last executing test programs: 26.48597995s ago: executing program 2 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x2c, 0xb02, 0x70bd28, 0x25dfdbfb, {0x3}}, 0x14}}, 0x40) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0x3}}, 0x10) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x300, {0xf, 0x8000, 0x1, 0xfffe}}}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x40, {0x34, 0x68, 0x6, 0x8}}}]}, 0x5c}}, 0x0) (rerun: 64) 26.360826054s ago: executing program 2 (id=16): syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) (async) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) (async) pread64(r1, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) syz_usb_disconnect(r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) (async) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000100)={0x7f, 0x5}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0', [{0x20, '/selinux/avc/cache_stats\x00'}, {0x20, 'cpuacct.usage_percpu_sys\x00'}, {0x20, '/selinux/avc/cache_stats\x00'}, {0x20, '/dev/input/event#\x00'}, {0x20, '/dev/input/event#\x00'}], 0xa, "513da0f94c080254831a4c49ed182f47ed5700af527756d8d45fc959d2c2db5fb71bd4b5c1475332e374e3ce33be62edcebf1c4d753bd4952dd43f41ced96bf1ff96ab732c84c9c47a02fb2e200a5cea7942ecdfb94718f9ef722c2f0e174a48342e07e704d043fddb2c65e4e032235196215bc1e3f6c81689b1b8223ce04b765d825147f5766498396eeede369752abec819d3bd19a3d9ac5aa64528575c6ed09f10d49923336de1e40059f37"}, 0x12c) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240007012ebd7000fbdbdf2509"], 0x20}, 0x1, 0x0, 0x0, 0x4048050}, 0x8010) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}]}, 0x60}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) (async) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000307944e23000c020000003c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000030000000000000002000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c61746500"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r5, @ANYBLOB='\f\x00'], 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r9, 0x406855c9, &(0x7f0000000200)={0x0, 0x5, {0x53, 0x8, 0x40, {0x6dfd, 0x1}, {0x9, 0x120}, @rumble={0x1000, 0xd447}}, {0x57, 0xb27b, 0xbd83, {0x6, 0x20}, {0x3, 0xaedf}, @rumble={0x9, 0x8}}}) 23.199249125s ago: executing program 2 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) add_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) sendmmsg(r1, &(0x7f0000001840)=[{{&(0x7f0000001700)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'sit0\x00'}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001380)="83f6369fe6e2b1a1d53afbbfd629503a805e24f78e81e1477bd9450800000010ef4e43cb4ea3c0241b9fee9503f41f6f8d99705304fe69c60a1e8786c8429cd34345646849", 0x45}, {&(0x7f0000001340)="66e6dab46cfeabebf008a793f9e134a01123c018176caf3d74d4e3bcdbb2eb31a387256a842953e8419d419ea8aa6138ff55f5b02a38956736ffe3", 0x3b}, {&(0x7f0000001880)="cf412104919014891080a8ba3c9d38e5995e20feff8a6d0a76ef038a7e2b5e915a3755de85be5d9680f530e377046aab840174c718b3c6cfaa9203c641543b72262c37de8d1aac5c78942548cbc6605310c69ccc46b4a85266b5b0", 0x5b}, {&(0x7f0000001400)="d5a8e40280abde1c389acb455e4f0e42004790b19d060e04773601628c25f844717711dcf2b401f98d7a91c30b5af8a4f6df66cbb03eb64a220a33db8a7dd1b4982154508d822aad210daec85ccd88756ad4c0e5bff001b222f3adfd00983d5b0fd1daa0856b03997607b37ac3022ea64b87ad9921cbd06830d1037bf9a3509289fa3b87ede752bac28cace90cd4decc62e42a1f7dda7252003c380d97351c93580f95036bc7ab44abe0bce23d418b9d24f9d31afad6be99e2b7d95c0adc5703a71680415c7e7bd4bd021d750401515258c6679b24ff8a028f1ce82a03d1ab20c827c5", 0xe3}, {&(0x7f0000001500)="77712a27c3958202fe38aa70912e23ed87b3d477d5945bc090c5141c2c171f37ed3fa43b80bfe6b85c27f2e1ebae2728123636b89f46a12e2d65c76c7c41d43d1b5f8cfcfc2fa670", 0x48}, {&(0x7f0000001580)="04e09828d7e6eca24b00f82485100fbe387341af54bc65680585c5", 0x1b}, {&(0x7f00000015c0)="2248f48c7abd53e3c778", 0xa}, {&(0x7f0000001600)="6eb6910fd388dd7ffdb7df2aa60e84c5cc634f48321951112e4683dac2e2a8d4341a7c1d35db0790b3293e09ec2608a3611e9bdf136b41b66033afd5948b9c9c3850a02d6f230846be6b70f9d9c87fd5e1db7b81fba11589ff30112e26f64e616306aadb3367343901d58b2a988da3c965b27051e5dbb791651c9793416d3f9249e8be2d0544f70b2349690f2ce20429c7446f", 0x93}, {&(0x7f00000016c0)="5fc433d7f9a1aabf8ffa95650981937ab2b332b47d9b3de4f77d4e975ec9aaae7b4c161fc15b4a1a2a", 0x29}, {&(0x7f0000001900)="99c1b6db1e3539d1a6d3028adf1f10e2c0fed3a50eb8a26c48525dd71781cc5ac2c4a0dc1d1cac1be25d554bca393f3c7dab70dd560d8bcfdc6598e577562b561a288de278221c5359c875d6c3b0fbd09993deaf078015eac3a1724c93e3bd6869a4a5e770e178dc8b6adeada52ce0aee3d16b71b37e43da2ae2043e6bbb089458658dd7c3d8288d6be5bd8a8e9d075524451a7522e0568f7532ca3ad178db66d46877ea2cfb9d0d429bd0c806d3e5fc3695afa19581", 0xb6}, {&(0x7f00000019c0)="edf7dfa6b4caf880e296bc55f5622535ec9dfada1744c9bc82792b0c86a926dc5891dfaaf6112805251f9a5d28332108db98ec62770d76b3e9404ca3088299a6ab019cfdd245995f0f08dbfc3e095780c8cabdd806d32b6fe7daf768cb1da99e5e81d2b4f852a9f30c6cc5affba9839a80e15eccff46ea6205f5b853d30e3f64fd3d7a8bba85b09f4baa80eb4c16f087ab20cef806fd0b21471f9b09149238b59d0566b93fa98c27fdcd5936133b6b4b6b128336588a7e28ae9ae9ad9f218a31df1092dcd3eb53ab7f7823411df2a3ee4ae4975f9e8d3c95c0205c104fb9f870ae3ab7f44f64", 0xe6}], 0xc, &(0x7f00000017c0)=[{0x80, 0x1, 0x403, "ccb7add02a193398114b6ef109edf0e12e378f00f5e7c51d0742301776b5f193491adf2540f04c7162cefe100ef60964b8cfbb35138fa6dfcb2cf60d269b6f1b62433df0e37cf99156633a7b860cbb5660a77111eac5a7c0c044f544c62f40115453a6b32f2dbe73fc9ca6b8cf697360"}], 0x80}}], 0x1, 0x26004030) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@userptr={0x4, 0x6, 0x4, 0x2, 0x0, {0x77359400}, {0x0, 0x2, 0x0, 0x0, 0xff, 0x0, "edff00"}, 0xffffffff, 0x2, {0x0}, 0x0, 0x0, r3}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') getdents64(r4, &(0x7f0000000240)=""/44, 0x7a) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xd7, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1c81000c0068b0a96400c50068000004069078e0000001ac1e0101442cad336401010100000003e0000002000064157f00000100000002ac1e0001000006a5ac1414aa00000009018307aae000000294040100890bf764010101e0000002004e244e20", @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="d10454c690780e3ffe0af9894fea4f74b546fe06e2d4c3d9220e626d35e7b92741ea71dca019010073b64367b5ce5a8a0439e689fa141c64cd130b5f32ea11f1156fbc30b640f0ed0aa42b93e2fbc41da45a5884007d4e4dd718392f91ba670cf9"], 0x0) 19.99938121s ago: executing program 2 (id=42): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0}, 0xcac) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x5a1700, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x800, 0x7ab) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c000280080013"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e26483137190000006dbd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0400, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r8, 0xc02864c3, &(0x7f0000000080)={&(0x7f00000000c0)=[r9], 0x0, 0x1}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$zero(0xffffffffffffff9c, 0x0, 0x82042, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0x12) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRESOCT=r1, @ANYRESOCT=r11], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18270000", @ANYRES32, @ANYBLOB="0000000000000000af82f8ff10000000183b0000040000000000000000000000185a0000070000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b705bcec0800000085000010a5000000a3c0973d0f02b0c0a3cda1e1a70f79a0861d57aba200e8d9c3c4fb2947afd0b281e5060534f16f3f446b246e3daaec20eae265ca3382452f30cd14b2ae3bb61b20c3f8da42b5cddb870299cbc99ed7fdda54602148b9086970cd7e1b29a6363909d1bb17692f0ec9a97ac87ff6bcd470baeb122a67f9a3002ce5bca0453cbff2961a440e3cf7a2ccdcf1d699849c1f3acfc0c2cbd3"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x7, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r5], 0x0, 0x10, 0xfe6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12}, 0x94) 18.700084965s ago: executing program 2 (id=54): r0 = socket$kcm(0x11, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) mlockall(0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="660f060fbd91907a0f30ba430066ed3e0f19653c0f017b0066b9580200000f322ef30f2c010f1c76b067f7e8", 0x2c}], 0x1, 0x22, 0x0, 0x0) (async) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="58000000040603000000000000000000030000070500010007"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf2564010101000000000000000000000000ff020000000000000000000000000001000400004e210002000000a021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000f5ff000000000000000000000039e80000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000004000000000000002cbd70000035000002000000700000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r8], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(r9, &(0x7f00000019c0)=[{&(0x7f0000000880)="550beca2e44eb61bae4a5139afb4e7a92b530ebbfb3bf47f3a533a5ebc4f97c2f867336ab774b98eaf1d274b54ba8cd2f0bc24598d83bd5ba203e4b49c2c22a1944023f046abe7506633cebe931edf60d2e3c68f292d0d772ea3ea01c8d44a41fefbe75d3def86de6dc624f714f725ff0962ec8fe399d2a2e2ec2bb4afbcf0208a74770212cd81888e65b64fa3c73a2a8d529762061eb26080e266d444d083ad470a48211263615ec250d17aec4b3c61922b3e90900b44a73077e87347d7de70b50fc70346231033176ffef8ef22019d072ebee3dccab311f1dbd4f21d7e63074213f8ead1fa1e2e6679be1e0cb0a0d90f752632905190ebff64e049513b5311bf0016702d837592d42c5b53bdf050d72e9d4e7bb09388675c971648f20708522c9964a42a8e10f95aaf5fb7526efa8716fd4ca007f62e19f9b7b567e94150a777053798d86a6076c00ecbf0b5fe75a10dd014c54b8c07ab39ce645024e1b49aafd5b352120c57cdd540b7bac933815f6bf637a1de4ff43dcf5b8daf3b45e25a76c059dcaa8bbc4199eb410ac42606f1129883ae9f87506ef4d1bb6ccdce13caa5725972513a52b8f666d17595ac34ec2a40ea32fced80d884744fd419f89c06229bafced3a8255f5b4277de040de29c8d820962dc49072ac014c9d37f2ffa9d0e0a28006a6d92792ca62daf11c61920d06b0c73fffb0cdf1c71f09c3955c0fae1db78fd468e00c6089c76300d74f81c06e3b9052d397df2fcc674c180b89ad752482fc2f4752d759f464a7a7f68bb1cda898970b275cc3a39d3f860c702a6e36fd6f9b1ea400b61919b1f26a912f7f32e878e3e896918cf196f40f03220bbcaacfa73f81402a8b5f68b0813040c8bdfeebd91ae8e078b91200f9f740a61f679c79f60ef1597dda45bf7a7e26ac817d2179a1ae65f67e65f457e9fde37e7c79b323589ca5a87d7b6a1c2904f8aad2fe6ae6c02829f5fb1805be068994adfee33e7129d282283ccee9fa86c63cb3ff7a5680e2a9268a64a084c86f7279af52e6c1004851b2f5dd1959077636d9bba5987efa56d2e1f1cce135b937a72809573612b198d1fd76159cf30eeecdce876b75225206b08088b35313df010bd07ece5ad2bcde700293d6d9462fabf64e48156a205112c0b8da8861e51743967f8e36ffd2fd2735b6ad1a433b3f7f1051067dbb558960989027b2c0ac571e57161fc24b7f445f8bbc1fffcecfc74c3fee182f8e968fb75248b9d6a044d0dd4fb1a0d5fb7785262bb3d9e00e64180c7f1e204e80c77134067e544b1d75c115e9023ba6f8fd84e33f251c0dea76d106e55ddac88d56b46fbd557613311850512b5313f48debc62bf158ef72c87c0139b31cdcb3e59291eb37c7717c19b492d58a7a9ae996d66c2ebd51e24e7e4f48d91bc4da1e6400493b324a37fcbc6674ce3313caf84fffa4918bf6871d5c57a2d090f1eb5819ea1154b890d573add437fc305d5857cd9eed4ee3fb12eeb9073b5ce14cbe988732f3530c34930682da92bce3e93de1e65ad2e1196792021b3c57f244b2e110440693c46735677b0c1a4a3942b5ad061bd91d1945018034134a73ca2f2e659182a9aad4b25f43ff2f8b3703643b77b5a4a3297be6a99b8120a4b97875463d629394102c2143109d839b93ae08ef389e757e271c52aa8f0a543727c3708a31bae9d17668dbd5b6990f716ae01a076987735cfde3e0fd8ff17299d8e1917c2bc1e369c4d104d1c1a894d975f87a592c34505f98a0dc91355bc1c93f10fc26fc181b10880a94b3d05832c62946cc8a3153c19768e5e0dac7b366d88f89b6edf6b96336bfdccb81e1af131a6e2c653ee0de869b03e3e6d0dd946d986b0e38f44cd2be5e8196756e6fc3737176bdc680af9559878b4505f211bc5f8a40d986af8ec660e0b1a5c30b347337d4640f1a5e0a2723059f65b1dd5b046e0b090807da1112387ddfdda9ddb4d347e24b7faa9dfcb0644f882ad746361d454f272d41ac40e1d605b5ea24b1220d7647e84ff7f38d3d4590cb55e2de5d53c8b31ab3ff1f6cf3f40eeebfbc8a5d5fb6bb557ed9904c7d2a2e20f224fbc57568c6cd9ace2236e81df314402caad420364377189332421749789fe094eeb1c00cace5e516aa97ad0bc1939f1f20dc52d182df282337cde505a003b72fa0b1bacf13dd0e949742ceaa85f7163b56fdf8cbb729badcdad274a52952a125baf4ba1b2454113941f2d66128763bbb684ce759006df578c3ede3b91a7d3ee857bcde02bc5a8272909f13a5a2c2bd9f4dfece12d45883ed5197dec615723d9c5a2890cadaa5050105a62401345a58068750f8e8a60739656021deb125ccc3c8bcbc7dea834f2ccc593683f36792845f7a4cc8f7d80c1b168f9e273ca8e6df41c6b34d39ce3a2cf2d913c143d965329b5a49597e02fc5d69ac2588dd011823c13cbe609a2a8574ad3f21df26d502d35168eaf4f09