface 22 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 118.065365][ T29] usb 8-1: config 0 interface 22 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 118.068936][ T29] usb 8-1: config 0 interface 22 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 118.073848][ T29] usb 8-1: config 0 interface 22 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 118.077600][ T29] usb 8-1: config 0 interface 22 altsetting 2 endpoint 0xB has invalid maxpacket 1056, setting to 64 [ 118.082206][ T29] usb 8-1: config 0 interface 22 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 118.086111][ T29] usb 8-1: config 0 interface 22 altsetting 2 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 118.090118][ T29] usb 8-1: config 0 interface 22 altsetting 2 has a duplicate endpoint with address 0x89, skipping [ 118.093655][ T29] usb 8-1: config 0 interface 22 altsetting 2 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 118.097720][ T29] usb 8-1: config 0 interface 22 has no altsetting 0 [ 118.100228][ T29] usb 8-1: language id specifier not provided by device, defaulting to English [ 118.104569][ T29] usb 8-1: New USB device found, idVendor=1bc7, idProduct=10d3, bcdDevice=4b.d5 [ 118.107656][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.110769][ T29] usb 8-1: Manufacturer: ༡撒ꈜ㐐丘؆㒲ꐼꍸ適꫎ᨍ鑻嬶⏅떷쏱뢃哆坭ᇧᵝ擏췷㐫傒௾㪡到㬏ᘋ쇓뿷窽Ԅ坸핒艱짔每‶రꊻ澙攁㛥걒苜䉙쁠ᩦ싡콐ഡ힘滶硈ꅐ﫛 [ 118.119697][ T29] usb 8-1: SerialNumber: 技鶜ດ岙쬀왲뭕ﱺ퇧坉햼츩ﮜ䖠㡮뜇鿺ᠨﴝ䀵壙ვ嬟悛溯磝﨨띒᪎楫瓫援嬏Թ鿸융限쇂Ꞿ䩲殏꯱썚퓧틀ὖ飂쵪쪕玅ⷙ⮱︴焪濥໼볳鷣ﻟ萯ㅪ熄略瀛ⷵꈛ헷龆껰镦ᰩ额픟蚖촠캂峑鬮碙ꈃ노珥몮袙ꫯ騣䜞䆁凪쩘멖뷌颊ꄭꊷ [ 118.134400][ T29] usb 8-1: config 0 descriptor?? [ 118.135306][ T40] audit: type=1400 audit(2000000005.299:840): avc: denied { setopt } for pid=8935 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.193087][ T5095] Bluetooth: hci4: command tx timeout [ 118.350043][ T29] option 8-1:0.22: GSM modem (1-port) converter detected [ 118.373656][ T29] usb 8-1: USB disconnect, device number 8 [ 118.385992][ T29] option 8-1:0.22: device disconnected [ 118.478997][ T8946] bond6: option xmit_hash_policy: invalid value (6) [ 118.482236][ T8946] bond6 (unregistering): Released all slaves [ 118.523124][ T8948] __nla_validate_parse: 9 callbacks suppressed [ 118.523139][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 118.528004][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 118.595225][ T8958] afs: Unknown parameter 'fsmagic' [ 118.893299][ T8965] ip6gretap0: entered promiscuous mode [ 118.931937][ T8967] netlink: 'syz.4.900': attribute type 1 has an invalid length. [ 118.945573][ T8967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.004108][ T8967] bond1: (slave veth3): Enslaving as an active interface with a down link [ 119.031591][ T8976] openvswitch: netlink: IP tunnel dst address not specified [ 119.034009][ T8976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.038894][ T40] audit: type=1800 audit(2000000006.209:841): pid=8976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.903" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 119.040387][ T8976] openvswitch: netlink: IP tunnel dst address not specified [ 119.048102][ T8976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.098421][ T8982] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.120145][ T8985] netlink: 76 bytes leftover after parsing attributes in process `syz.3.906'. [ 119.135021][ T8989] binder: 8988:8989 ioctl c0306201 200000000040 returned -14 [ 119.270067][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 119.393088][ T6499] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 119.484072][ T9018] support for cryptoloop has been removed. Use dm-crypt instead. [ 119.539668][ T9019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.562694][ T6499] usb 6-1: Using ep0 maxpacket: 8 [ 119.568892][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 119.569720][ T6499] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 119.576905][ T6499] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.580048][ T6499] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.582071][ T40] audit: type=1400 audit(2000000006.749:842): avc: denied { execute_no_trans } for pid=9020 comm="syz.2.919" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=29795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 119.583244][ T6499] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.601311][ T6499] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.605324][ T6499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.671807][ T10] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 119.816528][ T6499] usb 6-1: GET_CAPABILITIES returned 0 [ 119.818279][ T6499] usbtmc 6-1:16.0: can't read capabilities [ 119.833759][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 119.837371][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 119.842749][ T10] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 119.845760][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.848386][ T10] usb 9-1: Product: syz [ 119.849768][ T10] usb 9-1: Manufacturer: syz [ 119.851334][ T10] usb 9-1: SerialNumber: syz [ 119.854292][ T10] usb 9-1: config 0 descriptor?? [ 119.858360][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 119.860986][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 119.869295][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input14 [ 120.020489][ T10] usb 6-1: USB disconnect, device number 16 [ 120.125128][ T6499] usb 9-1: USB disconnect, device number 2 [ 120.271756][ T5095] Bluetooth: hci4: command tx timeout [ 120.385817][ T9040] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 120.397850][ T9040] bond6: entered promiscuous mode [ 120.399641][ T9040] 8021q: adding VLAN 0 to HW filter on device bond6 [ 120.493511][ T9052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.927'. [ 120.560722][ T9055] erspan1: entered allmulticast mode [ 120.608382][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 120.615752][ T9053] : entered promiscuous mode [ 120.755323][ T9059] ip6gretap0: entered promiscuous mode [ 120.771515][ T9061] FAULT_INJECTION: forcing a failure. [ 120.771515][ T9061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.776591][ T9061] CPU: 2 UID: 0 PID: 9061 Comm: syz.3.930 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.776614][ T9061] Tainted: [L]=SOFTLOCKUP [ 120.776618][ T9061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 120.776648][ T9061] Call Trace: [ 120.776654][ T9061] [ 120.776661][ T9061] dump_stack_lvl+0x100/0x190 [ 120.776686][ T9061] should_fail_ex.cold+0x5/0xa [ 120.776702][ T9061] _copy_from_user+0x2e/0xd0 [ 120.776720][ T9061] copy_msghdr_from_user+0x9f/0x4f0 [ 120.776739][ T9061] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 120.776758][ T9061] ___sys_sendmsg+0x106/0x1e0 [ 120.776772][ T9061] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.776800][ T9061] __sys_sendmsg+0x170/0x220 [ 120.776817][ T9061] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.776839][ T9061] ? rcu_is_watching+0x12/0xc0 [ 120.776857][ T9061] do_syscall_64+0x115/0x870 [ 120.776895][ T9061] ? clear_bhb_loop+0x40/0x90 [ 120.776908][ T9061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.776919][ T9061] RIP: 0033:0x7ff2f879ce59 [ 120.776928][ T9061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.776938][ T9061] RSP: 002b:00007ff2f959a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.776949][ T9061] RAX: ffffffffffffffda RBX: 00007ff2f8a15fa0 RCX: 00007ff2f879ce59 [ 120.776956][ T9061] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 120.776962][ T9061] RBP: 00007ff2f959a090 R08: 0000000000000000 R09: 0000000000000000 [ 120.776968][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.776974][ T9061] R13: 00007ff2f8a16038 R14: 00007ff2f8a15fa0 R15: 00007ffccc186478 [ 120.776988][ T9061] [ 121.029429][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.034516][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.040156][ T9065] xt_bpf: check failed: parse error [ 121.196873][ T9083] netlink: 'syz.2.937': attribute type 1 has an invalid length. [ 121.217266][ T9083] 8021q: adding VLAN 0 to HW filter on device bond7 [ 121.225599][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.937'. [ 121.338134][ T40] audit: type=1400 audit(2000000008.509:843): avc: denied { read } for pid=9085 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.389535][ T40] audit: type=1400 audit(2000000008.559:844): avc: denied { setopt } for pid=9085 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.426462][ T9089] overlay: Unknown parameter 'subj_type' [ 121.429138][ T9091] overlayfs: overlapping lowerdir path [ 121.431205][ T9089] overlayfs: overlapping lowerdir path [ 121.431831][ T34] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 121.468685][ T40] audit: type=1400 audit(2000000008.639:845): avc: denied { create } for pid=9092 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.480673][ T9093] overlayfs: workdir and upperdir must be separate subtrees [ 121.513099][ T9099] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 121.543711][ T9101] netlink: 'syz.2.942': attribute type 10 has an invalid length. [ 121.549834][ T9101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.559155][ T9101] team0: Port device bond0 added [ 121.601953][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 121.608081][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 121.613481][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 121.621913][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.625664][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.629937][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 121.634035][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.722930][ T9116] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.848278][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 121.850611][ T34] usbtmc 6-1:16.0: can't read capabilities [ 121.862025][ T5813] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 121.972558][ T9129] loop9: detected capacity change from 0 to 524287871 [ 122.024338][ T5813] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.032456][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 122.040047][ T5813] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 122.053388][ T5813] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 122.055874][ T844] usb 6-1: USB disconnect, device number 17 [ 122.056185][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.061206][ T5813] usb 7-1: Product: syz [ 122.063082][ T5813] usb 7-1: Manufacturer: syz [ 122.064522][ T5813] usb 7-1: SerialNumber: syz [ 122.072743][ T5813] usb 7-1: config 0 descriptor?? [ 122.074918][ T9111] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 122.141428][ T9134] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.143772][ T5813] rc_core: IR keymap rc-streamzap not found [ 122.146960][ T5813] Registered IR keymap rc-empty [ 122.154089][ T5813] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 122.160447][ T5813] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input15 [ 122.461060][ T9142] veth3: entered promiscuous mode [ 122.478034][ T9145] program syz.4.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.603792][ T9150] syzkaller0: entered promiscuous mode [ 122.607289][ T9150] syzkaller0: entered allmulticast mode [ 122.643639][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 122.643703][ T40] audit: type=1400 audit(2000000009.819:848): avc: denied { name_bind } for pid=9160 comm="syz.1.962" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 122.760978][ T844] libceph: connect (1)[c::]:6789 error -101 [ 122.763029][ T844] libceph: mon0 (1)[c::]:6789 connect error [ 122.812658][ T8709] libceph: connect (1)[b::]:6789 error -101 [ 122.818755][ T8709] libceph: mon0 (1)[b::]:6789 connect error [ 122.920680][ T9178] netlink: 80 bytes leftover after parsing attributes in process `syz.4.965'. [ 123.022294][ T844] libceph: connect (1)[c::]:6789 error -101 [ 123.024467][ T844] libceph: mon0 (1)[c::]:6789 connect error [ 123.072166][ T8709] libceph: connect (1)[b::]:6789 error -101 [ 123.074847][ T8709] libceph: mon0 (1)[b::]:6789 connect error [ 123.471544][ T29] usb 7-1: USB disconnect, device number 7 [ 123.512790][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 123.532499][ T844] libceph: connect (1)[c::]:6789 error -101 [ 123.536557][ T844] libceph: mon0 (1)[c::]:6789 connect error [ 123.547248][ T9180] netlink: 'syz.1.966': attribute type 10 has an invalid length. [ 123.561776][ T9180] team0: Failed to send options change via netlink (err -105) [ 123.565156][ T9180] team0: Port device dummy0 added [ 123.569478][ T9180] netlink: 'syz.1.966': attribute type 10 has an invalid length. [ 123.573931][ T9180] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.585399][ T9180] team0: Failed to send options change via netlink (err -105) [ 123.585937][ T9167] ceph: No mds server is up or the cluster is laggy [ 123.586164][ T9172] ceph: No mds server is up or the cluster is laggy [ 123.588851][ T9180] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 123.592205][ T8709] libceph: connect (1)[b::]:6789 error -101 [ 123.594969][ T9180] team0: Port device dummy0 removed [ 123.597948][ T8709] libceph: mon0 (1)[b::]:6789 connect error [ 123.687326][ T9183] FAULT_INJECTION: forcing a failure. [ 123.687326][ T9183] name failslab, interval 1, probability 0, space 0, times 0 [ 123.693817][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.4.967 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.693843][ T9183] Tainted: [L]=SOFTLOCKUP [ 123.693847][ T9183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.693858][ T9183] Call Trace: [ 123.693863][ T9183] [ 123.693870][ T9183] dump_stack_lvl+0x100/0x190 [ 123.693905][ T9183] should_fail_ex.cold+0x5/0xa [ 123.693930][ T9183] should_failslab+0xc2/0x120 [ 123.693950][ T9183] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 123.693970][ T9183] ? skb_clone+0x190/0x400 [ 123.694005][ T9183] skb_clone+0x190/0x400 [ 123.694031][ T9183] netlink_deliver_tap+0xaed/0xcc0 [ 123.694058][ T9183] netlink_unicast+0x62b/0x850 [ 123.694082][ T9183] ? __pfx_netlink_unicast+0x10/0x10 [ 123.694107][ T9183] netlink_sendmsg+0x8b0/0xda0 [ 123.694137][ T9183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.694156][ T9183] ? __might_fault+0xa0/0x140 [ 123.694189][ T9183] ____sys_sendmsg+0x9e1/0xb70 [ 123.694207][ T9183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.694243][ T9183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.694276][ T9183] ___sys_sendmsg+0x190/0x1e0 [ 123.694299][ T9183] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.694348][ T9183] __sys_sendmsg+0x170/0x220 [ 123.694374][ T9183] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.694411][ T9183] ? rcu_is_watching+0x12/0xc0 [ 123.694439][ T9183] do_syscall_64+0x115/0x870 [ 123.694464][ T9183] ? clear_bhb_loop+0x40/0x90 [ 123.694485][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.694503][ T9183] RIP: 0033:0x7f77a719ce59 [ 123.694518][ T9183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.694534][ T9183] RSP: 002b:00007f77a7fed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.694551][ T9183] RAX: ffffffffffffffda RBX: 00007f77a7415fa0 RCX: 00007f77a719ce59 [ 123.694562][ T9183] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 123.694571][ T9183] RBP: 00007f77a7fed090 R08: 0000000000000000 R09: 0000000000000000 [ 123.694580][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.694590][ T9183] R13: 00007f77a7416038 R14: 00007f77a7415fa0 R15: 00007ffeeecc2a98 [ 123.694614][ T9183] [ 123.705697][ T9183] ip6gretap0: entered promiscuous mode [ 124.019788][ T7178] Bluetooth: hci2: Frame reassembly failed (-84) [ 124.022621][ T7178] Bluetooth: hci2: Frame reassembly failed (-84) [ 124.024772][ T40] audit: type=1400 audit(2000000011.199:849): avc: denied { listen } for pid=9193 comm="syz.2.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.032398][ T6499] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 124.181899][ T6499] usb 9-1: Using ep0 maxpacket: 8 [ 124.185796][ T6499] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.190358][ T6499] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.194542][ T6499] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.198507][ T6499] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.204538][ T6499] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.208230][ T6499] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.261774][ T3262] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 124.411728][ T3262] usb 7-1: Using ep0 maxpacket: 8 [ 124.414581][ T3262] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.418233][ T3262] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.421242][ T3262] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.424471][ T6499] usb 9-1: GET_CAPABILITIES returned 0 [ 124.426267][ T6499] usbtmc 9-1:16.0: can't read capabilities [ 124.428429][ T3262] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.434194][ T3262] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.439192][ T3262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.597439][ T9214] FAULT_INJECTION: forcing a failure. [ 124.597439][ T9214] name failslab, interval 1, probability 0, space 0, times 0 [ 124.601383][ T9214] CPU: 2 UID: 0 PID: 9214 Comm: syz.3.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.601401][ T9214] Tainted: [L]=SOFTLOCKUP [ 124.601404][ T9214] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.601411][ T9214] Call Trace: [ 124.601422][ T9214] [ 124.601426][ T9214] dump_stack_lvl+0x100/0x190 [ 124.601462][ T9214] should_fail_ex.cold+0x5/0xa [ 124.601478][ T9214] should_failslab+0xc2/0x120 [ 124.601491][ T9214] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 124.601506][ T9214] ? skb_clone+0x190/0x400 [ 124.601530][ T9214] skb_clone+0x190/0x400 [ 124.601547][ T9214] netlink_deliver_tap+0xaed/0xcc0 [ 124.601563][ T9214] netlink_unicast+0x62b/0x850 [ 124.601579][ T9214] ? __pfx_netlink_unicast+0x10/0x10 [ 124.601596][ T9214] netlink_sendmsg+0x8b0/0xda0 [ 124.601611][ T9214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.601623][ T9214] ? __might_fault+0xa0/0x140 [ 124.601644][ T9214] ____sys_sendmsg+0x9e1/0xb70 [ 124.601656][ T9214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.601670][ T9214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.601689][ T9214] ___sys_sendmsg+0x190/0x1e0 [ 124.601702][ T9214] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.601755][ T9214] __sys_sendmsg+0x170/0x220 [ 124.601774][ T9214] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.601796][ T9214] ? rcu_is_watching+0x12/0xc0 [ 124.601814][ T9214] do_syscall_64+0x115/0x870 [ 124.601833][ T9214] ? clear_bhb_loop+0x40/0x90 [ 124.601846][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.601857][ T9214] RIP: 0033:0x7ff2f879ce59 [ 124.601867][ T9214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.601877][ T9214] RSP: 002b:00007ff2f959a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.601888][ T9214] RAX: ffffffffffffffda RBX: 00007ff2f8a15fa0 RCX: 00007ff2f879ce59 [ 124.601895][ T9214] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 124.601901][ T9214] RBP: 00007ff2f959a090 R08: 0000000000000000 R09: 0000000000000000 [ 124.601907][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.601913][ T9214] R13: 00007ff2f8a16038 R14: 00007ff2f8a15fa0 R15: 00007ffccc186478 [ 124.601928][ T9214] [ 124.671079][ T9192] FAULT_INJECTION: forcing a failure. [ 124.671079][ T9192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.675267][ T9192] CPU: 2 UID: 0 PID: 9192 Comm: syz.4.970 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.675285][ T9192] Tainted: [L]=SOFTLOCKUP [ 124.675288][ T9192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.675294][ T9192] Call Trace: [ 124.675298][ T9192] [ 124.675302][ T9192] dump_stack_lvl+0x100/0x190 [ 124.675318][ T9192] should_fail_ex.cold+0x5/0xa [ 124.675333][ T9192] _copy_from_user+0x2e/0xd0 [ 124.675353][ T9192] do_sys_poll+0x345/0xe90 [ 124.675366][ T9192] ? bpf_ksym_find+0x128/0x1c0 [ 124.675381][ T9192] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 124.675393][ T9192] ? is_bpf_text_address+0x94/0x1a0 [ 124.675408][ T9192] ? __pfx_do_sys_poll+0x10/0x10 [ 124.675420][ T9192] ? arch_stack_walk+0xa6/0xf0 [ 124.675473][ T9192] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 124.675489][ T9192] ? kernel_write+0x6b3/0x6c0 [ 124.675500][ T9192] ? __fget_files+0x215/0x3d0 [ 124.675512][ T9192] ? set_user_sigmask+0x1e1/0x270 [ 124.675526][ T9192] ? __pfx_set_user_sigmask+0x10/0x10 [ 124.675543][ T9192] __x64_sys_ppoll+0x2b5/0x350 [ 124.675557][ T9192] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 124.675570][ T9192] ? ksys_write+0x1ac/0x250 [ 124.675580][ T9192] ? __pfx_ksys_write+0x10/0x10 [ 124.675593][ T9192] ? rcu_is_watching+0x12/0xc0 [ 124.675610][ T9192] do_syscall_64+0x115/0x870 [ 124.675623][ T9192] ? clear_bhb_loop+0x40/0x90 [ 124.675636][ T9192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.675647][ T9192] RIP: 0033:0x7f77a719ce59 [ 124.675657][ T9192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.675667][ T9192] RSP: 002b:00007f77a7fed028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 124.675678][ T9192] RAX: ffffffffffffffda RBX: 00007f77a7415fa0 RCX: 00007f77a719ce59 [ 124.675684][ T9192] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 124.675690][ T9192] RBP: 00007f77a7fed090 R08: 0000000000000000 R09: 0000000000000000 [ 124.675696][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.675702][ T9192] R13: 00007f77a7416038 R14: 00007f77a7415fa0 R15: 00007ffeeecc2a98 [ 124.675717][ T9192] [ 124.676928][ T39] usb 9-1: USB disconnect, device number 3 [ 124.750669][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 124.753105][ T3262] usb 7-1: GET_CAPABILITIES returned 0 [ 124.754804][ T3262] usbtmc 7-1:16.0: can't read capabilities [ 124.911862][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 124.917265][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 124.920206][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.922936][ T24] usb 6-1: Product: syz [ 124.924234][ T24] usb 6-1: Manufacturer: syz [ 124.925738][ T24] usb 6-1: SerialNumber: syz [ 124.928769][ T24] usb 6-1: config 0 descriptor?? [ 124.935159][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 124.937824][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 124.937824][ T24] [ 124.940084][ T24] usb 6-1: selecting invalid altsetting 3 [ 124.942160][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 124.942160][ T24] [ 124.945853][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 124.956208][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.959837][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 124.964455][ T24] usb 6-1: media controller created [ 124.967730][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 124.969600][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 124.974688][ T24] dvb-usb: MAC address reading failed. [ 124.984452][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.014747][ T24] DVB: Unable to find symbol stb0899_attach() [ 125.016706][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 125.071706][ T24] rc_core: IR keymap rc-tt-1500 not found [ 125.073593][ T24] Registered IR keymap rc-empty [ 125.076291][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 125.080897][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input16 [ 125.087269][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 125.089474][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 125.089474][ T24] [ 125.091744][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 125.141820][ T9203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.145084][ T9203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.193654][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 125.201124][ T24] dvb-usb: error -22 while querying for an remote control event. [ 125.207631][ T9230] vivid-000: ================= START STATUS ================= [ 125.211287][ T9230] vivid-000: Test Pattern: 75% Colorbar [ 125.213315][ T9230] vivid-000: Fill Percentage of Frame: 100 [ 125.215177][ T9230] vivid-000: Horizontal Movement: No Movement [ 125.218558][ T9230] vivid-000: Vertical Movement: No Movement [ 125.221133][ T9230] vivid-000: OSD Text Mode: All [ 125.223283][ T9230] vivid-000: Show Border: false [ 125.225485][ T9230] vivid-000: Show Square: false [ 125.227844][ T9230] vivid-000: Sensor Flipped Horizontally: false [ 125.229773][ T9230] vivid-000: Sensor Flipped Vertically: false [ 125.231586][ T9230] vivid-000: Insert SAV Code in Image: false [ 125.234287][ T9230] vivid-000: Insert EAV Code in Image: false [ 125.236716][ T9230] vivid-000: Insert Video Guard Band: false [ 125.243198][ T9230] vivid-000: Reduced Framerate: false [ 125.244899][ T9230] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 125.247942][ T9230] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 125.250300][ T9234] veth1_macvtap: left promiscuous mode [ 125.250571][ T9230] vivid-000: Enable Capture Cropping: true [ 125.254707][ T9230] vivid-000: Enable Capture Composing: true [ 125.256602][ T9230] vivid-000: Enable Capture Scaler: true [ 125.258784][ T9230] vivid-000: Timestamp Source: End of Frame [ 125.260806][ T9230] vivid-000: Colorspace: sRGB [ 125.262736][ T9230] vivid-000: Transfer Function: Default [ 125.264659][ T9230] vivid-000: Y'CbCr Encoding: Default [ 125.266510][ T9230] vivid-000: HSV Encoding: Hue 0-179 [ 125.268691][ T9230] vivid-000: Quantization: Default [ 125.270932][ T9230] vivid-000: Apply Alpha To Red Only: false [ 125.273463][ T9230] vivid-000: Standard Aspect Ratio: 4x3 [ 125.275739][ T9230] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 125.278867][ T9230] vivid-000: DV Timings: 640x480p59 inactive [ 125.281432][ T9230] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 125.284688][ T9230] vivid-000: Maximum EDID Blocks: 2 [ 125.286795][ T9230] vivid-000: Limited RGB Range (16-235): false [ 125.289404][ T9230] vivid-000: Rx RGB Quantization Range: Automatic [ 125.291744][ T9230] vivid-000: Power Present: 0x00000001 [ 125.293541][ T9230] tpg source WxH: 320x180 (R'G'B) [ 125.296358][ T9230] tpg field: 1 [ 125.297467][ T9230] tpg crop: (0,0)/320x180 [ 125.298798][ T9230] tpg compose: (0,0)/320x180 [ 125.300335][ T9230] tpg colorspace: 8 [ 125.302293][ T9230] tpg transfer function: 0/2 [ 125.304259][ T9230] tpg quantization: 0/2 [ 125.306027][ T9230] tpg RGB range: 0/2 [ 125.308046][ T9230] vivid-000: ================== END STATUS ================== [ 125.311953][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 125.314118][ T24] dvb-usb: error -22 while querying for an remote control event. [ 125.378198][ T9248] netlink: 'syz.4.990': attribute type 1 has an invalid length. [ 125.405334][ T9248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.418218][ T9248] vlan2: entered allmulticast mode [ 125.420350][ T9248] bond2: entered allmulticast mode [ 125.424544][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 125.426679][ T39] dvb-usb: error -22 while querying for an remote control event. [ 125.436226][ T9248] bond2: (slave geneve2): making interface the new active one [ 125.439423][ T9248] geneve2: entered allmulticast mode [ 125.446455][ T9248] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 125.531796][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 125.534195][ T39] dvb-usb: error -22 while querying for an remote control event. [ 125.603164][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 125.606047][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 125.633946][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 125.636965][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 125.641887][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 125.641930][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 125.644734][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 125.646493][ T39] dvb-usb: error -22 while querying for an remote control event. [ 125.721763][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 125.751777][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 125.753690][ T39] dvb-usb: error -22 while querying for an remote control event. [ 125.862118][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 125.864675][ T39] dvb-usb: error -22 while querying for an remote control event. [ 125.881834][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 125.884727][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 125.888171][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 125.891332][ T34] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.894460][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.898415][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.899206][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 125.901328][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.971766][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 125.974174][ T39] dvb-usb: error -22 while querying for an remote control event. [ 126.031724][ T5095] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 126.032009][ T5745] Bluetooth: hci2: command 0x1003 tx timeout [ 126.081809][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 126.083562][ T39] dvb-usb: error -22 while querying for an remote control event. [ 126.106461][ T34] usb 9-1: GET_CAPABILITIES returned 0 [ 126.108242][ T34] usbtmc 9-1:16.0: can't read capabilities [ 126.192255][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 126.194176][ T39] dvb-usb: error -22 while querying for an remote control event. [ 126.289694][ T40] audit: type=1400 audit(2000000013.459:850): avc: denied { ioctl } for pid=9279 comm="syz.3.1000" path="/344/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 126.301788][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 126.303605][ T39] dvb-usb: error -22 while querying for an remote control event. [ 126.313270][ T9254] FAULT_INJECTION: forcing a failure. [ 126.313270][ T9254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.318528][ T9254] CPU: 2 UID: 0 PID: 9254 Comm: syz.4.992 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.318557][ T9254] Tainted: [L]=SOFTLOCKUP [ 126.318562][ T9254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 126.318573][ T9254] Call Trace: [ 126.318580][ T9254] [ 126.318588][ T9254] dump_stack_lvl+0x100/0x190 [ 126.318615][ T9254] should_fail_ex.cold+0x5/0xa [ 126.318647][ T9254] _copy_to_user+0x32/0xd0 [ 126.318670][ T9254] simple_read_from_buffer+0xcb/0x170 [ 126.318694][ T9254] proc_fail_nth_read+0x1af/0x230 [ 126.318716][ T9254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.318752][ T9254] ? rw_verify_area+0xce/0x6d0 [ 126.318771][ T9254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.318790][ T9254] vfs_read+0x1e4/0xb30 [ 126.318812][ T9254] ? __pfx_vfs_read+0x10/0x10 [ 126.318829][ T9254] ? __fget_files+0x215/0x3d0 [ 126.318857][ T9254] ? __fget_files+0x21f/0x3d0 [ 126.318887][ T9254] ksys_read+0x12a/0x250 [ 126.318906][ T9254] ? __pfx_ksys_read+0x10/0x10 [ 126.318927][ T9254] ? rcu_is_watching+0x12/0xc0 [ 126.318957][ T9254] do_syscall_64+0x115/0x870 [ 126.318985][ T9254] ? clear_bhb_loop+0x40/0x90 [ 126.319008][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.319026][ T9254] RIP: 0033:0x7f77a715d68e [ 126.319041][ T9254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.319057][ T9254] RSP: 002b:00007f77a7fecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.319075][ T9254] RAX: ffffffffffffffda RBX: 00007f77a7fed6c0 RCX: 00007f77a715d68e [ 126.319086][ T9254] RDX: 000000000000000f RSI: 00007f77a7fed0a0 RDI: 0000000000000005 [ 126.319097][ T9254] RBP: 00007f77a7fed090 R08: 0000000000000000 R09: 0000000000000000 [ 126.319107][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.319116][ T9254] R13: 00007f77a7416038 R14: 00007f77a7415fa0 R15: 00007ffeeecc2a98 [ 126.319142][ T9254] [ 126.328246][ T9283] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1001'. [ 126.330357][ T34] usb 9-1: USB disconnect, device number 4 [ 126.354859][ T9283] bond4: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 126.399363][ T7178] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.402542][ T9283] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1001'. [ 126.406308][ T9283] bond4: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 126.411784][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 126.414310][ T39] dvb-usb: error -22 while querying for an remote control event. [ 126.478833][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 126.521335][ T9294] tipc: New replicast peer: 0.0.0.0 [ 126.523123][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 126.524983][ T39] dvb-usb: error -22 while querying for an remote control event. [ 126.527800][ T9294] tipc: Enabled bearer , priority 10 [ 126.531159][ T9294] tipc: Enabling of bearer rejected, already enabled [ 126.632856][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 126.637520][ T39] dvb-usb: error -22 while querying for an remote control event. [ 126.643235][ T40] audit: type=1400 audit(2000000013.819:851): avc: denied { mount } for pid=9300 comm="syz.3.1007" name="/" dev="rpc_pipefs" ino=29363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 126.656413][ T40] audit: type=1400 audit(2000000013.819:852): avc: denied { unmount } for pid=9300 comm="syz.3.1007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 126.751776][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 126.754142][ T24] dvb-usb: error -22 while querying for an remote control event. [ 126.861769][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 126.863639][ T24] dvb-usb: error -22 while querying for an remote control event. [ 126.941987][ T39] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 126.971836][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 126.974252][ T24] dvb-usb: error -22 while querying for an remote control event. [ 127.012454][ T844] usb 7-1: USB disconnect, device number 8 [ 127.082080][ T3262] dvb-usb: bulk message failed: -22 (4/0) [ 127.083873][ T3262] dvb-usb: error -22 while querying for an remote control event. [ 127.111744][ T39] usb 8-1: Using ep0 maxpacket: 32 [ 127.115610][ T39] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 127.121120][ T39] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 127.129136][ T39] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 127.136968][ T39] usb 8-1: Product: syz [ 127.138375][ T39] usb 8-1: Manufacturer: syz [ 127.139871][ T39] usb 8-1: SerialNumber: syz [ 127.153180][ T39] usb 8-1: config 0 descriptor?? [ 127.155613][ T9301] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 127.162521][ T39] hub 8-1:0.0: bad descriptor, ignoring hub [ 127.166558][ T39] hub 8-1:0.0: probe with driver hub failed with error -5 [ 127.191809][ T3262] dvb-usb: bulk message failed: -22 (4/0) [ 127.193708][ T3262] dvb-usb: error -22 while querying for an remote control event. [ 127.308211][ T3262] dvb-usb: bulk message failed: -22 (4/0) [ 127.310022][ T3262] dvb-usb: error -22 while querying for an remote control event. [ 127.396037][ T40] audit: type=1400 audit(2000000014.569:853): avc: denied { getopt } for pid=9306 comm="syz.2.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 127.421799][ T39] dvb-usb: bulk message failed: -22 (4/0) [ 127.425249][ T39] dvb-usb: error -22 while querying for an remote control event. [ 127.471992][ T3262] usb 8-1: USB disconnect, device number 10 [ 127.532914][ T3262] dvb-usb: bulk message failed: -22 (4/0) [ 127.534721][ T3262] dvb-usb: error -22 while querying for an remote control event. [ 127.538008][ T9313] kAFS: No cell specified [ 127.541417][ T9313] 8021q: VLANs not supported on tunl0 [ 127.642025][ T3262] dvb-usb: bulk message failed: -22 (4/0) [ 127.649962][ T3262] dvb-usb: error -22 while querying for an remote control event. [ 127.678236][ T3262] usb 6-1: USB disconnect, device number 18 [ 127.724085][ T3262] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 128.376775][ T9339] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 128.397009][ T9339] kvm: pic: non byte read [ 128.400076][ T9339] kvm: pic: non byte read [ 128.405462][ T9339] kvm: pic: non byte read [ 128.408672][ T9339] kvm: pic: non byte read [ 128.412336][ T9339] kvm: pic: non byte read [ 128.416725][ T9339] kvm: pic: level sensitive irq not supported [ 128.417940][ T9339] kvm: pic: non byte read [ 128.426186][ T40] audit: type=1400 audit(2000000015.599:854): avc: denied { read } for pid=9338 comm="syz.2.1020" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 128.542526][ T40] audit: type=1400 audit(2000000015.719:855): avc: denied { create } for pid=9354 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.584122][ T40] audit: type=1400 audit(2000000015.759:856): avc: denied { getopt } for pid=9354 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 128.668937][ T9370] F2FS-fs: Conflicting test_dummy_encryption options [ 128.690769][ T40] audit: type=1400 audit(2000000015.859:857): avc: denied { mounton } for pid=9373 comm="syz.2.1033" path="/288/file1/file0" dev="autofs" ino=32093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 128.696004][ T9374] fuse: Bad value for 'fd' [ 128.721908][ T9370] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 128.721908][ T9370] The task syz.3.1031 (9370) triggered the difference, watch for misbehavior. [ 128.828584][ T9379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.851752][ T3262] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 129.012295][ T3262] usb 9-1: Using ep0 maxpacket: 8 [ 129.015529][ T3262] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 129.018225][ T3262] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.021491][ T3262] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 129.025368][ T3262] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 129.028636][ T3262] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.033041][ T3262] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 129.036068][ T3262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.527950][ T40] audit: type=1400 audit(2000000016.699:858): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 129.705241][ T9392] FAULT_INJECTION: forcing a failure. [ 129.705241][ T9392] name failslab, interval 1, probability 0, space 0, times 0 [ 129.709375][ T9392] CPU: 2 UID: 0 PID: 9392 Comm: syz.3.1039 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.709393][ T9392] Tainted: [L]=SOFTLOCKUP [ 129.709396][ T9392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 129.709402][ T9392] Call Trace: [ 129.709407][ T9392] [ 129.709412][ T9392] dump_stack_lvl+0x100/0x190 [ 129.709436][ T9392] should_fail_ex.cold+0x5/0xa [ 129.709452][ T9392] should_failslab+0xc2/0x120 [ 129.709464][ T9392] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 129.709481][ T9392] ? security_inode_alloc+0x3b/0x2c0 [ 129.709500][ T9392] ? lockdep_init_map_type+0x5c/0x250 [ 129.709516][ T9392] security_inode_alloc+0x3b/0x2c0 [ 129.709531][ T9392] inode_init_always_gfp+0xc77/0xfb0 [ 129.709549][ T9392] alloc_inode+0x8e/0x250 [ 129.709559][ T9392] new_inode+0x22/0x1c0 [ 129.709571][ T9392] __debugfs_create_file+0x105/0x4f0 [ 129.709587][ T9392] debugfs_create_file_full+0x41/0x60 [ 129.709605][ T9392] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 129.709622][ T9392] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 129.709649][ T9392] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 