fca21d645d7db9b476efaf9c83c04c4ffcbec5ed0a4e5bb59a4b133a57c455ba04afed44f491d2b22dde639ae3b3089f9565fa254e2b7c68c18df8ce639b13c39f3e715fe1ec62ba869e813bb587092a4a8bb26f89cc5de79fa6782f7538993912cce7a65764335f9c952dce0c40eb088116a1c74ebf8f4312501e2c8afffa43c03170cb3f460ab0e98a39866f15596a25e0f61e40afb1575e24dbf8df94bab29071a33f1d43cbf15284128d41bbe9143a4303da232d02d32bc323228803fff513105bd6bfe900b7ebca8866126ac4338b192baa555ff07ee4ea9ea8639fb11addd447b0d0046d6d33f170fe65eb764771b04277abe6df6acdeb1f186000652e59a2012a9ff962eaeffda199786203427bd1bce1727add1512193bc1bc5a24cbd3fb3efec1dea8686bf879f8109450876544a0e41433d1c09e28a6086fdf1ebef782feffed21cd5e77e3dcb525ba287f9c4c2094ce63cc93ff89682e7eb9eb409bd3bfd791fe63e6e6a9f4644b760368986337912127204d998e883a94395919fb03491ea69e198f7f844b294836f03714a97ae5f829ee6a224c40a866fbd1cc05d3aea4458a014782717f8b44814600f4a405c26c845653540d3a975bb74bf0f392d041b95ebeaaa61a489ef0682fc59d3b3a65c7fa442de3c5be6753f49709bcc9ee442841c148a2beaf4031704d5c6a2de5a2121117b212b35ae60ef375d6bb0706459496f83c360a77ebdf3ea8992126679492de30dc1235f4466507e083042d39b6c3e6456b820735a7f590f7076da329cf3bd51b3ebb94ad1d8ea875804d3bde633ca104e343db3c72ef7881c6154256f01ddf8f1d8cadf96a6475c32421bab07e1287174283ae26eceeca08e8ff61c1c926edb3fe32f9e34c28a130081785a82b22f4da4e2cfc286bed9dd9ee7ef62898492207da1d7753aec55bf9907685095cd15ae47508a388f52f6f251b57b8423770a372a1eefba0f5c4deba59cddb4a5d27a0e4f3e982dc46d846c0cd0695591e0049a2d0fac446d29debabeff70e0779acd2aa2db81c4b2e7dad5ebdeab3e72ef4d999206d7db78fd5ec22ddcd0e6c02e6de026a3625409ca2f708b01abee12972976a23ff592dffefdf34bca97cfc277e92961ba79a9b07b0293b6c9c2fd78f16b4652a5620af9846a7abd5dcb553f9d3a8434f2f2c93120804efe6308fb38a491c0cd1ce63f39c7254a7db69176cf6ea7fc97e1b2d4672cd68b83ff6de9b23f9f09c2a5cbe70e3471295dce33d5f82a7ce551ff7abf2f4e17828954cb86abc5ff4b57977d305984a0c5bd0717cf516b916817ebef92d7969edda96dc971ad8bf9eede3ff71d206ae1bb0c1ef1690d435d489584ae35fec6bc74652bc046c6c8547ee7d8171bc717f325fbbd050b3ffbd1ad9215545ee8e098d23c09972f3ffa39a3ccc7af8c5b12a4f79649099572db9f6211b92ec09fc101cec1781d3d1d9863c32577871bd9b53eee7fb42eaff9b883141103d48f81e681ea4d2f8e4e2c421c2c079e06602effb4833f7358b74ffd0d7fd07e80661e10993041602c258660beb5a55028a13a1067edbaaed36d54821415842dc464ed2db1bedc801d1abfed51a5cdcb41073ab79aeecbc6c30955f093e5c1f31916566743e1a037f0d0d9a58c30c11b3a5c9809c56f975d12a1ba75e63d7f854b345f411ccd37012c86d13f548340d2cb76492ee2c12fc508d152d5fd7e07192255dc0d1b703b023b1e0b6c1e9d2bc512e2f878d9bd05dd865308e6060961a7aaadda90e5820ddb1f9e8fc22c4f5f699a9f4b4e9021e9945a3cec55a8710457002eef520506ad11dd3d0c7d02b980f1632e2cddacb75b9f2cb31f8796b2f1bd955b796e213bbee919c0900e42a023cd5841b9509140e9be0ff5d8e96ccef78962b94809c5a051eaa1db969d969f76a85a09537cd2b70d2246ec43e440d56917b4326b5980e2ef569cf6047df8b65589c09453db210d79745fef82a916b360377501724d5b51a89ec44bfab136f68b23fe12aac0e1f14f7b9d307e1429b123c3d46b8d1858c3d290584b565c36a34a65b4750b848b8a83c877ebe5892bfc74f3a732a32fba66c09dbebb10e1dfc013d2f0209a5d36793e7ed833388851708ca6843231100b6311c1543218f8315da0eed7f4228b66929925aa70fa213a343b3f0c6225da2c499fa31607b8e63476b0fb642099d10d1115ae8ada7069b5a83e3f2761f4d95211d31be5e38b64068e8b18c95c736c841ce8c3e449cc71abd4b5882c31224232cd4a70ed4ff0029d29969715bdcbecf15be96b7014b735ffa8589578e9ca553ba42f1a5f6474b7b7664cf0239df79a37f0a71e0686ae879219ba3a09427ad5c57e2d07b27c21aec51e51769793f136c09ad501460438f82117651b8a1c2333f123616b9123912cd9df115c651e7be5061362a60daccd6a71cad11ecaa1a2cd33680aa0d337d9473ef9b7b5fae1ea4e1e763d939704abb4c791b33ce95697de3ee6a13f5fb1d8c4b9228bc6f31c4bf67f92b024731ea80f35a0e2ec2337354f489da3b5bc7ba05eb48b0706b5459108ab4c1e988468dda6544b9fd351403db541482340cc86469f06e17d51122feace9657ef696efed9816d782625c693fd58fe91f80852741be8b10b4e4017678fc2742c6194adc9a59883917096c6050fd0e3ae6db6988c91b9ef70a9cbc395b7770c87435bdd6eec1b6ab923d25bacfc18d5f6d9b0de9684f137b5d7127bb2a30c16af3c3cfd9b659e6dcc97b42fdf9db6d7228576ecec91cf97a7cfbf14dd88f5fb0e45b847e507e1f242f6c58ed0680cc7e569ffac022ab610c74491a31e7cd3cabcec5a8055d0effa9f212cb77d2f459fc714f1df81b5e2ab52b5b14f941779df7e624e6fcdc60275dce660327034a4ba4233186fc96adea2700697612ebbc0c9cc562ba1a204dc4b298ebe3958654b7f6be9cd53a55aad76782e9003eb9d742e8fc70b74050e980f9387f193433ff631b819439b87f70aef0e570e29f92f53fb87c792795c95562cfc3a4ab23d41ac1c03df77ac56bfea1f348ce4c76fd61cf2094ce89118f657622dafc12db87f1988efa3294f58d2f299f5c1ed3ecf097035bebace0aab0830d5fd4df353ae04e5d96110197cedadf2c7f453ad71fbcc8f12c09e059b94129177e03d38a8ef32b4aa2a28951cccaccf584f332a63866aa00d7f0370865a99bcdfdb014de42df44241e7b49ed6b204a5fe5c15c8c0b8a3ffe064c85b060879e6fa006e4fdd72d8189d30ea0361f0eaafe187395b8ebe553ab82cf830c53d33dc99738ec", 0x1000}, {&(0x7f0000001880)="bef38d47d39637ae933c5f2ef7990239683c1acff70d20f5a223f29b507e69bc9dc6adfbf16bd5cc9b7ba9b6a8b0ddf49bf98f1dc9c6233872cbbc1fa7a3", 0x3e}, {&(0x7f00000018c0)="7f1af4d741e19ab49d123f2ff805345fcf82aac53d07a0d1425af17ee3505152765155a197ed7a80d48df8ec1f1088715617859122818ea406ac01b98813c2808022dc71d321693c93c144d556ad37079023b05cdd312862184489b29b281dca03d807736923d5e020211ac00de60664f4bed85f60408d817787c118ec75faf3096e72fe2071", 0x86}, {&(0x7f0000001980)="2a6fd8d00973a1ae17e14a23a3c406262961045985e7f7", 0x17}], 0x4) 17.647376337s ago: executing program 2 (id=59): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000031d414000380100000800c00018006000100d103000014000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x4, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd700006000000010000000000000008410000004c0018000100006574680000000600d76a48629700ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/98], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000000180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, 0x3e9, 0x400, 0x70bd28, 0x25dfdbfc, {0x10, 0x1, 0x2, 0x0, 0x6, 0x3, 0x5, 0xdd1b, 0x0, 0x7ff, 0x4}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$sock_int(r7, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x8, 0x4) getpeername$llc(r3, &(0x7f00000004c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000500)=0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f0000000040)=r6, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r9 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x6a, 0x5, 0x0, &(0x7f0000000040)) r10 = dup2(r8, r6) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r10, 0x4) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=r4, @ANYBLOB="00080000003f0000140012080000000000000064676500000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 6.15294901s ago: executing program 3 (id=100): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) (async) shutdown(r0, 0x0) (async, rerun: 64) ppoll(&(0x7f0000000000)=[{r0, 0xb22d}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) (async) socket$kcm(0x29, 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3a7f, 0x80, 0x0, 0x10f}, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @loopback}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x8}) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5.993018906s ago: executing program 3 (id=101): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}, 0x1}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYRES32=r5], 0x28}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) (async) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}, 0x1}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYRES32=r5], 0x28}}, 0x0) (async) 5.637474212s ago: executing program 3 (id=102): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e23, 0xfffffffc, @local}, r1, 0xfffffffd}}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x7, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xe, "50ba006d70e1c564f936666b"}, {0x0, 0x5, "91ec92"}, {0x0, 0x7, "0683fa3f39"}]}]}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="019a2e48c84aa7740f6a168057c75e3c00000010", @ANYRES32=0x0, @ANYBLOB="21000000090000008ab7000000000065727370616e00000c006cad1200"/39], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.466250737s ago: executing program 3 (id=104): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x40000b6, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a80)={[&(0x7f0000000a40)='.^*%$\'-\\:\x00']}) getpeername(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000200)=0x80) 4.840132665s ago: executing program 0 (id=106): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1}, 0x20) (async) sendfile(r0, r0, 0x0, 0x4) 4.390186852s ago: executing program 3 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) utimensat(r4, 0x0, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto(r3, &(0x7f0000000140)="92bc9dc8807f8d4deb0bdadd0f8fdca86122b128dcfc930d8cd3f0f17c973458c177f7", 0x23, 0x4000041, &(0x7f0000000280)=@can={0x1d, r5}, 0x80) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)=@arm64_extra={0x603000000013c033, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000000540)={0x0, 0x0, @ioapic={0x41000, 0x0, 0x7c7, 0x8, 0x0, [{0x55, 0x0, 0x6, '\x00', 0xf1}, {0x4, 0x35, 0x6, '\x00', 0x7}, {0xfb, 0x7, 0x5, '\x00', 0x6}, {0x2, 0x80, 0x1, '\x00', 0x6}, {0x7, 0x7e, 0x3, '\x00', 0x7}, {0x8, 0x1, 0x7, '\x00', 0x42}, {0x3, 0x7, 0x48, '\x00', 0x9}, {0x1, 0xa, 0x8, '\x00', 0x40}, {0xf2, 0x7, 0xff, '\x00', 0x1}, {0x7, 0x0, 0x6, '\x00', 0x3}, {0xff, 0x9, 0x5, '\x00', 0x2}, {0x0, 0x5, 0x6a, '\x00', 0x3}, {0x8, 0x40, 0xff, '\x00', 0x4}, {0x5, 0xff, 0xdf, '\x00', 0x3}, {0x1, 0x4, 0x6}, {0xc, 0xc4, 0x32, '\x00', 0x6}, {0x1, 0x1, 0x1}, {0x5, 0x6, 0x4, '\x00', 0x5}, {0x7, 0x9, 0x4, '\x00', 0x2}, {0xf0, 0xbf, 0xa, '\x00', 0xfc}, {0x9, 0xc0, 0x2, '\x00', 0x3}, {0x3, 0x9, 0x6, '\x00', 0x5}, {0x3, 0x63, 0x9, '\x00', 0xda}, {0x1, 0x75, 0x81, '\x00', 0x40}]}}) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="3e64660f5eff26d9f366b9800000c00f326635008000000f300fc732f00fb1900000362ef0832a00f00fb3b10400ba4100ed66b9800000c00f326635010000000f30f2ab", 0x44}], 0x1, 0xc, &(0x7f00000000c0)=[@cr4={0x1, 0x10}, @cr0={0x0, 0x40000}], 0x2) 4.229210905s ago: executing program 1 (id=108): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r3, &(0x7f0000000100)={0x33, 0x4500}, &(0x7f0000000140), 0x0) r4 = syz_clone(0x108000, &(0x7f0000000300)="6bee12f22f86176e904f8ccdc0d7fac0e1dd82ba3b81cb32f11a124b892c3b90802838236eb225dbf3aff73f2ef21280e19b9d151ffe15f5336f2dbf55431138e72afe22e50bc6", 0x47, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="4d23a9afc297ad06e02a75fd17e95e8146d1cf407e1c0847e7ca09b0848e269a90d98b4fc3cd7f1b4fce31e50e2df4be315988871881dc897066a8b16ab82d2eec14e2c9058ba0f72b1ca1e2cde33af5060ab4c68cfed05ac9503a105b49c700eab6f10cc679b87aa6") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0xfffffffb, 0x1, {0xffffffffffffffff}, {r1}, 0x10000, 0x58e}) r6 = fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)=0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x4000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x38}, &(0x7f0000000240)=""/65, 0x41, &(0x7f00000002c0)=""/37, &(0x7f0000000500)=[r4, r5, r6, r7], 0x4, {r8}}, 0x58) r9 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000600), 0x201, 0x0) ioctl$SIOCGETLINKNAME(r9, 0x89e0, &(0x7f0000000640)={0x0, 0x3}) syz_ublk_setup_queues(r9, 0x0, &(0x7f00000006c0)={0x0, 0xc392, 0x40, 0x3, 0x88, 0x0, r9}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfcf, 0x2000, 0x0, 0x344}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa99f, 0x8000, 0x3, 0x124, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbcf0, 0x40000, 0x3, 0x37a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xea5a, 0x200, 0x2, 0x289, 0x0, r9}}], 0x4, &(0x7f00000019c0)={0x2e, 0x47, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0x568, 0x0, &(0x7f00000009c0)=@buf_4k="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"}}, &(0x7f0000001a40)) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r10, 0xc0107521, &(0x7f0000002a80)={0x2, 0xb3c, 