129.709665][ T9392] ? alloc_netdev_mqs+0xd7/0x1560 [ 129.709687][ T9392] ? lockdep_init_map_type+0x5c/0x250 [ 129.709702][ T9392] ? __pfx_macsec_setup+0x10/0x10 [ 129.709716][ T9392] alloc_netdev_mqs+0x314/0x1560 [ 129.709736][ T9392] rtnl_create_link+0xc13/0xf80 [ 129.709755][ T9392] rtnl_newlink+0x13bd/0x2380 [ 129.709770][ T9392] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.709779][ T9392] ? find_held_lock+0x2b/0x80 [ 129.709788][ T9392] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 129.709800][ T9392] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 129.709814][ T9392] ? avc_has_perm_noaudit+0x145/0x3b0 [ 129.709838][ T9392] ? find_held_lock+0x2b/0x80 [ 129.709847][ T9392] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 129.709871][ T9392] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 129.709882][ T9392] ? __pfx_rtnl_newlink+0x10/0x10 [ 129.709893][ T9392] rtnetlink_rcv_msg+0x95e/0xe90 [ 129.709904][ T9392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.709919][ T9392] ? ref_tracker_free+0x37e/0x6c0 [ 129.709936][ T9392] netlink_rcv_skb+0x159/0x420 [ 129.709950][ T9392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 129.709961][ T9392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.709979][ T9392] ? netlink_deliver_tap+0x1ae/0xcc0 [ 129.709995][ T9392] netlink_unicast+0x585/0x850 [ 129.710010][ T9392] ? __pfx_netlink_unicast+0x10/0x10 [ 129.710027][ T9392] netlink_sendmsg+0x8b0/0xda0 [ 129.710043][ T9392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.710055][ T9392] ? __might_fault+0xa0/0x140 [ 129.710076][ T9392] ____sys_sendmsg+0x9e1/0xb70 [ 129.710088][ T9392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.710102][ T9392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.710121][ T9392] ___sys_sendmsg+0x190/0x1e0 [ 129.710136][ T9392] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.710167][ T9392] __sys_sendmsg+0x170/0x220 [ 129.710183][ T9392] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.710206][ T9392] ? rcu_is_watching+0x12/0xc0 [ 129.710224][ T9392] do_syscall_64+0x115/0x870 [ 129.710243][ T9392] ? clear_bhb_loop+0x40/0x90 [ 129.710256][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.710267][ T9392] RIP: 0033:0x7ff2f879ce59 [ 129.710276][ T9392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.710286][ T9392] RSP: 002b:00007ff2f959a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.710298][ T9392] RAX: ffffffffffffffda RBX: 00007ff2f8a15fa0 RCX: 00007ff2f879ce59 [ 129.710304][ T9392] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 129.710310][ T9392] RBP: 00007ff2f959a090 R08: 0000000000000000 R09: 0000000000000000 [ 129.710316][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.710322][ T9392] R13: 00007ff2f8a16038 R14: 00007ff2f8a15fa0 R15: 00007ffccc186478 [ 129.710337][ T9392] [ 129.710429][ T9392] debugfs: out of free dentries, can not create file 'netdev@ffff888026a54658' [ 129.798139][ T9393] usbtmc 9-1:16.0: simple usb_control_msg failed -32 [ 129.939081][ T10] libceph: connect (1)[c::]:6789 error -101 [ 129.941982][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 129.991144][ T10] usb 9-1: USB disconnect, device number 5 [ 130.004920][ T34] libceph: connect (1)[c::]:6789 error -101 [ 130.006080][ T9406] gfs2: error -5 reading superblock [ 130.009028][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 130.019696][ T40] audit: type=1326 audit(2000000017.189:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.3.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f879ce59 code=0x7ff00000 [ 130.029764][ T40] audit: type=1326 audit(2000000017.189:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.3.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f879ce59 code=0x7ff00000 [ 130.039714][ T40] audit: type=1326 audit(2000000017.189:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.3.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f879ce59 code=0x7ff00000 [ 130.049380][ T40] audit: type=1326 audit(2000000017.189:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.3.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f879ce59 code=0x7ff00000 [ 130.059732][ T40] audit: type=1326 audit(2000000017.189:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.3.1042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f879ce59 code=0x7ff00000 [ 130.202639][ T10] libceph: connect (1)[c::]:6789 error -101 [ 130.205396][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 130.272043][ T34] libceph: connect (1)[c::]:6789 error -101 [ 130.274641][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 130.536603][ T9411] netlink: 'syz.4.1044': attribute type 2 has an invalid length. [ 130.539755][ T9411] netlink: 'syz.4.1044': attribute type 2 has an invalid length. [ 130.552421][ T34] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 130.701756][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 130.705059][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 130.712158][ T10] libceph: connect (1)[c::]:6789 error -101 [ 130.712592][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 130.714462][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 130.717681][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.722563][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.727732][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.731208][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.775153][ T9395] ceph: No mds server is up or the cluster is laggy [ 130.775161][ T9402] ceph: No mds server is up or the cluster is laggy [ 130.783550][ T8709] libceph: connect (1)[c::]:6789 error -101 [ 130.792105][ T8709] libceph: mon0 (1)[c::]:6789 connect error [ 130.943251][ T34] usb 8-1: GET_CAPABILITIES returned 0 [ 130.944969][ T34] usbtmc 8-1:16.0: can't read capabilities [ 131.019599][ T9424] __nla_validate_parse: 3 callbacks suppressed [ 131.019611][ T9424] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1048'. [ 131.045939][ T9425] syzkaller0: entered promiscuous mode [ 131.047730][ T9425] syzkaller0: entered allmulticast mode [ 131.050712][ T9424] tipc: Started in network mode [ 131.052283][ T9424] tipc: Node identity a24b7d40ca68, cluster identity 4711 [ 131.054932][ T9424] tipc: Enabled bearer , priority 0 [ 131.070613][ T9423] tipc: Resetting bearer [ 131.096089][ T9423] tipc: Disabling bearer [ 131.151395][ T34] usb 8-1: USB disconnect, device number 12 [ 131.348717][ T9441] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 131.411170][ T9441] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 131.933120][ T9457] /dev/sg0: Can't lookup blockdev [ 131.933341][ T9458] /dev/sg0: Can't lookup blockdev [ 132.070274][ T9464] kvm: kvm [9463]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 132.073940][ T9464] kvm: kvm [9463]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 132.124064][ T9441] syz.1.1051 (9441) used greatest stack depth: 18952 bytes left [ 132.441809][ T39] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 132.534401][ T9488] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 132.624412][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 132.627995][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 132.631405][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 132.637831][ T39] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 132.640905][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.643900][ T39] usb 6-1: Product: syz [ 132.645371][ T39] usb 6-1: Manufacturer: syz [ 132.647016][ T39] usb 6-1: SerialNumber: syz [ 132.652393][ T39] usb 6-1: config 0 descriptor?? [ 132.861339][ T39] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 133.075379][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 133.078200][ T9490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1070'. [ 133.129282][ T39] usb 6-1: USB disconnect, device number 19 [ 133.449558][ T40] kauditd_printk_skb: 2219 callbacks suppressed [ 133.449569][ T40] audit: type=1400 audit(2000000020.619:3083): avc: denied { create } for pid=9512 comm="syz.4.1077" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.458257][ T9509] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1076'. [ 133.459269][ T40] audit: type=1400 audit(2000000020.629:3084): avc: denied { read } for pid=9512 comm="syz.4.1077" name="file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.469009][ T40] audit: type=1400 audit(2000000020.629:3085): avc: denied { open } for pid=9512 comm="syz.4.1077" path="/62/file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.478389][ T40] audit: type=1400 audit(2000000020.629:3086): avc: denied { ioctl } for pid=9512 comm="syz.4.1077" path="/62/file0" dev="tmpfs" ino=338 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.536556][ T9522] ptrace attach of "/syz-executor exec"[9523] was attempted by "/syz-executor exec"[9522] [ 133.541548][ T40] audit: type=1400 audit(2000000020.709:3087): avc: denied { write } for pid=9521 comm="syz.3.1079" name="usbmon6" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.559941][ T40] audit: type=1400 audit(2000000020.729:3088): avc: denied { unlink } for pid=8582 comm="syz-executor" name="file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.618927][ T40] audit: type=1400 audit(2000000020.789:3089): avc: denied { name_bind } for pid=9527 comm="syz.4.1081" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 133.677650][ T40] audit: type=1400 audit(2000000020.849:3090): avc: denied { ioctl } for pid=9531 comm="syz.4.1082" path="socket:[30486]" dev="sockfs" ino=30486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.766105][ T9540] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 133.779130][ T9540] kvm: pic: non byte read [ 133.788121][ T9540] kvm: pic: non byte read [ 133.797243][ T9540] kvm: pic: non byte read [ 133.802704][ T9540] kvm: pic: non byte read [ 133.807134][ T9540] kvm: pic: non byte read [ 133.811304][ T9540] kvm: pic: level sensitive irq not supported [ 133.813500][ T9540] kvm: pic: non byte read [ 133.852487][ T9545] syz.1.1083: vmalloc error: size 18446744073699065859, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.864247][ T9545] CPU: 3 UID: 0 PID: 9545 Comm: syz.1.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.864278][ T9545] Tainted: [L]=SOFTLOCKUP [ 133.864285][ T9545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.864297][ T9545] Call Trace: [ 133.864303][ T9545] [ 133.864310][ T9545] dump_stack_lvl+0x100/0x190 [ 133.864347][ T9545] warn_alloc.cold+0x95/0x1c1 [ 133.864369][ T9545] ? __pfx_warn_alloc+0x10/0x10 [ 133.864393][ T9545] ? do_syscall_64+0x115/0x870 [ 133.864428][ T9545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.864481][ T9545] ? __lock_acquire+0x4a5/0x2630 [ 133.864505][ T9545] ? find_held_lock+0x2b/0x80 [ 133.864521][ T9545] ? avc_has_extended_perms+0x33a/0x1080 [ 133.864549][ T9545] ? avc_has_extended_perms+0x33a/0x1080 [ 133.864570][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.864603][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.864634][ T9545] __vmalloc_node_range_noprof+0x136c/0x1630 [ 133.864663][ T9545] ? rcu_is_watching+0x12/0xc0 [ 133.864687][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.864716][ T9545] ? trace_contention_end+0x122/0x170 [ 133.864739][ T9545] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 133.864767][ T9545] ? dvb_demux_do_ioctl+0x929/0x1200 [ 133.864797][ T9545] ? find_held_lock+0x2b/0x80 [ 133.864813][ T9545] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.864832][ T9545] ? __pfx___mutex_lock+0x10/0x10 [ 133.864859][ T9545] ? tomoyo_path_number_perm+0x188/0x580 [ 133.864885][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.864912][ T9545] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 133.864940][ T9545] __vmalloc_node_noprof+0xad/0xf0 [ 133.864962][ T9545] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 133.864983][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.865002][ T9545] dvb_demux_do_ioctl+0x9e0/0x1200 [ 133.865027][ T9545] ? do_vfs_ioctl+0x226/0x13e0 [ 133.865042][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.865061][ T9545] dvb_usercopy+0x167/0x340 [ 133.865078][ T9545] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 133.865096][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.865115][ T9545] ? __pfx_dvb_usercopy+0x10/0x10 [ 133.865137][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.865156][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.865174][ T9545] ? selinux_file_ioctl+0x13b/0x290 [ 133.865190][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.865207][ T9545] ? selinux_file_ioctl+0xb6/0x290 [ 133.865223][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.865241][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.865259][ T9545] dvb_demux_ioctl+0x29/0x40 [ 133.865274][ T9545] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 133.865290][ T9545] __x64_sys_ioctl+0x18e/0x210 [ 133.865303][ T9545] do_syscall_64+0x115/0x870 [ 133.865317][ T9545] ? clear_bhb_loop+0x40/0x90 [ 133.865331][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.865342][ T9545] RIP: 0033:0x7f6fb599ce59 [ 133.865353][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.865364][ T9545] RSP: 002b:00007f6fb67c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.865376][ T9545] RAX: ffffffffffffffda RBX: 00007f6fb5c15fa0 RCX: 00007f6fb599ce59 [ 133.865383][ T9545] RDX: ffffffffff600003 RSI: 0000000000006f2d RDI: 0000000000000004 [ 133.865390][ T9545] RBP: 00007f6fb5a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 133.865396][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.865404][ T9545] R13: 00007f6fb5c16038 R14: 00007f6fb5c15fa0 R15: 00007ffd2643f2e8 [ 133.865416][ T9545] ? __UNIQUE_ID_modinfo_715+0x63e68833/0xffffffffffeca830 [ 133.865438][ T9545] [ 133.865442][ T9545] Mem-Info: [ 134.000201][ T9545] active_anon:15756 inactive_anon:0 isolated_anon:0 [ 134.000201][ T9545] active_file:14356 inactive_file:50983 isolated_file:0 [ 134.000201][ T9545] unevictable:1768 dirty:160 writeback:0 [ 134.000201][ T9545] slab_reclaimable:7712 slab_unreclaimable:75742 [ 134.000201][ T9545] mapped:30139 shmem:6670 pagetables:1423 [ 134.000201][ T9545] sec_pagetables:298 bounce:0 [ 134.000201][ T9545] kernel_misc_reclaimable:0 [ 134.000201][ T9545] free:432223 free_pcp:16719 free_cma:0 [ 134.018829][ T9545] Node 0 active_anon:65560kB inactive_anon:0kB active_file:57424kB inactive_file:203628kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:114600kB dirty:640kB writeback:0kB shmem:25496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14880kB pagetables:5496kB sec_pagetables:1184kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 134.030690][ T9545] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8300kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 134.041792][ T9545] Node 0 DMA free:7156kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 134.051167][ T9545] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 134.053153][ T9545] Node 0 DMA32 free:96804kB boost:0kB min:27484kB low:34352kB high:41220kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68144kB inactive_anon:0kB active_file:57424kB inactive_file:203628kB unevictable:3536kB writepending:640kB zspages:0kB present:2080628kB managed:1261140kB mlocked:0kB bounce:0kB free_pcp:55020kB local_pcp:18464kB free_cma:0kB [ 134.063450][ T9545] lowmem_reserve[]: 0 0 0 0 0 [ 134.065063][ T9545] Node 1 Normal free:1625144kB boost:0kB min:39756kB low:49692kB high:59628kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:6624kB local_pcp:4880kB free_cma:0kB [ 134.075430][ T9545] lowmem_reserve[]: 0 0 0 0 0 [ 134.077158][ T9545] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 1*4096kB (M) = 7156kB [ 134.081981][ T9545] Node 0 DMA32: 1051*4kB (UME) 1275*8kB (UME) 226*16kB (UME) 485*32kB (UE) 98*64kB (UE) 18*128kB (UE) 4*256kB (ME) 27*512kB (ME) 16*1024kB (M) 4*2048kB (M) 2*4096kB (UM) = 89732kB [ 134.088023][ T9545] Node 1 Normal: 8*4kB (UM) 9*8kB (UM) 3*16kB (M) 7*32kB (UM) 17*64kB (UM) 11*128kB (UM) 3*256kB (U) 7*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 394*4096kB (M) = 1625144kB [ 134.093569][ T9545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.097049][ T9545] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.100515][ T9545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.105108][ T9545] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.108256][ T9545] 75076 total pagecache pages [ 134.109832][ T9545] 0 pages in swap cache [ 134.111232][ T9545] Free swap = 124996kB [ 134.113077][ T9545] Total swap = 124996kB [ 134.116462][ T5144] pmem0: [POWERTEC] [ 134.118059][ T9545] 1048443 pages RAM [ 134.122016][ T9545] 0 pages HighMem/MovableOnly [ 134.128874][ T9545] 283847 pages reserved [ 134.130747][ T9545] 0 pages cma reserved [ 134.241372][ T9551] SQUASHFS error: Failed to read block 0x0: -5 [ 134.247048][ T9551] unable to read squashfs_super_block [ 134.773364][ T9569] lo speed is unknown, defaulting to 1000 [ 134.775709][ T9569] lo speed is unknown, defaulting to 1000 [ 134.779492][ T9569] lo speed is unknown, defaulting to 1000 [ 134.784504][ T9569] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 134.790381][ T9569] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 134.798111][ T9569] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 134.804380][ T9569] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.811272][ T9569] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 134.838891][ T9569] lo speed is unknown, defaulting to 1000 [ 134.842588][ T9569] lo speed is unknown, defaulting to 1000 [ 134.845291][ T9569] lo speed is unknown, defaulting to 1000 [ 134.847883][ T9569] lo speed is unknown, defaulting to 1000 [ 134.850565][ T9569] lo speed is unknown, defaulting to 1000 [ 135.321795][ T3262] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 135.355805][ T9594] IPv6: Can't replace route, no match found [ 135.361589][ T40] audit: type=1400 audit(2000000022.529:3091): avc: denied { ioctl } for pid=9593 comm="syz.1.1100" path="socket:[30660]" dev="sockfs" ino=30660 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 135.471757][ T3262] usb 8-1: Using ep0 maxpacket: 16 [ 135.476011][ T3262] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 1104, setting to 1024 [ 135.480603][ T3262] usb 8-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1024 [ 135.485323][ T3262] usb 8-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.490392][ T3262] usb 8-1: config 1 interface 0 has no altsetting 0 [ 135.495348][ T3262] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 135.498821][ T3262] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.501380][ T3262] usb 8-1: Product: ь [ 135.502832][ T3262] usb 8-1: Manufacturer: ї [ 135.504249][ T3262] usb 8-1: SerialNumber: syz [ 135.508126][ T9580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.510455][ T9580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.724248][ T3262] usb 8-1: USB disconnect, device number 13 [ 135.730990][ T40] audit: type=1400 audit(2000000022.899:3092): avc: denied { unmount } for pid=8582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 135.809106][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 136.231021][ T9618] netlink: 372 bytes leftover after parsing attributes in process `syz.4.1108'. [ 136.494966][ T9639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1115'. [ 136.519997][ T9635] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 136.525348][ T9635] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 136.564502][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.571531][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.578714][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.583385][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.586582][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.604671][ T9651] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 136.711066][ T9658] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 136.771245][ T9647] lo speed is unknown, defaulting to 1000 [ 136.962177][ T9647] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.964283][ T9647] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.966505][ T9647] bridge_slave_0: entered allmulticast mode [ 136.969004][ T9647] bridge_slave_0: entered promiscuous mode [ 136.975225][ T9647] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.977919][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.980578][ T9647] bridge_slave_1: entered allmulticast mode [ 136.984419][ T9647] bridge_slave_1: entered promiscuous mode [ 137.011259][ T9647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.015766][ T9647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.032458][ T9647] team0: Port device team_slave_0 added [ 137.035573][ T9647] team0: Port device team_slave_1 added [ 137.051302][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.053293][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.061493][ T9647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.067842][ T9647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.069809][ T9647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.077000][ T9647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.106503][ T9647] hsr_slave_0: entered promiscuous mode [ 137.108893][ T9647] hsr_slave_1: entered promiscuous mode [ 137.111019][ T9647] debugfs: 'hsr0' already exists in 'hsr' [ 137.112906][ T9647] Cannot create hsr debugfs directory [ 137.207821][ T9647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.211466][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.214245][ T9647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.218664][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.221293][ T9647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.226687][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.229193][ T9647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.232808][ T9647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.245697][ T9647] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.247766][ T9647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.249898][ T9647] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.251955][ T9647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.279996][ T9647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.288060][ T7179] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.290827][ T7179] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.299340][ T9647] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.305515][ T7182] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.308347][ T7182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.316027][ T7179] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.318545][ T7179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.443706][ T9690] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 137.445938][ T9690] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 137.451806][ T9690] vhci_hcd vhci_hcd.0: Device attached [ 137.458432][ T9691] usbip_core: unknown command [ 137.459957][ T9691] vhci_hcd: unknown pdu 0 [ 137.461421][ T9691] usbip_core: unknown command [ 137.471287][ T7178] vhci_hcd vhci_hcd.1: stop threads [ 137.473101][ T7178] vhci_hcd vhci_hcd.1: release socket [ 137.476123][ T7178] vhci_hcd vhci_hcd.1: disconnect device [ 137.586533][ T9704] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 137.590041][ T9647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.635037][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 137.644040][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 137.751366][ T9647] veth0_vlan: entered promiscuous mode [ 137.757604][ T9647] veth1_vlan: entered promiscuous mode [ 137.779784][ T9647] veth0_macvtap: entered promiscuous mode [ 137.788877][ T9647] veth1_macvtap: entered promiscuous mode [ 137.807402][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.808592][ T9728] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 137.815252][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 137.818312][ T9647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.826296][ T7178] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.829428][ T7178] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.832968][ T7178] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.836307][ T7178] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.906004][ T9728] loop8: detected capacity change from 0 to 7 [ 137.911066][ T7183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.914144][ T7183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.923322][ T9728] Dev loop8: unable to read RDB block 7 [ 137.925587][ T9728] loop8: AHDI p1 p2 [ 137.926853][ T9728] loop8: partition table partially beyond EOD, truncated [ 137.929769][ T9728] loop8: p1 start 1702000233 is beyond EOD, truncated [ 137.957050][ T7178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.959923][ T7178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.100441][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1130'. [ 138.105415][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1130'. [ 138.113263][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.115474][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.452632][ T9757] overlayfs: failed to clone upperpath [ 138.478049][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 138.478066][ T40] audit: type=1400 audit(2000000025.649:3101): avc: denied { create } for pid=9761 comm="syz.1.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 138.488811][ T40] audit: type=1400 audit(2000000025.669:3102): avc: denied { ioctl } for pid=9761 comm="syz.1.1136" path="socket:[35090]" dev="sockfs" ino=35090 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 138.530241][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1139'. [ 138.541279][ T9765] xt_policy: neither incoming nor outgoing policy selected [ 138.610779][ T9767] bond0: Error: Cannot enslave bond to itself. [ 138.661880][ T5095] Bluetooth: hci1: command tx timeout [ 138.683648][ T40] audit: type=1400 audit(2000000025.859:3103): avc: denied { accept } for pid=9776 comm="syz.4.