0x84ec, &(0x7f0000001a80)=@buf_512="98d004cb88a9c1931253595038812e240e8dd7d68ac4c78a84811943bfb61faf8ecaca50bacb1a2b394773193066e2eef7bc94fae26ff9a3a8747190c06502782dec3376e3c95fca46ae1aa13acfa39e4a7bef001b6e224bf828f78cbc2b3f780ea9a54747231bf8a65f0710d5d6becc32af4f05f65bb951660fdb491f6fc07fe916607e367928905a453e179b57212dd950f2202af5caea14f039e176955413b1ca66225f5593f61323b863a16ed79184f79c456e858b2cc864dd0acadeb761c22bccec7e5332c2a67aa45ad428b2869dec5d2bf0aa93606379e1ba5c0af751d0fc12884bc589c3e8310230793c2e733bbe61431884039c9610a02fdd200abc62c33a158f6e4134b1ebed9c6a6b7693fb83cdb5e833bd077d8c135e4f3eb4ce7dec40c238179ae1c8bd1e2bbe1f2a32367616515c1fc2700f4ebdce4db472e12b4c994675e7b323b7df7c4d9327d025aaea732c020c1eb131ae54d12184f79e7ab393ebbffdd6349b3647648af440aa57b7a7070dd4d8257347044dd7536157e2780314e0593cbb1e0c2ff2bce610ad26b71f3ad27498151bd5fb6d64d8b10ca79c6da257841b2678aadaa0c6d5cd0e09e3aea564fd1e0e3fb979b85863014e48b1c702dfd34633f2e43a6352a5693f02b530d436a0ed9eb168562493b024884ef544aaafc772ae5bbcaef3c8b4ca4fad604d86301aca9771b04ee3d8fcebf2"}) sendmsg$nl_xfrm(r9, &(0x7f0000002d00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002b40)=@getsa={0x15c, 0x12, 0x0, 0x70bd26, 0x25dfdbfe, {@in6=@mcast2, 0x4d5, 0xa, 0x6c}, [@tfcpad={0x8, 0x16, 0xfffffffd}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@empty, 0x2, 0x3, 0x5}}, @algo_auth_trunc={0x102, 0x14, {{'rmd128\x00'}, 0x5b0, 0x180, "fbd5c39f31048aff8d524fa9062b518a1daf86875bb5b479071baaa3cf75220761d22800126ce76134b4ba4258137772e684d9fce430909cf058be5f3e9a5a2d0203313edec43577363d0777fc87979d891179d0134f703697cb054ddcb8ae2af5c980f5c46e46c94f8f172f33fd97b7bd5e9924ac42ce2d5ad2132552556234674e5f3147e4ef80f17bb4defdd940166e9f79b1879e959d24891cc77b191483acdbc311ddba2a13ef51af8d6fea7cc996c2f45f0f0d"}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000002f80)={0x3, 0x0, [{0xfec00000, 0xf4, &(0x7f0000002d40)=""/244}, {0x100000, 0x52, &(0x7f0000002e40)=""/82}, {0x2, 0x98, &(0x7f0000002ec0)=""/152}]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003040), r9) sendmsg$NL80211_CMD_SET_CHANNEL(r9, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x2c, r11, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x891}, 0x24040cc1) sendmsg$nl_route_sched_retired(r9, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)=@deltclass={0x3c, 0x29, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xfff1, 0x1f}, {0x9}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008801}, 0x40) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r9) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x1c, r12, 0x2, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000001) ioctl$F2FS_IOC_COMPRESS_FILE(r10, 0xf518, 0x0) ioctl$PTP_ENABLE_PPS(r9, 0x40043d04, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000003400)={'gre0\x00', &(0x7f00000033c0)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0xfffffffc, 0xc, {{0x6, 0x4, 0x0, 0x1e, 0x18, 0x68, 0x0, 0x3, 0x2f, 0x0, @loopback, @multicast1, {[@noop]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)=@ipv6_newaddr={0x54, 0x14, 0x2, 0x70bd2a, 0x25dfdbfc, {0xa, 0x3f, 0x0, 0xfe, r13}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, @IFA_CACHEINFO={0x14, 0x6, {0x98d1, 0x800, 0x8bf, 0x3}}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20040004) syz_open_dev$admmidi(&(0x7f0000003540), 0x4, 0x82) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000035c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f00000036c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x7c, r11, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x801) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x1c, 0x1b, &(0x7f0000003740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @ldst={0x3c249255dd2ad0b2, 0x1, 0x1, 0x9, 0x1, 0x79a97f9de4dec816, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003840)='GPL\x00', 0xffff, 0x5f, &(0x7f0000003880)=""/95, 0x41000, 0x46, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003a40)={0x2, 0xf, 0x6, 0xf2}, 0x10, 0x0, r9, 0x5, &(0x7f0000003b00)=[r2, r0, 0xffffffffffffffff], &(0x7f0000003b40)=[{0x2, 0x5, 0xb, 0xc}, {0x4, 0x3, 0xd, 0xc}, {0x1, 0x2, 0xa, 0x1}, {0x5, 0x5, 0x8, 0x8}, {0x5, 0x1, 0x5, 0x6}], 0x10, 0x3}, 0x94) 4.134007606s ago: executing program 0 (id=109): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) open$dir(&(0x7f0000000140)='./bus\x00', 0x600, 0x24) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) syz_emit_vhci(0x0, 0x61) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x17, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r7, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x40086602, &(0x7f0000000080)={0x17e}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x40086602, &(0x7f0000000140)={0x17e}) r10 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001b80), 0x2, 0x0) write$vhost_msg(r10, &(0x7f0000001cc0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) 3.967825971s ago: executing program 1 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r2 = dup(r0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xf}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x4, 0x9, 0x2, 0x7, 0x7, 0x4, 0x8001, 0x6, 0x6, 0x1791]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000011}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x2, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5c}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) read$snddsp(r2, &(0x7f00000004c0)=""/35, 0x23) accept4(r2, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x40800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x4f, 0x8, 0x1, 0x26b, {{0xa, 0x4, 0x3, 0x23, 0x28, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @local, {[@timestamp={0x44, 0x14, 0x48, 0x0, 0xd, [0x10, 0xff, 0x81, 0x531]}]}}}}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x5c}}, 0x8000) (async) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000800)={r4}) (async) socket(0x6, 0x80000, 0x898) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x19}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) (async, rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r9, 0x4, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x480d0}, 0x0) (async) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r0) sendmsg$TIPC_CMD_SET_NETID(r10, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r11, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xfffffff9}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0xd0) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f0000000c40)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r3, 0x510, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) ioctl$EXT4_IOC_GET_ES_CACHE(r12, 0xc020662a, &(0x7f0000000e00)={0x7fffffff, 0x6, 0x2, 0x0, 0x5, 0x0, [{0x6, 0x8000000000000001, 0x6, '\x00', 0x4}, {0x2, 0xa8c2, 0x6, '\x00', 0x200}, {0x8f14, 0x7200, 0x0, '\x00', 0x2983}, {0xfffffffffffffff5, 0x0, 0xfe08, '\x00', 0xd01}, {0x0, 0x5, 0x4, '\x00', 0x1}]}) 3.518936528s ago: executing program 1 (id=111): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r4, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x48000}, 0x40010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d0020073f0000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r9], 0x44}}, 0x2000040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008804}, 0x20040040) 3.267205529s ago: executing program 3 (id=112): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28b6170000007741dc584c93204bdafcca2a5c648f0405883671fdeba9c564a0096432f90e821b0b6c31ab6e6c070000005847aca557fa816fc15933d4e33d77b7d04f9a58d437711c15c6c09e49a6fdf83d0757cd81ee2f31d54004999817a9f1e300000000c44a092b2e0bef2603f498af1f605cf906c0b0b6487588a5be3c781ec80e0c125bd05eabbc051ab720e7152405a0bea39309ece6", @ANYRES16=r2, @ANYBLOB="030d25bd7000fbdbdf251b000000080015000200000008000100", @ANYRES32=0x0, @ANYBLOB="04001900"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8010) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0xffffffff, 0x4}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000000c0), &(0x7f0000048000), 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) exit(0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x6, 0x1, 0x7, 0x11, 0x5, 0x79, 0x6, 0x80008, 0x9, 0x2, 0x1, 0x9, 0x1, 0x5, 0x6, 0xb, 0x20000009, 0xb1, 0x7fffffff, 0xffffffff, 0xca9f, 0x17f, 0x20000a, 0xfffffffb, 0xf29e, 0xffffffff, 0x5, 0xa6b3, 0x0, 0xfffffff8]}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000380)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001800010bd3c79c25d3c2130324"], 0x14}}, 0x8854) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000180)) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000300)={0x0, 0xfffffcb5, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="390d27382e00000000000000000008000400000000000801000000000000000000ceb5533f4cb33c7352d6c0e8a8297c437ae2bbacd5626d40d35f2288d0fe461e57ec6097c1e3f4cee9d57b92c9cf95a45cd153516534f10d7aded96bf2914d28b02bfa99465caa6c81f79702373ef4aa33c364475c4f56644bec04c17cf5126da4981605388ec3bd380b89ee6441a386244a89a517ddf901ef8e1949c20e7942cacdd3ec4fa4f58c9a61dbec1b30ca280d8398f53dfcc2a742f668afdb588fea21"], 0x64}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8800200}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000025bd7000fedbdf250600000000000d007c00000000000d007600000000000e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x84) 3.266721334s ago: executing program 0 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x4004448) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x38, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c840}, 0x40081) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9fdfa44c777af851991a000d", @ANYRES16=r3, @ANYBLOB="02002dbd7000fddbdf250900000008000500090000004c000280080008005b00000005000d000000000006000f004a00000008000600ff0f00000800060003000000060002004e21000005000d000100000008000400b70d000008000900040000000800050008000000"], 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x1e, 0x8, "faf98317e5a1225889f38dbe43ea6acc96e3a1503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b5516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67e231010000008c8100010000030000002000ff00", [0x5, 0x400000007]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002b2ff200fbdbdf25681e010008000300", @ANYRES32=r4, @ANYBLOB="2400c7"], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x4800) 2.83009988s ago: executing program 0 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xc, 0x20002f7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_io_uring_setup(0x2152, &(0x7f0000000200)={0x0, 0xd3ec, 0xc0, 0x400, 0x8000152, 0x0, r1}, &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000080), 0x0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000080)={0x101, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000006111c000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2.581908114s ago: executing program 1 (id=115): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x64, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8080) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000000040)={0x1, 0x1}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000004001500090002000000035c3b61c1d67f6f94007134cfce1e090000001fb791643a5ee4ce1b14d6d930ede1d9d322fe7c9f8775730d165ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3f09ad809d5e1cace81ed0bffece0b42a9ecbee5dd6e4edef3d93452a92954b4337000000008af26c8b7b55f4d2cb1df0966736a1dfe444c65ac5b348eac7c2ea475327557ba566236ceb0000000000", 0xd8}], 0x1}, 0x4000) 2.503865514s ago: executing program 0 (id=116): ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f044, 0x7ff}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '.\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYRES8=r3], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x3}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x4000040) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r8, &(0x7f0000006800)="10", 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x9, &(0x7f0000000140)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) 1.847311754s ago: executing program 1 (id=117): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) (async) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) (async) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 1.689840124s ago: executing program 1 (id=118): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="61dc771fbadb53d58c7eb0cf5c808a66d69bf91a9a2550b66eff6b28aa44571e9e3b34f41a77532b304dbd237f9d5c3f36bf3f30d20b511965ca43f142cc39"], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0xb, 0x800, 0x7) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = socket(0x10, 0x3, 0x0) r6 = accept$packet(r5, 0x0, &(0x7f00000000c0)) bind$packet(r6, &(0x7f0000000100)={0x11, 0x16, r1, 0x1, 0xa}, 0x14) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 0 (id=119): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0xffffffffffffffeb) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000000)={&(0x7f0000000000), 0x0, 0x3e293b19990c168b}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa0000260000000000119078000000000000000000004e200012907800"/52], 0x0) recvfrom(r1, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8}]}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): [ 109.535096][ T42] audit: type=1400 audit(1783439090.997:116): avc: denied { rlimitinh } for pid=5657 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 109.556303][ T42] audit: type=1400 audit(1783439090.997:117): avc: denied { siginh } for pid=5657 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 110.051357][ T42] audit: type=1400 audit(1783439091.637:118): avc: denied { write } for pid=5662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.186731][ T42] audit: type=1400 audit(1783439091.767:119): avc: denied { write } for pid=5665 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.433048][ T42] audit: type=1400 audit(1783439092.017:120): avc: denied { write } for pid=5668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:56975' (ED25519) to the list of known hosts. [ 114.701581][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 114.701600][ T42] audit: type=1400 audit(1783439096.297:138): avc: denied { name_bind } for pid=5733 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 114.786561][ T42] audit: type=1400 audit(1783439096.377:139): avc: denied { execute } for pid=5734 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 114.807747][ T42] audit: type=1400 audit(1783439096.377:140): avc: denied { execute_no_trans } for pid=5734 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 120.906118][ T42] audit: type=1400 audit(1783439102.497:141): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 120.925026][ T42] audit: type=1400 audit(1783439102.517:142): avc: denied { mount } for pid=5734 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 120.949493][ T5734] cgroup: Unknown subsys name 'net' [ 120.994445][ T42] audit: type=1400 audit(1783439102.577:143): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 121.215004][ T5734] cgroup: Unknown subsys name 'cpuset' [ 121.277362][ T5734] cgroup: Unknown subsys name 'rlimit' [ 121.635353][ T42] audit: type=1400 audit(1783439103.217:144): avc: denied { setattr } for pid=5734 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.646401][ T42] audit: type=1400 audit(1783439103.217:145): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.691252][ T42] audit: type=1400 audit(1783439103.217:146): avc: denied { write } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.700917][ T42] audit: type=1400 audit(1783439103.217:147): avc: denied { read } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.722871][ T42] audit: type=1400 audit(1783439103.297:148): avc: denied { read } for pid=5451 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 121.781050][ T42] audit: type=1400 audit(1783439103.297:149): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 121.825335][ T42] audit: type=1400 audit(1783439103.297:150): avc: denied { mount } for pid=5734 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 121.919570][ T5739] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 124.609209][ T5734] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 125.418114][ T75] cfg80211: failed to load regulatory.db [ 137.646062][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 137.646082][ T42] audit: type=1400 audit(1783439119.237:158): avc: denied { execmem } for pid=5754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 138.248894][ T42] audit: type=1400 audit(1783439119.837:159): avc: denied { create } for pid=5758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.302893][ T42] audit: type=1400 audit(1783439119.837:160): avc: denied { read write } for pid=5758 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 138.336668][ T42] audit: type=1400 audit(1783439119.837:161): avc: denied { open } for pid=5758 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 138.351417][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.376243][ T42] audit: type=1400 audit(1783439119.847:162): avc: denied { ioctl } for pid=5758 comm="syz-executor" path="socket:[5861]" dev="sockfs" ino=5861 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.421457][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.451164][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.456025][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.456061][ T5765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.481505][ T5765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.485214][ T5765] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.508914][ T5768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.517909][ T5768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.549844][ T42] audit: type=1400 audit(1783439120.117:163): avc: denied { read } for pid=5758 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 138.558324][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.573748][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.592713][ T42] audit: type=1400 audit(1783439120.127:164): avc: denied { open } for pid=5758 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 138.592760][ T42] audit: type=1400 audit(1783439120.127:165): avc: denied { mounton } for pid=5758 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 138.592797][ T42] audit: type=1400 audit(1783439120.147:166): avc: denied { module_request } for pid=5758 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 138.645009][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.656047][ T42] audit: type=1400 audit(1783439120.247:167): avc: denied { sys_module } for pid=5758 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.678229][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.680005][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.680414][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.692233][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.703539][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.713023][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.855616][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.867098][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.060035][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.067087][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.071596][ T5758] bridge_slave_0: entered allmulticast mode [ 140.080541][ T5758] bridge_slave_0: entered promiscuous mode [ 140.095976][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.098735][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.101528][ T5758] bridge_slave_1: entered allmulticast mode [ 140.117473][ T5758] bridge_slave_1: entered promiscuous mode [ 140.281775][ T5758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.332146][ T5758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.492206][ T5758] team0: Port device team_slave_0 added [ 140.512782][ T5758] team0: Port device team_slave_1 added [ 140.603715][ T5098] Bluetooth: hci0: command tx timeout [ 140.611221][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.620602][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.634776][ T5758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.696808][ T5758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.699947][ T5758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.715532][ T5758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.752985][ T5098] Bluetooth: hci1: command tx timeout [ 140.758122][ T5098] Bluetooth: hci2: command tx timeout [ 140.923676][ T5098] Bluetooth: hci3: command tx timeout [ 141.064760][ T5758] hsr_slave_0: entered promiscuous mode [ 141.069514][ T5758] hsr_slave_1: entered promiscuous mode [ 141.079839][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.083555][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.086453][ T5770] bridge_slave_0: entered allmulticast mode [ 141.090712][ T5770] bridge_slave_0: entered promiscuous mode [ 141.099817][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.104184][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.107536][ T5770] bridge_slave_1: entered allmulticast mode [ 141.112009][ T5770] bridge_slave_1: entered promiscuous mode [ 141.193103][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.235438][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.240169][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.243830][ T5762] bridge_slave_0: entered allmulticast mode [ 141.248790][ T5762] bridge_slave_0: entered promiscuous mode [ 141.256740][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.261467][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.266704][ T5762] bridge_slave_1: entered allmulticast mode [ 141.271004][ T5762] bridge_slave_1: entered promiscuous mode [ 141.280029][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.493095][ T5770] team0: Port device team_slave_0 added [ 141.533263][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.538776][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.548093][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.569740][ T5766] bridge_slave_0: entered allmulticast mode [ 141.606073][ T5766] bridge_slave_0: entered promiscuous mode [ 141.622750][ T5770] team0: Port device team_slave_1 added [ 141.629208][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.643739][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.647237][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.650168][ T5766] bridge_slave_1: entered allmulticast mode [ 141.671398][ T5766] bridge_slave_1: entered promiscuous mode [ 141.771082][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.785065][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.814655][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.822096][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.836823][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.867884][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.063606][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.085167][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.094757][ T5762] team0: Port device team_slave_0 added [ 142.154493][ T5762] team0: Port device team_slave_1 added [ 142.282542][ T5766] team0: Port device team_slave_0 added [ 142.300526][ T5770] hsr_slave_0: entered promiscuous mode [ 142.304181][ T5770] hsr_slave_1: entered promiscuous mode [ 142.315069][ T5770] debugfs: 'hsr0' already exists in 'hsr' [ 142.318273][ T5770] Cannot create hsr debugfs directory [ 142.356541][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.359362][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.382919][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.389213][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.398242][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.412558][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.427503][ T5766] team0: Port device team_slave_1 added [ 142.662056][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.666236][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.677331][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.684991][ T5098] Bluetooth: hci0: command tx timeout [ 142.739487][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.751128][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.794674][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.809780][ T5762] hsr_slave_0: entered promiscuous mode [ 142.814637][ T5762] hsr_slave_1: entered promiscuous mode [ 142.819137][ T5762] debugfs: 'hsr0' already exists in 'hsr' [ 142.822072][ T5762] Cannot create hsr debugfs directory [ 142.839234][ T5098] Bluetooth: hci1: command tx timeout [ 142.847464][ T5098] Bluetooth: hci2: command tx timeout [ 143.012859][ T5098] Bluetooth: hci3: command tx timeout [ 143.129428][ T5766] hsr_slave_0: entered promiscuous mode [ 143.134899][ T5766] hsr_slave_1: entered promiscuous mode [ 143.141229][ T5766] debugfs: 'hsr0' already