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.686818][ T9777] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1143'. [ 138.699059][ T9777] 9pnet_fd: p9_fd_create_tcp (9777): problem connecting socket to 127.0.0.1 [ 138.804991][ T9780] cdrom: dropping to single frame dma [ 138.914384][ T40] audit: type=1400 audit(2000000026.089:3104): avc: denied { node_bind } for pid=9801 comm="syz.5.1149" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 138.985378][ T9802] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 139.127718][ T9825] selinux_netlink_send: 59 callbacks suppressed [ 139.127736][ T9825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9825 comm=syz.5.1157 [ 139.157041][ T9828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.159736][ T9828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.195956][ T9831] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 139.206879][ T9831] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 139.221008][ T9832] evm: overlay not supported [ 139.322458][ T9836] comedi comedi3: comedi_config --init_data is deprecated [ 139.326804][ T40] audit: type=1400 audit(2000000026.499:3105): avc: denied { bind } for pid=9835 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.393494][ T5839] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 139.541825][ T5839] usb 9-1: Using ep0 maxpacket: 16 [ 139.546060][ T5839] usb 9-1: config 0 has no interfaces? [ 139.549671][ T5839] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 139.554766][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.558316][ T5839] usb 9-1: Product: syz [ 139.560041][ T5839] usb 9-1: Manufacturer: syz [ 139.562360][ T5839] usb 9-1: SerialNumber: syz [ 139.567170][ T5839] usb 9-1: config 0 descriptor?? [ 140.446194][ T9852] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 140.485293][ T9856] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 140.486932][ T8709] usb 9-1: USB disconnect, device number 6 [ 140.510115][ T40] audit: type=1400 audit(2000000027.679:3106): avc: denied { create } for pid=9855 comm="syz.5.1166" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 140.518773][ T40] audit: type=1400 audit(2000000027.679:3107): avc: denied { append } for pid=9855 comm="syz.5.1166" path="/19/file0/cgroup.kill" dev="9p" ino=72877527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.526396][ T9857] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 140.532257][ T9856] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 140.752149][ T5095] Bluetooth: hci1: command tx timeout [ 140.809257][ T40] audit: type=1400 audit(2000000027.979:3108): avc: denied { create } for pid=9871 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 140.875527][ T40] audit: type=1400 audit(2000000028.049:3109): avc: denied { call } for pid=9875 comm="syz.4.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 140.875765][ T9876] binder_alloc: 9875: pid 9875 spamming oneway? 1 buffers allocated for a total size of 4096 [ 140.887925][ T9876] binder_alloc: 9875: pid 9875 spamming oneway? 2 buffers allocated for a total size of 5120 [ 140.893956][ T9877] binder: BINDER_SET_CONTEXT_MGR already set [ 140.896514][ T9877] binder: 9875:9877 ioctl 4018620d 2000000000c0 returned -16 [ 141.097724][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 141.107601][ T7184] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.110496][ T7184] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.114156][ T7184] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.195160][ T40] audit: type=1400 audit(2000000028.369:3110): avc: denied { lock } for pid=9896 comm="syz.4.1178" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 141.646499][ T9901] xt_socket: unknown flags 0xc [ 141.648591][ T9901] xt_socket: unknown flags 0xc [ 141.650587][ T9901] xt_socket: unknown flags 0xc [ 141.652714][ T9901] xt_socket: unknown flags 0xc [ 141.654663][ T9901] xt_socket: unknown flags 0xc [ 141.656879][ T9901] xt_socket: unknown flags 0xc [ 141.658946][ T9901] xt_socket: unknown flags 0xc [ 141.660949][ T9901] xt_socket: unknown flags 0xc [ 141.663058][ T9901] xt_socket: unknown flags 0xc [ 141.664740][ T9901] xt_socket: unknown flags 0xc [ 141.800666][ T5144] pmem0: [POWERTEC] [ 141.929025][ T9910] lo speed is unknown, defaulting to 1000 [ 141.970150][ T9910] sg_write: data in/out 32732/10 bytes for SCSI command 0xff-- guessing data in; [ 141.970150][ T9910] program syz.1.1183 not setting count and/or reply_len properly [ 142.167796][ T9930] __nla_validate_parse: 3 callbacks suppressed [ 142.167814][ T9930] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1187'. [ 142.291079][ T9942] openvswitch: netlink: Flow key attr not present in new flow. [ 142.406719][ T9953] tipc: Started in network mode [ 142.408366][ T9953] tipc: Node identity fe800000000000000000000000000026, cluster identity 4711 [ 142.412614][ T9953] tipc: Enabled bearer , priority 10 [ 142.484490][ T9966] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 142.674015][ T9986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=9986 comm=syz.4.1204 [ 142.822006][ T5095] Bluetooth: hci1: command tx timeout [ 143.415450][T10019] netlink: 'syz.5.1211': attribute type 1 has an invalid length. [ 143.437713][T10019] bond1: entered promiscuous mode [ 143.439819][T10019] bond1: entered allmulticast mode [ 143.442525][T10019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.446001][T10019] netlink: 'syz.5.1211': attribute type 1 has an invalid length. [ 143.457968][T10020] erspan1: entered allmulticast mode [ 143.467686][T10020] bond1: (slave erspan1): making interface the new active one [ 143.471962][T10020] erspan1: entered promiscuous mode [ 143.475968][T10020] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 143.528495][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 143.528590][ T40] audit: type=1800 audit(2000000030.699:3118): pid=10030 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1217" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 143.532122][ T10] tipc: Node number set to 4269801510 [ 143.567860][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.574390][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.586040][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'. [ 143.589731][T10038] netlink: 'syz.5.1219': attribute type 5 has an invalid length. [ 143.593194][T10038] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1219'. [ 143.612343][T10038] geneve2: entered promiscuous mode [ 143.614136][T10038] geneve2: entered allmulticast mode [ 143.651508][ T7184] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 143.654001][T10041] nbd: must specify at least one socket [ 143.656176][T10041] tipc: Can't bind to reserved service type 2 [ 143.658781][ T7184] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 143.729346][ T7184] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 143.732253][ T7184] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 143.908712][ T40] audit: type=1400 audit(2000000031.079:3119): avc: denied { setopt } for pid=10054 comm="syz.5.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 144.030100][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1227'. [ 144.373420][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1233'. [ 144.376685][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1233'. [ 144.712463][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.722491][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.728703][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.732348][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.735016][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.901891][ T5095] Bluetooth: hci1: command tx timeout [ 145.023817][T10110] openvswitch: netlink: Missing valid actions attribute. [ 145.026392][T10110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.063296][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'. [ 145.099702][T10088] lo speed is unknown, defaulting to 1000 [ 145.330037][T10126] tmpfs: Bad value for 'mpol' [ 145.369201][T10126] bridge_slave_0: left allmulticast mode [ 145.370994][T10126] bridge_slave_0: left promiscuous mode [ 145.381310][T10126] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.405490][T10126] bridge_slave_1: left allmulticast mode [ 145.410349][T10126] bridge_slave_1: left promiscuous mode [ 145.414743][T10126] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.435471][T10126] bond0: (slave bond_slave_0): Releasing backup interface [ 145.450926][T10126] bond0: (slave bond_slave_1): Releasing backup interface [ 145.480109][T10126] team0: Port device team_slave_0 removed [ 145.505812][T10126] team0: Port device team_slave_1 removed [ 145.508429][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.512614][T10126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.517593][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.520034][T10126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.529166][T10126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.539747][ T29] lo speed is unknown, defaulting to 1000 [ 145.620012][T10137] geneve3: entered promiscuous mode [ 145.725751][ T40] audit: type=1400 audit(2000000032.899:3120): avc: denied { mount } for pid=10152 comm="syz.5.1249" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 145.832082][ T40] audit: type=1400 audit(2000000033.009:3121): avc: denied { append } for pid=10156 comm="syz.4.1250" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 145.858076][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.861146][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.865609][T10088] bridge_slave_0: entered allmulticast mode [ 145.869537][T10088] bridge_slave_0: entered promiscuous mode [ 145.874619][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.877706][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.879635][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1249'. [ 145.880825][T10088] bridge_slave_1: entered allmulticast mode [ 145.885930][T10154] openvswitch: netlink: Flow actions attr not present in new flow. [ 145.889434][T10088] bridge_slave_1: entered promiscuous mode [ 145.916780][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.923465][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.988250][T10088] team0: Port device team_slave_0 added [ 145.991556][T10088] team0: Port device team_slave_1 added [ 146.009279][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.011547][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.019629][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.024303][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.026526][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.034931][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.059523][T10088] hsr_slave_0: entered promiscuous mode [ 146.062809][T10088] hsr_slave_1: entered promiscuous mode [ 146.065799][T10088] debugfs: 'hsr0' already exists in 'hsr' [ 146.067959][T10088] Cannot create hsr debugfs directory [ 146.354706][ T40] audit: type=1400 audit(2000000033.529:3122): avc: denied { mounton } for pid=10164 comm="syz.5.1252" path="/" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 146.420046][T10088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.478805][T10088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.485284][T10088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.491338][T10088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.498634][T10088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 146.549862][T10088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.554685][T10088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 146.580145][T10088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.620854][T10173] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 146.646188][T10179] FAULT_INJECTION: forcing a failure. [ 146.646188][T10179] name failslab, interval 1, probability 0, space 0, times 0 [ 146.656376][T10179] CPU: 0 UID: 0 PID: 10179 Comm: syz.5.1254 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.656404][T10179] Tainted: [L]=SOFTLOCKUP [ 146.656410][T10179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 146.656419][T10179] Call Trace: [ 146.656424][T10179] [ 146.656431][T10179] dump_stack_lvl+0x100/0x190 [ 146.656466][T10179] should_fail_ex.cold+0x5/0xa [ 146.656492][T10179] should_failslab+0xc2/0x120 [ 146.656512][T10179] __kvmalloc_node_noprof+0xfa/0xa00 [ 146.656538][T10179] ? alloc_netdev_mqs+0xf0e/0x1560 [ 146.656577][T10179] alloc_netdev_mqs+0xf0e/0x1560 [ 146.656606][T10179] rtnl_create_link+0xc13/0xf80 [ 146.656632][T10179] rtnl_newlink+0x13bd/0x2380 [ 146.656655][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.656669][T10179] ? find_held_lock+0x2b/0x80 [ 146.656682][T10179] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 146.656706][T10179] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 146.656729][T10179] ? avc_has_perm_noaudit+0x145/0x3b0 [ 146.656769][T10179] ? find_held_lock+0x2b/0x80 [ 146.656782][T10179] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 146.656796][T10179] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 146.656811][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.656827][T10179] rtnetlink_rcv_msg+0x95e/0xe90 [ 146.656844][T10179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.656866][T10179] ? ref_tracker_free+0x37e/0x6c0 [ 146.656891][T10179] netlink_rcv_skb+0x159/0x420 [ 146.656919][T10179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.656938][T10179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.656967][T10179] ? netlink_deliver_tap+0x1ae/0xcc0 [ 146.656990][T10179] netlink_unicast+0x585/0x850 [ 146.657014][T10179] ? __pfx_netlink_unicast+0x10/0x10 [ 146.657040][T10179] netlink_sendmsg+0x8b0/0xda0 [ 146.657065][T10179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.657083][T10179] ? __might_fault+0xa0/0x140 [ 146.657116][T10179] ____sys_sendmsg+0x9e1/0xb70 [ 146.657157][T10179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.657180][T10179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.657215][T10179] ___sys_sendmsg+0x190/0x1e0 [ 146.657241][T10179] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.657299][T10179] __sys_sendmsg+0x170/0x220 [ 146.657328][T10179] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.657367][T10179] ? rcu_is_watching+0x12/0xc0 [ 146.657401][T10179] do_syscall_64+0x115/0x870 [ 146.657435][T10179] ? clear_bhb_loop+0x40/0x90 [ 146.657458][T10179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.657480][T10179] RIP: 0033:0x7f3f3d19ce59 [ 146.657499][T10179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.657516][T10179] RSP: 002b:00007f3f3e012028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.657534][T10179] RAX: ffffffffffffffda RBX: 00007f3f3d415fa0 RCX: 00007f3f3d19ce59 [ 146.657546][T10179] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 146.657556][T10179] RBP: 00007f3f3e012090 R08: 0000000000000000 R09: 0000000000000000 [ 146.657567][T10179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.657577][T10179] R13: 00007f3f3d416038 R14: 00007f3f3d415fa0 R15: 00007ffe3dc68ca8 [ 146.657605][T10179] [ 146.821781][ T5095] Bluetooth: hci2: command tx timeout [ 146.836339][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.855736][T10088] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.864073][ T7179] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.867058][ T7179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.875959][ T7179] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.878882][ T7179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.042818][ T29] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 147.201840][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 147.207208][T10088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.210653][ T29] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.214148][ T29] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.220704][ T29] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 147.229596][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.234658][ T29] usb 9-1: Product: syz [ 147.236023][ T29] usb 9-1: Manufacturer: syz [ 147.239808][ T29] usb 9-1: SerialNumber: syz [ 147.246485][ T29] r8152-cfgselector 9-1: Unknown version 0x0000 [ 147.248468][ T29] r8152-cfgselector 9-1: config 0 descriptor?? [ 147.363575][T10088] veth0_vlan: entered promiscuous mode [ 147.369862][T10088] veth1_vlan: entered promiscuous mode [ 147.391241][T10088] veth0_macvtap: entered promiscuous mode [ 147.408331][T10088] veth1_macvtap: entered promiscuous mode [ 147.420441][T10088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.439986][T10088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.451083][ T7184] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.455084][ T7184] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.460229][ T29] r8152-cfgselector 9-1: USB disconnect, device number 7 [ 147.464227][ T7184] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.467032][ T7184] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.589457][ T7179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.593488][ T7179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.616921][ T7182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.620460][ T7182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.738014][T10218] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1236'. [ 147.741847][T10218] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1236'. [ 147.753124][ T40] audit: type=1400 audit(2000000034.919:3123): avc: denied { getopt } for pid=10217 comm="syz.6.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.797283][ T40] audit: type=1400 audit(2000000034.969:3124): avc: denied { bind } for pid=10220 comm="syz.6.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 147.870647][ T40] audit: type=1400 audit(2000000035.039:3125): avc: denied { map } for pid=10225 comm="syz.6.1261" path="socket:[39058]" dev="sockfs" ino=39058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 147.883403][T10226] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.936590][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1262'. [ 147.944521][T10229] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10229 comm=syz.6.1262 [ 148.073980][T10229] veth3: entered allmulticast mode [ 148.252006][ T24] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 148.422516][ T24] usb 9-1: not running at top speed; connect to a high speed hub [ 148.425933][ T24] usb 9-1: config 1 interface 0 altsetting 19 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.430284][ T24] usb 9-1: config 1 interface 0 has no altsetting 0 [ 148.437046][ T24] usb 9-1: New USB device found, idVendor=05a5, idProduct=a4a1, bcdDevice= 0.40 [ 148.439765][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.442572][ T24] usb 9-1: Product: syz [ 148.443921][ T24] usb 9-1: Manufacturer: syz [ 148.445427][ T24] usb 9-1: SerialNumber: syz [ 148.520846][ T40] audit: type=1400 audit(2000000035.689:3126): avc: denied { link } for pid=10245 comm="syz.1.1268" name="#16" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.528167][ T40] audit: type=1400 audit(2000000035.689:3127): avc: denied { rename } for pid=10245 comm="syz.1.1268" name="#17" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.567901][T10249] netlink: 'syz.5.1267': attribute type 10 has an invalid length. [ 148.570243][T10249] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1267'. [ 148.573359][T10248] netlink: 'syz.5.1267': attribute type 10 has an invalid length. [ 148.575698][T10248] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1267'. [ 148.579165][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1267'. [ 148.665871][T10231] : renamed from lo (while UP) [ 148.719339][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.725227][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.730452][T10231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.735293][T10231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.738998][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 148.854488][ T24] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 148.870969][ T24] usb 9-1: USB disconnect, device number 8 [ 148.873348][ T8709] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 148.912247][ T5095] Bluetooth: hci2: command tx timeout [ 149.056311][ T8709] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.059217][ T8709] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 149.067878][ T8709] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.081467][ T8709] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.086446][ T8709] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 149.090312][ T8709] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 149.106041][ T8709] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.114036][ T8709] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.122915][ T8709] usb 10-1: Product: syz [ 149.124525][ T8709] usb 10-1: Manufacturer: syz [ 149.149860][T10256] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 149.166403][ T8709] cdc_wdm 10-1:1.0: skipping garbage [ 149.171449][ T8709] cdc_wdm 10-1:1.0: skipping garbage [ 149.184850][ T8709] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 149.189471][ T8709] cdc_wdm 10-1:1.0: Unknown control protocol [ 149.386330][ T40] audit: type=1400 audit(2000000036.559:3128): avc: denied { read write } for pid=10255 comm="syz.5.1270" name="cdc-wdm0" dev="devtmpfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 149.391720][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 149.395231][ T40] audit: type=1400 audit(2000000036.559:3129): avc: denied { open } for pid=10255 comm="syz.5.1270" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 149.396639][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 149.409151][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 149.411187][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 149.413701][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 149.415735][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 149.417986][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 149.419999][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 149.422216][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 149.424251][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 149.424672][ T5797] usb 10-1: USB disconnect, device number 2 [ 149.426157][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 149.627542][T10256] netlink: 'syz.5.1270': attribute type 12 has an invalid length. [ 149.831461][T10330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'. [ 149.847247][T10330] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 401070c9, magic 70 != 6b] [ 149.852673][T10330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7936 sclass=netlink_route_socket pid=10330 comm=syz.1.1286 [ 149.913904][T10334] gretap0: entered promiscuous mode [ 150.067390][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 150.209703][ T40] audit: type=1400 audit(2000000037.379:3130): avc: denied { write } for pid=10357 comm="syz.6.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.217318][T10360] netlink: 'syz.5.1294': attribute type 49 has an invalid length. [ 150.230882][T10360] tc_dump_action: action bad kind [ 150.282329][T10364] xt_hashlimit: size too large, truncated to 1048576 [ 150.597040][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 150.609130][T10386] random: crng reseeded on system resumption [ 150.621989][T10386] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 150.622727][ T40] audit: type=1400 audit(2000000037.799:3131): avc: denied { ioctl } for pid=10384 comm="syz.5.1302" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 150.660398][T10388] tipc: Cannot configure node identity twice [ 150.810425][ T40] audit: type=1400 audit(2000000037.979:3132): avc: denied { listen } for pid=10395 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.843992][ T7179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.846431][ T7179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.880420][ T40] audit: type=1400 audit(2000000038.049:3133): avc: denied { checkpoint_restore } for pid=10395 comm="syz.4.1308" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.991794][ T5095] Bluetooth: hci2: command tx timeout [ 150.997374][T10402] xt_hashlimit: size too large, truncated to 1048576 [ 151.210908][T10406] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio0-cursor) [ 151.357654][T10412] syz.6.1313 (10412): attempted to duplicate a private mapping with mremap. This is not supported. [ 151.363494][T10412] xt_l2tp: missing protocol rule (udp|l2tpip) [ 151.402446][ T40] audit: type=1400 audit(2000000038.569:3134): avc: denied { cmd } for pid=10413 comm="syz.1.1314" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 151.579341][T10442] overlayfs: statfs failed on './file0' [ 151.579360][ T40] audit: type=1400 audit(2000000038.749:3135): avc: denied { getattr } for pid=10436 comm="syz.5.1319" name="/" dev="9p" ino=72877207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 152.013914][ T1351] speed is unknown, defaulting to 1000 [ 152.017967][ T1351] syz0: Port: 1 Link DOWN [ 152.071092][ T7184] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.076064][ T7184] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.079770][ T7184] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.085494][ T7184] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.092069][ T7184] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.098700][ T7184] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.224783][ T40] audit: type=1400 audit(2000000039.399:3136): avc: denied { setattr } for pid=10468 comm="syz.6.1330" name="file0" dev="9p" ino=72877231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 152.276431][ T40] audit: type=1400 audit(2000000039.449:3137): avc: denied { getopt } for pid=10475 comm="syz.4.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 152.449800][T10487] libceph: secret too big 3051 [ 152.464259][T10488] libceph: secret too big 3051 [ 152.584826][T10501] pimreg: entered allmulticast mode [ 152.607387][T10508] binder: 10504:10508 ioctl c0306201 0 returned -14 [ 152.613079][T10508] binder: 10504:10508 ioctl 80404509 200000000300 returned -22 [ 152.715094][T10520] netlink: Conntrack attr has 4 unknown bytes [ 152.809201][T10529] nbd: couldn't find a device at index -2146435068 [ 152.842521][T10529] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 152.977736][T10543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10543 comm=syz.5.1355 [ 153.051388][T10542] __nla_validate_parse: 10 callbacks suppressed [ 153.051401][T10542] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1355'. [ 153.072048][ T5095] Bluetooth: hci2: command tx timeout [ 153.140184][T10565] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 153.146344][T10564] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 153.147035][T10565] overlayfs: missing 'lowerdir' [ 153.149139][T10564] overlayfs: missing 'lowerdir' [ 153.391769][T10446] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 153.521821][T10446] usb 6-1: device descriptor read/64, error -71 [ 153.705760][ T1351] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 153.762351][T10446] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 153.814037][T10603] ip6gretap0: entered promiscuous mode [ 153.892734][T10446] usb 6-1: device descriptor read/64, error -71 [ 154.004364][T10446] usb usb6-port1: attempt power cycle [ 154.095685][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 154.098657][T10628] program syz.6.1377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.216130][T10633] ------------[ cut here ]------------ [ 154.220531][T10633] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 154.220544][T10633] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1992/0x22c0, CPU#0: syz.6.1379/10633 [ 154.228387][T10633] Modules linked in: SYZFAIL: failed to recv rpc [ 154.230297][T10633] CPU: 0 UID: 0 PID: 10633 Comm: syz.6.1379 Tainted: G L syzkaller #0 PREEMPT(full) fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.234471][T10633] Tainted: [L]=SOFTLOCKUP [ 154.236196][T10633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.239350][T10633] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 154.241182][T10633] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 4f a8 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 41 a8 85 00 48 85 db 0f 84 e9 ed ff ff [ 154.247359][T10633] RSP: 0018:ffffc90003b47250 EFLAGS: 00010287 [ 154.249268][T10633] RAX: 00000000000006e7 RBX: ffffffffffffffff RCX: ffffc9002a851000 [ 154.251763][T10633] RDX: 0000000000080000 RSI: ffffffff8182e8d1 RDI: ffff88802c2d0000 [ 154.254222][T10633] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 154.256870][T10633] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 154.259303][T10633] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90003b47468 [ 154.261892][T10633] FS: 00007fb83d7f66c0(0000) GS:ffff8880d6386000(0000) knlGS:0000000000000000 [ 154.264652][T10633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.266765][T10633] CR2: 0000200000000140 CR3: 000000005727a000 CR4: 0000000000352ef0 [ 154.269262][T10633] Call Trace: [ 154.270310][T10633] [ 154.271246][T10633] ? find_held_lock+0x2b/0x80 [ 154.272841][T10633] ? __pfx___mutex_lock+0x10/0x10 [ 154.274422][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.275993][T10633] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 154.277732][T10633] kvm_gpc_refresh+0xc9/0x170 [ 154.279231][T10633] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 154.281176][T10633] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 154.283186][T10633] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 154.284944][T10633] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 154.286847][T10633] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 154.288645][T10633] ? arch_stack_walk+0xa6/0xf0 [ 154.290148][T10633] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 154.292107][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.293699][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.295324][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.296979][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.298800][T10633] ? is_bpf_text_address+0x8a/0x1a0 [ 154.300854][T10633] ? bpf_ksym_find+0x128/0x1c0 [ 154.302416][T10633] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 154.304229][T10633] ? is_bpf_text_address+0x94/0x1a0 [ 154.305868][T10633] ? kernel_text_address+0x8d/0x100 [ 154.307481][T10633] ? __pfx_widen_string+0x10/0x10 [ 154.309049][T10633] ? __kernel_text_address+0xd/0x30 [ 154.310698][T10633] ? unwind_get_return_address+0x59/0xa0 [ 154.312559][T10633] ? arch_stack_walk+0xa6/0xf0 [ 154.314061][T10633] ? tomoyo_path_number_perm+0x46d/0x580 [ 154.315838][T10633] ? stack_trace_save+0x8e/0xc0 [ 154.317379][T10633] ? __pfx_stack_trace_save+0x10/0x10 [ 154.319054][T10633] ? stack_depot_save_flags+0x27/0x9d0 [ 154.320759][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.322407][T10633] ? tomoyo_path_number_perm+0x46d/0x580 [ 154.324166][T10633] ? kasan_save_stack+0x3f/0x50 [ 154.325701][T10633] ? kasan_save_stack+0x30/0x50 [ 154.327209][T10633] ? kasan_save_track+0x14/0x30 [ 154.328731][T10633] ? kasan_save_free_info+0x3b/0x70 [ 154.330342][T10633] kvm_vm_ioctl+0x1564/0x4050 [ 154.331924][T10633] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 154.333592][T10633] ? kasan_quarantine_put+0x104/0x240 [ 154.335327][T10633] ? lockdep_hardirqs_on+0x78/0x100 [ 154.337011][T10633] ? find_held_lock+0x2b/0x80 [ 154.338521][T10633] ? tomoyo_path_number_perm+0x28f/0x580 [ 154.340491][T10633] ? tomoyo_path_number_perm+0x28f/0x580 [ 154.342593][T10633] ? tomoyo_path_number_perm+0x188/0x580 [ 154.344366][T10633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 154.346268][T10633] ? futex_wake+0x1ad/0x530 [ 154.347691][T10633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.349899][T10633] ? do_vfs_ioctl+0x226/0x13e0 [ 154.351399][T10633] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 154.353073][T10633] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.355534][T10633] ? __fget_files+0x215/0x3d0 [ 154.357312][T10633] ? hook_file_ioctl_common+0x149/0x410 [ 154.359301][T10633] ? selinux_file_ioctl+0x13b/0x290 [ 154.361184][T10633] ? selinux_file_ioctl+0xb6/0x290 [ 154.363185][T10633] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 154.364997][T10633] __x64_sys_ioctl+0x18e/0x210 [ 154.366573][T10633] do_syscall_64+0x115/0x870 [ 154.368024][T10633] ? clear_bhb_loop+0x40/0x90 [ 154.369529][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.371362][T10633] RIP: 0033:0x7fb83f59ce59 [ 154.372856][T10633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.378736][T10633] RSP: 002b:00007fb83d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.381320][T10633] RAX: ffffffffffffffda RBX: 00007fb83f815fa0 RCX: 00007fb83f59ce59 [ 154.383841][T10633] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000004 [ 154.386332][T10633] RBP: 00007fb83f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 154.388761][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.391357][T10633] R13: 00007fb83f816038 R14: 00007fb83f815fa0 R15: 00007ffe0e4f62b8 [ 154.393985][T10633] [ 154.394963][T10633] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.397202][T10633] CPU: 0 UID: 0 PID: 10633 Comm: syz.6.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.400473][T10633] Tainted: [L]=SOFTLOCKUP [ 154.401903][T10633] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.405059][T10633] Call Trace: [ 154.406143][T10633] [ 154.407069][T10633] dump_stack_lvl+0x100/0x190 [ 154.408546][T10633] vpanic+0x552/0x970 [ 154.409969][T10633] ? __pfx_vpanic+0x10/0x10 [ 154.411778][T10633] panic+0xd1/0xe0 [ 154.413248][T10633] ? __pfx_panic+0x10/0x10 [ 154.415013][T10633] check_panic_on_warn.cold+0x19/0x34 [ 154.417121][T10633] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 154.419132][T10633] __warn.cold+0x191/0x328 [ 154.420886][T10633] __report_bug+0x296/0x3d0 [ 154.422598][T10633] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 154.424404][T10633] ? __pfx___report_bug+0x10/0x10 [ 154.426163][T10633] ? lockdep_unlock+0x5a/0xc0 [ 154.427679][T10633] ? __lock_acquire+0xd73/0x2630 [ 154.429481][T10633] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 154.431117][T10633] report_bug+0xb2/0x220 [ 154.432603][T10633] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 154.434315][T10633] handle_bug+0x16a/0x2a0 [ 154.435659][T10633] exc_invalid_op+0x17/0x50 [ 154.437099][T10633] asm_exc_invalid_op+0x1a/0x20 [ 154.438951][T10633] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 154.441018][T10633] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 4f a8 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 41 a8 85 00 48 85 db 0f 84 e9 ed ff ff [ 154.447680][T10633] RSP: 0018:ffffc90003b47250 EFLAGS: 00010287 [ 154.449665][T10633] RAX: 00000000000006e7 RBX: ffffffffffffffff RCX: ffffc9002a851000 [ 154.452223][T10633] RDX: 0000000000080000 RSI: ffffffff8182e8d1 RDI: ffff88802c2d0000 [ 154.454661][T10633] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 154.457155][T10633] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 154.459932][T10633] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90003b47468 [ 154.462596][T10633] ? __kvm_gpc_refresh+0x1991/0x22c0 [ 154.464668][T10633] ? find_held_lock+0x2b/0x80 [ 154.466204][T10633] ? __pfx___mutex_lock+0x10/0x10 [ 154.468173][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.469739][T10633] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 154.471445][T10633] kvm_gpc_refresh+0xc9/0x170 [ 154.472938][T10633] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 154.474681][T10633] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 154.476644][T10633] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 154.478452][T10633] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 154.480507][T10633] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 154.482126][T10633] ? arch_stack_walk+0xa6/0xf0 [ 154.483628][T10633] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 154.485595][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.487150][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.488659][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.490138][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.491866][T10633] ? is_bpf_text_address+0x8a/0x1a0 [ 154.493871][T10633] ? bpf_ksym_find+0x128/0x1c0 [ 154.495464][T10633] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 154.497476][T10633] ? is_bpf_text_address+0x94/0x1a0 [ 154.499095][T10633] ? kernel_text_address+0x8d/0x100 [ 154.500722][T10633] ? __pfx_widen_string+0x10/0x10 [ 154.502320][T10633] ? __kernel_text_address+0xd/0x30 [ 154.503932][T10633] ? unwind_get_return_address+0x59/0xa0 [ 154.505683][T10633] ? arch_stack_walk+0xa6/0xf0 [ 154.507182][T10633] ? tomoyo_path_number_perm+0x46d/0x580 [ 154.509243][T10633] ? stack_trace_save+0x8e/0xc0 [ 154.510989][T10633] ? __pfx_stack_trace_save+0x10/0x10 [ 154.512672][T10633] ? stack_depot_save_flags+0x27/0x9d0 [ 154.514359][T10633] ? __lock_acquire+0x4a5/0x2630 [ 154.515881][T10633] ? tomoyo_path_number_perm+0x46d/0x580 [ 154.517624][T10633] ? kasan_save_stack+0x3f/0x50 [ 154.519134][T10633] ? kasan_save_stack+0x30/0x50 [ 154.520649][T10633] ? kasan_save_track+0x14/0x30 [ 154.522168][T10633] ? kasan_save_free_info+0x3b/0x70 [ 154.523778][T10633] kvm_vm_ioctl+0x1564/0x4050 [ 154.525260][T10633] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 154.526845][T10633] ? kasan_quarantine_put+0x104/0x240 [ 154.528515][T10633] ? lockdep_hardirqs_on+0x78/0x100 [ 154.530171][T10633] ? find_held_lock+0x2b/0x80 [ 154.531660][T10633] ? tomoyo_path_number_perm+0x28f/0x580 [ 154.533401][T10633] ? tomoyo_path_number_perm+0x28f/0x580 [ 154.535135][T10633] ? tomoyo_path_number_perm+0x188/0x580 [ 154.536903][T10633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 154.538758][T10633] ? futex_wake+0x1ad/0x530 [ 154.540183][T10633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.542036][T10633] ? do_vfs_ioctl+0x226/0x13e0 [ 154.543524][T10633] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 154.545152][T10633] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 154.547275][T10633] ? __fget_files+0x215/0x3d0 [ 154.548811][T10633] ? hook_file_ioctl_common+0x149/0x410 [ 154.550763][T10633] ? selinux_file_ioctl+0x13b/0x290 [ 154.552583][T10633] ? selinux_file_ioctl+0xb6/0x290 [ 154.554598][T10633] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 154.556402][T10633] __x64_sys_ioctl+0x18e/0x210 [ 154.558233][T10633] do_syscall_64+0x115/0x870 [ 154.560046][T10633] ? clear_bhb_loop+0x40/0x90 [ 154.561827][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.564133][T10633] RIP: 0033:0x7fb83f59ce59 [ 154.565916][T10633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.573372][T10633] RSP: 002b:00007fb83d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.576605][T10633] RAX: ffffffffffffffda RBX: 00007fb83f815fa0 RCX: 00007fb83f59ce59 [ 154.579604][T10633] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000004 [ 154.582644][T10633] RBP: 00007fb83f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 154.585698][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.588783][T10633] R13: 00007fb83f816038 R14: 00007fb83f815fa0 R15: 00007ffe0e4f62b8 [ 154.591851][T10633] [ 154.593863][T10633] Kernel Offset: disabled [ 154.595568][T10633] Rebooting in 86400 seconds..