exists in 'hsr' [ 143.146149][ T5766] Cannot create hsr debugfs directory [ 143.160577][ T5758] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.195008][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.282585][ T5758] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.335303][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.356559][ T5758] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.371500][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.412004][ T5758] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.435236][ T5758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 143.788678][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 143.795965][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.802529][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.812225][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 143.830883][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.839893][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 143.880268][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.891124][ T5770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.085449][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.112037][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.115337][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.135018][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.147637][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.173354][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.223127][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.241004][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.496041][ T5758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.548501][ T5758] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.565994][ T5766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.581390][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.602434][ T5766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.633883][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.650133][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.660978][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.715244][ T5766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.764892][ T5098] Bluetooth: hci0: command tx timeout [ 144.778064][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.813368][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.816828][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.821270][ T5766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.829425][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.870622][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.913476][ T5098] Bluetooth: hci1: command tx timeout [ 144.927416][ T5098] Bluetooth: hci2: command tx timeout [ 145.074121][ T5098] Bluetooth: hci3: command tx timeout [ 145.115433][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.189423][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.192906][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.267342][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.345652][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.348573][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.435081][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.503800][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.594181][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.597895][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.656153][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.703003][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.706844][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.822392][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.917617][ T5762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.923896][ T5762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.959526][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.964263][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.987941][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.063088][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.452595][ T5766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.483958][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.792067][ T5758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.854432][ T5098] Bluetooth: hci0: command tx timeout [ 146.884928][ T5758] veth0_vlan: entered promiscuous mode [ 146.943480][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.954358][ T5758] veth1_vlan: entered promiscuous mode [ 147.056048][ T5098] Bluetooth: hci2: command tx timeout [ 147.059034][ T5098] Bluetooth: hci1: command tx timeout [ 147.167453][ T5098] Bluetooth: hci3: command tx timeout [ 147.191920][ T5770] veth0_vlan: entered promiscuous mode [ 147.229438][ T5770] veth1_vlan: entered promiscuous mode [ 147.241516][ T5758] veth0_macvtap: entered promiscuous mode [ 147.269669][ T5758] veth1_macvtap: entered promiscuous mode [ 147.291437][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.346817][ T5758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.436438][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.447360][ T5770] veth0_macvtap: entered promiscuous mode [ 147.484288][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.511422][ T5770] veth1_macvtap: entered promiscuous mode [ 147.529286][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.551590][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.559797][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.631580][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.874854][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.912526][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.048288][ T5762] veth0_vlan: entered promiscuous mode [ 148.098685][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.125782][ T5766] veth0_vlan: entered promiscuous mode [ 148.144888][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.161324][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.161379][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.173812][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.186644][ T5762] veth1_vlan: entered promiscuous mode [ 148.269089][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.393721][ T368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.421377][ T368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.432501][ T5766] veth1_vlan: entered promiscuous mode [ 148.500003][ T42] audit: type=1400 audit(1783439130.067:168): avc: denied { mount } for pid=5758 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.536712][ T42] audit: type=1400 audit(1783439130.117:169): avc: denied { mounton } for pid=5758 comm="syz-executor" path="/syzkaller.89APMw/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 148.579429][ T42] audit: type=1400 audit(1783439130.117:170): avc: denied { mount } for pid=5758 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 148.600359][ T42] audit: type=1400 audit(1783439130.127:171): avc: denied { mounton } for pid=5758 comm="syz-executor" path="/syzkaller.89APMw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 148.608352][ T5762] veth0_macvtap: entered promiscuous mode [ 148.628254][ T42] audit: type=1400 audit(1783439130.127:172): avc: denied { mounton } for pid=5758 comm="syz-executor" path="/syzkaller.89APMw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 148.644546][ T5762] veth1_macvtap: entered promiscuous mode [ 148.699979][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.751602][ T42] audit: type=1400 audit(1783439130.127:173): avc: denied { unmount } for pid=5758 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 148.759471][ T42] audit: type=1400 audit(1783439130.197:174): avc: denied { mounton } for pid=5758 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 148.772229][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.789659][ T42] audit: type=1400 audit(1783439130.197:175): avc: denied { mount } for pid=5758 comm="syz-executor" name="/" dev="gadgetfs" ino=10329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 148.789713][ T42] audit: type=1400 audit(1783439130.227:176): avc: denied { mount } for pid=5758 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 148.789750][ T42] audit: type=1400 audit(1783439130.227:177): avc: denied { mounton } for pid=5758 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 148.933835][ T5758] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 149.055217][ T368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.068121][ T368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.168559][ T5766] veth0_macvtap: entered promiscuous mode [ 149.234658][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.260028][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.310793][ T5766] veth1_macvtap: entered promiscuous mode [ 149.371164][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.431829][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.454775][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.538333][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.541876][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.549916][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.572962][ T5914] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.607721][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.625887][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.631680][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.861897][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.066108][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.084495][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.230606][ T5919] syz.3.5 uses obsolete (PF_INET,SOCK_PACKET) [ 150.245297][ T5919] 9pnet_fd: p9_fd_create_unix (5919): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 150.286901][ T5922] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.668670][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.674382][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.830894][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.839551][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.925383][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.930403][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.074917][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 151.097363][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 151.911947][ T5955] lo speed is unknown, defaulting to 1000 [ 151.927876][ T5955] lo speed is unknown, defaulting to 1000 [ 151.934529][ T5955] lo speed is unknown, defaulting to 1000 [ 152.233510][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 152.463171][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 152.467303][ T5955] infiniband syz1: set active [ 152.470835][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 152.486689][ T1484] lo speed is unknown, defaulting to 1000 [ 152.491884][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 152.494995][ T5955] infiniband syz1: added lo [ 152.496056][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.500485][ T10] usb 5-1: Product: syz [ 152.500504][ T10] usb 5-1: Manufacturer: syz [ 152.500516][ T10] usb 5-1: SerialNumber: syz [ 152.510364][ T10] usb 5-1: config 0 descriptor?? [ 152.576965][ T5955] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 152.607832][ T5955] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 152.626520][ T5955] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 152.630744][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 152.665806][ T10] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 152.687799][ T5955] RDS/IB: syz1: added [ 152.710816][ T5955] smc: adding ib device syz1 with port count 1 [ 152.715541][ T5955] smc: ib device syz1 port 1 has no pnetid [ 152.792895][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 152.853985][ T1484] lo speed is unknown, defaulting to 1000 [ 152.879611][ T5955] lo speed is unknown, defaulting to 1000 [ 152.963040][ T24] usb 7-1: device descriptor read/64, error -71 [ 153.116143][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 153.197466][ T5981] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 153.209296][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 153.333451][ T5984] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19'. [ 153.340500][ T10] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 153.352954][ T24] usb 7-1: device descriptor read/64, error -71 [ 153.391230][ T10] em28xx 5-1:0.0: board has no eeprom [ 153.393805][ T5983] vlan2: entered allmulticast mode [ 153.434983][ T5983] bond0: entered allmulticast mode [ 153.442882][ T5983] bond_slave_0: entered allmulticast mode [ 153.472082][ T5983] bond_slave_1: entered allmulticast mode [ 153.507145][ T10] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 153.515829][ T24] usb usb7-port1: attempt power cycle [ 153.570748][ T10] em28xx 5-1:0.0: dvb set to bulk mode. [ 153.623148][ T5856] em28xx 5-1:0.0: Binding DVB extension [ 153.685454][ T10] usb 5-1: USB disconnect, device number 2 [ 153.794562][ T5856] em28xx 5-1:0.0: Registering input extension [ 153.831496][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 153.867378][ T42] kauditd_printk_skb: 61 callbacks suppressed [ 153.867402][ T42] audit: type=1400 audit(1783439135.457:239): avc: denied { write } for pid=5986 comm="syz.3.20" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 153.895618][ T5988] random: crng reseeded on system resumption [ 153.898709][ T10] em28xx 5-1:0.0: Closing input extension [ 153.901910][ T42] audit: type=1400 audit(1783439135.477:240): avc: denied { open } for pid=5986 comm="syz.3.20" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 154.018148][ T10] em28xx 5-1:0.0: Freeing device [ 154.051220][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 154.113906][ T24] usb 7-1: device descriptor read/8, error -71 [ 154.129567][ T42] audit: type=1400 audit(1783439135.707:241): avc: denied { ioctl } for pid=5986 comm="syz.3.20" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 154.189348][ T42] audit: type=1400 audit(1783439135.717:242): avc: denied { write } for pid=5986 comm="syz.3.20" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 154.213103][ T42] audit: type=1400 audit(1783439135.737:243): avc: denied { ioctl } for pid=5986 comm="syz.3.20" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 ioctlcmd=0x6440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 154.252824][ T42] audit: type=1400 audit(1783439135.737:244): avc: denied { create } for pid=5986 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.253611][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.274237][ T42] audit: type=1400 audit(1783439135.737:245): avc: denied { getopt } for pid=5986 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.305918][ T5984] bond_slave_0: left allmulticast mode [ 154.347660][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.376510][ T5984] bond_slave_1: left allmulticast mode [ 154.382092][ T5984] bond0 (unregistering): Released all slaves [ 154.393068][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 154.421316][ T5955] lo speed is unknown, defaulting to 1000 [ 154.480709][ T24] usb 7-1: device descriptor read/8, error -71 [ 154.603587][ T24] usb usb7-port1: unable to enumerate USB device [ 154.909569][ T42] audit: type=1400 audit(1783439136.497:246): avc: denied { unmount } for pid=5766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 155.190526][ T5955] lo speed is unknown, defaulting to 1000 [ 155.353958][ T42] audit: type=1400 audit(1783439136.917:247): avc: denied { mount } for pid=5998 comm="syz.3.24" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 155.400641][ T42] audit: type=1400 audit(1783439136.987:248): avc: denied { setopt } for pid=5998 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.811375][ T5864] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 155.912749][ T5955] lo speed is unknown, defaulting to 1000 [ 156.019570][ T6012] netlink: 7 bytes leftover after parsing attributes in process `syz.0.27'. [ 156.022810][ T5864] usb 7-1: Using ep0 maxpacket: 8 [ 156.028895][ T5864] usb 7-1: config 0 interface 0 has no altsetting 0 [ 156.038181][ T5864] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 156.041983][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.046500][ T5864] usb 7-1: Product: syz [ 156.048302][ T5864] usb 7-1: Manufacturer: syz [ 156.053553][ T5864] usb 7-1: SerialNumber: syz [ 156.083386][ T5864] usb 7-1: config 0 descriptor?? [ 156.098331][ T5864] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 156.105493][ T5864] pctv452e: pctv452e_power_ctrl: 1 [ 156.105493][ T5864] [ 156.129030][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.134887][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 156.135669][ T5864] usb 7-1: selecting invalid altsetting 3 [ 156.144608][ T5864] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 156.144608][ T5864] [ 156.275936][ T5864] dvb-usb: bulk message failed: -22 (5/0) [ 156.296920][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.345920][ T5864] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 156.356708][ T5864] usb 7-1: media controller created [ 156.361327][ T5864] dvb-usb: bulk message failed: -22 (8/0) [ 156.376300][ T5864] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 156.397291][ T5864] dvb-usb: MAC address reading failed. [ 156.445663][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.549549][ T5864] DVB: Unable to find symbol stb0899_attach() [ 156.558570][ T5864] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 156.688558][ T6026] netlink: 44 bytes leftover after parsing attributes in process `syz.1.30'. [ 156.756259][ T5864] rc_core: IR keymap rc-tt-1500 not found [ 156.834106][ T5864] Registered IR keymap rc-empty [ 156.842255][ T5864] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 156.874008][ T5864] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input6 [ 156.898352][ T5864] dvb-usb: schedule remote query interval to 100 msecs. [ 156.908718][ T6030] netlink: 'syz.0.33': attribute type 21 has an invalid length. [ 156.926832][ T5864] pctv452e: pctv452e_power_ctrl: 0 [ 156.926832][ T5864] [ 156.940844][ T5864] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 156.959602][ T6033] netlink: 'syz.0.33': attribute type 21 has an invalid length. [ 156.968568][ T6030] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.968911][ T6030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.968972][ T6030] IPv6: NLM_F_CREATE should be set when creating new route [ 156.969010][ T6030] IPv6: NLM_F_CREATE should be set when creating new route [ 156.969031][ T6030] IPv6: NLM_F_CREATE should be set when creating new route [ 157.053475][ T6033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.059483][ T5864] dvb-usb: bulk message failed: -22 (4/0) [ 157.137846][ T5864] dvb-usb: error -22 while querying for an remote control event. [ 157.263230][ T5864] dvb-usb: bulk message failed: -22 (4/0) [ 157.281980][ T5864] dvb-usb: error -22 while querying for an remote control event. [ 157.370253][ T6038] netlink: 80 bytes leftover after parsing attributes in process `syz.0.35'. [ 157.493457][ T5864] dvb-usb: bulk message failed: -22 (4/0) [ 157.496605][ T5864] dvb-usb: error -22 while querying for an remote control event. [ 157.622833][ T5864] dvb-usb: bulk message failed: -22 (4/0) [ 157.629169][ T5864] dvb-usb: error -22 while querying for an remote control event. [ 157.771056][ T5864] dvb-usb: bulk message failed: -22 (4/0) [ 157.776872][ T5864] dvb-usb: error -22 while querying for an remote control event. [ 157.962992][ T5864] dvb-usb: bulk message failed: -22 (4/0) [ 158.010992][ T5864] dvb-usb: error -22 while querying for an remote control event. [ 158.133252][ T45] dvb-usb: bulk message failed: -22 (4/0) [ 158.146499][ T45] dvb-usb: error -22 while querying for an remote control event. [ 158.280469][ T45] dvb-usb: bulk message failed: -22 (4/0) [ 158.336106][ T45] dvb-usb: error -22 while querying for an remote control event. [ 158.379336][ T24] usb 7-1: USB disconnect, device number 6 [ 158.444413][ T45] dvb-usb: bulk message failed: -22 (4/0) [ 158.446904][ T45] dvb-usb: error -22 while querying for an remote control event. [ 158.711326][ T6061] netlink: 'syz.2.42': attribute type 39 has an invalid length. [ 158.733131][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.45'. [ 158.736793][ T6067] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 158.851749][ T6071] PM: Enabling pm_trace changes system date and time during resume. [ 158.851749][ T6071] PM: Correct system time has to be restored manually after resume. [ 158.930176][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 159.125995][ T6078] veth0_to_team: entered promiscuous mode [ 159.155996][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 159.156015][ T42] audit: type=1400 audit(1783439140.727:285): avc: denied { create } for pid=6074 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.171295][ T42] audit: type=1400 audit(1783439140.727:286): avc: denied { getopt } for pid=6074 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.534819][ T6084] overlayfs: failed to resolve './file2': -2 [ 159.603754][ T42] audit: type=1400 audit(1783439141.197:287): avc: denied { append } for pid=6087 comm="syz.0.52" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.605072][ T6088] kernel read not supported for file /sg0 (pid: 6088 comm: syz.0.52) [ 159.612745][ T45] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 159.633567][ T42] audit: type=1400 audit(1783439141.197:288): avc: denied { map } for pid=6087 comm="syz.0.52" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.681948][ T42] audit: type=1400 audit(1783439141.197:289): avc: denied { execute } for pid=6087 comm="syz.0.52" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 159.705896][ T42] audit: type=1400 audit(1783439141.197:290): avc: denied { read write } for pid=6083 comm="syz.1.51" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.732738][ T42] audit: type=1400 audit(1783439141.197:291): avc: denied { open } for pid=6083 comm="syz.1.51" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 159.794880][ T45] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 159.801197][ T45] usb 8-1: config 0 has no interface number 0 [ 159.804853][ T45] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.809372][ T45] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 159.816758][ T45] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 159.821732][ T45] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 159.828512][ T45] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 159.838311][ T5762] cgroup: fork rejected by pids controller in /syz2 [ 159.838734][ T45] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.846661][ T42] audit: type=1400 audit(1783439141.317:292): avc: denied { map } for pid=6089 comm="syz.0.53" path="/dev/nmem0" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.853100][ T45] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 159.886605][ T42] audit: type=1400 audit(1783439141.317:293): avc: denied { mmap_zero } for pid=6089 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 159.918701][ T45] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.922495][ T45] usb 8-1: config 0 descriptor?? [ 159.932106][ T6082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.938414][ T6082] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.972371][ T45] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 160.172983][ T6082] ======================================================= [ 160.172983][ T6082] WARNING: The mand mount option has been deprecated and [ 160.172983][ T6082] and is ignored by this kernel. Remove the mand [ 160.172983][ T6082] option from the mount to silence this warning. [ 160.172983][ T6082] ======================================================= qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 160.246681][ T6097] 9pnet_virtio: no channels available for device syz [ 160.268577][ T6098] ldusb 8-1:0.55: Write buffer overflow, 64894 bytes dropped [ 160.355543][ T5873] usb 8-1: USB disconnect, device number 2 [ 160.361931][ T5873] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 160.731392][ T42] audit: type=1400 audit(1783439142.317:294): avc: denied { shutdown } for pid=6104 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 160.980162][ T5834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.277768][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.312217][ T5768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.336368][ T5768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.350928][ T5834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.452025][ T5768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.491835][ T5768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.789892][ T5834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.837612][ T6122] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 161.930893][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 162.071308][ T5834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.447475][ T6132] Zero length message leads to an empty skb [ 163.013922][ T6111] lo speed is unknown, defaulting to 1000 [ 163.204608][ T5834] bridge_slave_1: left allmulticast mode [ 163.207501][ T5834] bridge_slave_1: left promiscuous mode [ 163.223085][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.368739][ T5834] bridge_slave_0: left allmulticast mode [ 163.383287][ T5834] bridge_slave_0: left promiscuous mode [ 163.391534][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.529905][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 163.571850][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 163.634688][ T5768] Bluetooth: hci1: command tx timeout [ 163.712929][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 163.720304][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 163.722397][ T6160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6160 comm=syz.1.69 [ 163.725221][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.731420][ T6160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=6160 comm=syz.1.69 [ 163.768657][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 163.772530][ T9] pvrusb2: ********** [ 163.785781][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 163.806614][ T9] pvrusb2: Important functionality might not be entirely working. [ 163.814749][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 163.820721][ T9] pvrusb2: ********** [ 163.968880][ T2523] pvrusb2: Invalid write control endpoint [ 164.069162][ T5834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.184441][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 164.188978][ T2523] pvrusb2: Invalid write control endpoint [ 164.241168][ T2523] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 164.251210][ T2523] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 164.251763][ T5834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.280117][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.67'. [ 164.288330][ T2523] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 164.299294][ T2523] pvrusb2: Device being rendered inoperable [ 164.310604][ T2523] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 164.321764][ T2523] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 164.327017][ T9] usb 8-1: USB disconnect, device number 3 [ 164.352240][ T2523] pvrusb2: Attached sub-driver cx25840 [ 164.360921][ T2523] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 164.386548][ T2523] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 164.388016][ T5834] bond0 (unregistering): Released all slaves [ 164.519799][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2 [ 164.646253][ T6162] hsr0 speed is unknown, defaulting to 1000 [ 164.657112][ T6162] hsr0 speed is unknown, defaulting to 1000 [ 164.726667][ T6162] hsr0 speed is unknown, defaulting to 1000 [ 164.729884][ T6162] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 164.740710][ T6162] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 164.761444][ T6162] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 164.816682][ T6162] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.889902][ T6162] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 165.016096][ T6162] hsr0 speed is unknown, defaulting to 1000 [ 165.069258][ T6162] hsr0 speed is unknown, defaulting to 1000 [ 165.081163][ T6162] hsr0 speed is unknown, defaulting to 1000 [ 165.268595][ T6176] input: syz0 as /devices/virtual/input/input7 [ 165.341740][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 165.341760][ T42] audit: type=1400 audit(1783439146.907:318): avc: denied { write } for pid=6171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.526501][ T42] audit: type=1400 audit(1783439147.117:319): avc: denied { write } for pid=6180 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.722377][ T6162] hsr0 speed is unknown, defaulting to 1000 [ 165.735684][ T5768] Bluetooth: hci1: command tx timeout [ 165.774772][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3 [ 165.929409][ T42] audit: type=1400 audit(1783439147.487:320): avc: denied { write } for pid=6184 comm="syz.0.72" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 165.955215][ T6186] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 165.960237][ T42] audit: type=1400 audit(1783439147.527:321): avc: denied { open } for pid=6184 comm="syz.0.72" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 165.988444][ T42] audit: type=1400 audit(1783439147.577:322): avc: denied { bind } for pid=6182 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.212020][ T42] audit: type=1400 audit(1783439147.797:323): avc: denied { read append } for pid=6194 comm="syz.0.73" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.242963][ T42] audit: type=1400 audit(1783439147.797:324): avc: denied { open } for pid=6194 comm="syz.0.73" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.312984][ T6162] hsr0 speed is unknown, defaulting to 1000 [ 166.325551][ T42] audit: type=1400 audit(1783439147.907:325): avc: denied { map } for pid=6194 comm="syz.0.73" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.371227][ T42] audit: type=1400 audit(1783439147.907:326): avc: denied { write execute } for pid=6194 comm="syz.0.73" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.395361][ T42] audit: type=1400 audit(1783439147.907:327): avc: denied { write } for pid=6193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.919946][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.928510][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.942090][ T6111] bridge_slave_0: entered allmulticast mode [ 166.947600][ T6111] bridge_slave_0: entered promiscuous mode [ 166.969058][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4 [ 166.972215][ T5873] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 167.010932][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.017417][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.044811][ T6111] bridge_slave_1: entered allmulticast mode [ 167.060109][ T6220] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 167.108880][ T6111] bridge_slave_1: entered promiscuous mode [ 167.219944][ T6229] capability: warning: `syz.1.81' uses deprecated v2 capabilities in a way that may be insecure [ 167.426564][ T6233] netlink: 'syz.0.82': attribute type 1 has an invalid length. [ 167.639069][ T6111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.704143][ T6233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.800276][ T5768] Bluetooth: hci1: command tx timeout [ 167.895693][ T6230] bond0: (slave geneve2): making interface the new active one [ 167.954890][ T6230] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 168.071189][ T5834] hsr_slave_0: left promiscuous mode [ 168.149575][ T5834] hsr_slave_1: left promiscuous mode [ 168.153234][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.189495][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.297138][ T5834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.307593][ T5834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.317644][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 168.390266][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 168.391731][ T5834] veth1_macvtap: left promiscuous mode [ 168.423596][ T6259] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 168.435153][ T5834] veth0_macvtap: left promiscuous mode [ 168.439655][ T5834] veth1_vlan: left promiscuous mode [ 168.488161][ T5834] veth0_vlan: left promiscuous mode [ 168.724020][ T6237] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 169.118504][ T5834] team0 (unregistering): Port device team_slave_1 removed [ 169.141232][ T5834] team0 (unregistering): Port device team_slave_0 removed [ 169.286245][ T6111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.511011][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5 [ 169.623135][ T6111] team0: Port device team_slave_0 added [ 169.670562][ T6111] team0: Port device team_slave_1 added [ 169.722743][ T5768] Bluetooth: hci2: command 0x0401 tx timeout [ 169.804524][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.812996][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.874905][ T5768] Bluetooth: hci3: unexpected subevent 0x19 length: 24 < 28 [ 169.884370][ T5768] Bluetooth: hci1: command tx timeout [ 169.898845][ T6111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.938475][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.948211][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.962370][ T6111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.077905][ T6111] hsr_slave_0: entered promiscuous mode [ 170.082149][ T6111] hsr_slave_1: entered promiscuous mode [ 170.103773][ T6111] debugfs: 'hsr0' already exists in 'hsr' [ 170.109992][ T6111] Cannot create hsr debugfs directory [ 170.286566][ T6281] netlink: 64 bytes leftover after parsing attributes in process `syz.1.91'. [ 170.291988][ T6281] tipc: Invalid UDP bearer configuration [ 170.292058][ T6281] tipc: Enabling of bearer rejected, failed to enable media [ 170.469684][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 170.469709][ T42] audit: type=1400 audit(1783439152.047:353): avc: denied { checkpoint_restore } for pid=6283 comm="syz.0.92" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.533793][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 171.537808][ T42] audit: type=1400 audit(1783439153.127:354): avc: denied { create } for pid=6304 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 171.671081][ T6305] team1: entered promiscuous mode [ 171.702974][ T6305] team1: entered allmulticast mode [ 171.706413][ T6305] 8021q: adding VLAN 0 to HW filter on device team1 [ 171.794053][ T42] audit: type=1400 audit(1783439153.337:355): avc: denied { create } for pid=6310 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.803859][ T42] audit: type=1400 audit(1783439153.337:356): avc: denied { write } for pid=6310 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.853511][ T42] audit: type=1400 audit(1783439153.337:357): avc: denied { nlmsg_write } for pid=6310 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.889933][ T42] audit: type=1400 audit(1783439153.477:358): avc: denied { write } for pid=6312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.100014][ T42] audit: type=1400 audit(1783439153.667:359): avc: denied { write } for pid=6321 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.351023][ T42] audit: type=1400 audit(1783439153.927:360): avc: denied { write } for pid=6328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.484094][ T42] audit: type=1400 audit(1783439154.057:361): avc: denied { listen } for pid=6333 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.510006][ T42] audit: type=1400 audit(1783439154.087:362): avc: denied { shutdown } for pid=6333 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.638696][ T6340] vxcan0: tx address claim with dlc 0 [ 172.715885][ T6340] vxcan0: tx address claim with dlc 0 [ 174.040824][ T6111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.124602][ T6111] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.160394][ T6111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.280648][ T6111] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.306533][ T6111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.342046][ T6111] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.366633][ T6111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.459180][ T6111] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.668761][ T6385] overlayfs: failed to clone lowerpath [ 175.055201][ T6111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.136297][ T6111] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.176955][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.183280][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.218990][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.224271][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.359577][ T6412] netlink: 56 bytes leftover after parsing attributes in process `syz.0.113'. [ 175.387079][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.435506][ T6410] bridge_slave_0 (unregistering): left allmulticast mode [ 175.443311][ T6410] bridge_slave_0 (unregistering): left promiscuous mode [ 175.457146][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.675711][ T6111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.737840][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 175.737861][ T42] audit: type=1400 audit(1783439157.327:388): avc: denied { ioctl } for pid=6417 comm="syz.0.114" path="socket:[11652]" dev="sockfs" ino=11652 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.844206][ T42] audit: type=1400 audit(1783439157.437:389): avc: denied { write } for pid=6416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.246535][ T6434] binder: 6431:6434 ioctl c018937c 200000000200 returned -22 [ 176.261738][ T42] audit: type=1400 audit(1783439157.857:390): avc: denied { call } for pid=6431 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 176.286973][ T6437] netlink: 'syz.1.115': attribute type 11 has an invalid length. [ 176.418900][ T42] audit: type=1400 audit(1783439157.997:391): avc: denied { write } for pid=6432 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.750912][ T42] audit: type=1400 audit(1783439158.337:392): avc: denied { write } for pid=6444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.831560][ T42] audit: type=1400 audit(1783439158.407:393): avc: denied { unmount } for pid=5770 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 176.928356][ T6111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.096427][ T6111] veth0_vlan: entered promiscuous mode [ 177.130567][ T6111] veth1_vlan: entered promiscuous mode [ 177.159870][ T42] audit: type=1400 audit(1783439158.737:394): avc: denied { write } for pid=6453 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.221184][ T6111] veth0_macvtap: entered promiscuous mode [ 177.488871][ T6111] veth1_macvtap: entered promiscuous mode [ 177.578866][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.613439][ T6111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.708907][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.712854][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.722249][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.809836][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.865414][ T42] audit: type=1400 audit(1783439159.437:395): avc: denied { write } for pid=6455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.095780][ T42] audit: type=1400 audit(1783439159.687:396): avc: denied { write } for pid=6458 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.271670][ T6408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.458611][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.513592][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.561076][ T6462] ------------[ cut here ]------------ [ 178.580646][ T6462] 1 [ 178.580664][ T6462] WARNING: mm/page_alloc.c:5280 at __alloc_frozen_pages_noprof+0x2427/0x2dc0, CPU#1: syz.0.119/6462 [ 178.587812][ T6462] Modules linked in: [ 178.591846][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.0.119 Not tainted syzkaller #0 PREEMPT(full) [ 178.596186][ T6462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.621647][ T6462] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 178.626410][ T6462] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 64 e1 8b e8 3b ad 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 bc 85 9d 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 80 9b d3 8e 45 89 f7 44 8b 74 24 [ 178.639116][ T6462] RSP: 0018:ffffc900060e76f8 EFLAGS: 00010246 [ 178.670751][ T6462] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 178.674293][ T6462] RDX: 0000000000000000 RSI: 1ffff92000c1cef9 RDI: 0000000000040cc0 [ 178.681547][ T6462] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 178.685004][ T6462] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 178.688315][ T6462] R13: 1ffff92000c1cf37 R14: ffffffff9b74e444 R15: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 178.713956][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.718868][ T6462] FS: 00007fd64a24e6c0(0000) GS:ffff8880d5eec000(0000) knlGS:0000000000000000 [ 178.777622][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.789003][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 178.789084][ T6462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.800959][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 178.809457][ T6462] CR2: 000000110c2c5a3f CR3: 00000000298d3000 CR4: 0000000000352ef0 [ 178.821856][ T6462] Call Trace: [ 178.825683][ T6462] [ 178.830078][ T6462] ? find_held_lock+0x2b/0x80 [ 178.833746][ T6462] ? is_bpf_text_address+0x8a/0x1a0 [ 178.843485][ T6462] ? is_bpf_text_address+0x8a/0x1a0 [ 178.846627][ T6462] ? bpf_ksym_find+0x128/0x1c0 [ 178.850016][ T6462] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 178.864656][ T6462] ? is_bpf_text_address+0x94/0x1a0 [ 178.868021][ T6462] ? kernel_text_address+0x8d/0x100 [ 178.871636][ T6462] ? __pfx_widen_string+0x10/0x10 [ 178.875299][ T6462] ? __kernel_text_address+0xd/0x30 [ 178.883640][ T6462] ? unwind_get_return_address+0x59/0xa0 [ 178.886968][ T6462] ? arch_stack_walk+0xa6/0xf0 [ 178.890132][ T6462] ? tomoyo_path_number_perm+0x46d/0x580 [ 178.914211][ T6462] ? stack_trace_save+0x8e/0xc0 [ 178.917220][ T6462] ? __pfx_stack_trace_save+0x10/0x10 [ 178.919384][ T6462] ? stack_depot_save_flags+0x27/0x9d0 [ 178.932163][ T6462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 178.935021][ T6462] ? policy_nodemask+0xed/0x4f0 [ 178.937334][ T6462] alloc_pages_mpol+0x1fb/0x540 [ 178.939997][ T6462] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 178.963222][ T6462] ___kmalloc_large_node+0xe5/0x120 [ 178.966596][ T6462] __kmalloc_large_node_noprof+0x1c/0x70 [ 178.986428][ T6462] __kmalloc_noprof+0x5a1/0x820 [ 178.990675][ T6462] ? avc_has_extended_perms+0x484/0x1080 [ 178.996923][ T6462] ? drm_syncobj_array_find+0x34/0x3a0 [ 179.004230][ T6462] drm_syncobj_array_find+0x34/0x3a0 [ 179.013321][ T6462] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 179.021834][ T6462] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 179.025817][ T6462] ? drm_dev_exit+0x41/0x60 [ 179.027122][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 179.033214][ T6462] ? drm_dev_exit+0x41/0x60 [ 179.033256][ T6462] drm_ioctl_kernel+0x1f3/0x3e0 [ 179.033273][ T6462] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 179.033295][ T6462] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 179.033330][ T6462] drm_ioctl+0x5e6/0xc60 [ 179.033349][ T6462] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 179.033370][ T6462] ? __pfx_drm_ioctl+0x10/0x10 [ 179.033393][ T6462] ? selinux_file_ioctl+0x13b/0x290 [ 179.033462][ T6462] ? selinux_file_ioctl+0xb6/0x290 [ 179.033486][ T6462] ? __pfx_drm_ioctl+0x10/0x10 [ 179.033503][ T6462] __x64_sys_ioctl+0x18e/0x210 [ 179.033530][ T6462] do_syscall_64+0x115/0x870 [ 179.033555][ T6462] ? clear_bhb_loop+0x40/0x90 [ 179.033577][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.033597][ T6462] RIP: 0033:0x7fd64939de59 [ 179.033615][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.033640][ T6462] RSP: 002b:00007fd64a24e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.033660][ T6462] RAX: ffffffffffffffda RBX: 00007fd649625fa0 RCX: 00007fd64939de59 [ 179.033671][ T6462] RDX: 0000200000000000 RSI: 00000000c01864cd RDI: 0000000000000005 [ 179.033681][ T6462] RBP: 00007fd649433e6f R08: 0000000000000000 R09: 0000000000000000 [ 179.033692][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.033702][ T6462] R13: 00007fd649626038 R14: 00007fd649625fa0 R15: 00007ffd001945a8 [ 179.033724][ T6462] [ 179.033736][ T6462] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.033750][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.0.119 Not tainted syzkaller #0 PREEMPT(full) [ 179.033770][ T6462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 179.033781][ T6462] Call Trace: [ 179.033789][ T6462] [ 179.033796][ T6462] dump_stack_lvl+0x100/0x190 [ 179.033818][ T6462] vpanic+0x552/0x970 [ 179.033834][ T6462] ? __pfx_vpanic+0x10/0x10 [ 179.033856][ T6462] panic+0xd1/0xe0 [ 179.033871][ T6462] ? __pfx_panic+0x10/0x10 [ 179.033899][ T6462] check_panic_on_warn.cold+0x19/0x34 [ 179.033919][ T6462] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 179.033947][ T6462] __warn.cold+0x191/0x318 [ 179.033966][ T6462] __report_bug+0x30f/0x440 [ 179.033990][ T6462] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 179.034019][ T6462] ? __pfx___report_bug+0x10/0x10 [ 179.034042][ T6462] ? arch_stack_walk+0xa6/0xf0 [ 179.034073][ T6462] ? __lock_acquire+0x49f/0x1a40 [ 179.034099][ T6462] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 179.034126][ T6462] report_bug+0xb2/0x220 [ 179.034151][ T6462] ? __alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 179.034178][ T6462] handle_bug+0x16a/0x2a0 [ 179.034206][ T6462] exc_invalid_op+0x17/0x50 [ 179.034223][ T6462] asm_exc_invalid_op+0x1a/0x20 [ 179.034240][ T6462] RIP: 0010:__alloc_frozen_pages_noprof+0x2427/0x2dc0 [ 179.034269][ T6462] Code: e9 8d fb ff ff 31 d2 be 28 12 00 00 48 c7 c7 a0 64 e1 8b e8 3b ad 68 ff 2e 2e 2e 31 c0 e9 02 ed ff ff c6 05 bc 85 9d 0e 01 90 <0f> 0b 90 e9 6f df ff ff 48 c7 c7 80 9b d3 8e 45 89 f7 44 8b 74 24 [ 179.034284][ T6462] RSP: 0018:ffffc900060e76f8 EFLAGS: 00010246 [ 179.034300][ T6462] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 179.034311][ T6462] RDX: 0000000000000000 RSI: 1ffff92000c1cef9 RDI: 0000000000040cc0 [ 179.034323][ T6462] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 179.034333][ T6462] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 179.034344][ T6462] R13: 1ffff92000c1cf37 R14: ffffffff9b74e444 R15: 0000000000000001 [ 179.034374][ T6462] ? find_held_lock+0x2b/0x80 [ 179.034399][ T6462] ? is_bpf_text_address+0x8a/0x1a0 [ 179.034420][ T6462] ? is_bpf_text_address+0x8a/0x1a0 [ 179.034441][ T6462] ? bpf_ksym_find+0x128/0x1c0 [ 179.034464][ T6462] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.034490][ T6462] ? is_bpf_text_address+0x94/0x1a0 [ 179.034509][ T6462] ? kernel_text_address+0x8d/0x100 [ 179.034525][ T6462] ? __pfx_widen_string+0x10/0x10 [ 179.034543][ T6462] ? __kernel_text_address+0xd/0x30 [ 179.034559][ T6462] ? unwind_get_return_address+0x59/0xa0 [ 179.034584][ T6462] ? arch_stack_walk+0xa6/0xf0 [ 179.034612][ T6462] ? tomoyo_path_number_perm+0x46d/0x580 [ 179.034642][ T6462] ? stack_trace_save+0x8e/0xc0 [ 179.034671][ T6462] ? __pfx_stack_trace_save+0x10/0x10 [ 179.034699][ T6462] ? stack_depot_save_flags+0x27/0x9d0 [ 179.034720][ T6462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.034742][ T6462] ? policy_nodemask+0xed/0x4f0 [ 179.034767][ T6462] alloc_pages_mpol+0x1fb/0x540 [ 179.034792][ T6462] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 179.034822][ T6462] ___kmalloc_large_node+0xe5/0x120 [ 179.034848][ T6462] __kmalloc_large_node_noprof+0x1c/0x70 [ 179.034874][ T6462] __kmalloc_noprof+0x5a1/0x820 [ 179.034892][ T6462] ? avc_has_extended_perms+0x484/0x1080 [ 179.034911][ T6462] ? drm_syncobj_array_find+0x34/0x3a0 [ 179.034946][ T6462] drm_syncobj_array_find+0x34/0x3a0 [ 179.034980][ T6462] drm_syncobj_timeline_signal_ioctl+0x22a/0x8d0 [ 179.035009][ T6462] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 179.035030][ T6462] ? drm_dev_exit+0x41/0x60 [ 179.035048][ T6462] ? drm_dev_exit+0x41/0x60 [ 179.035070][ T6462] drm_ioctl_kernel+0x1f3/0x3e0 [ 179.035088][ T6462] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 179.035111][ T6462] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 179.035146][ T6462] drm_ioctl+0x5e6/0xc60 [ 179.035166][ T6462] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 179.035188][ T6462] ? __pfx_drm_ioctl+0x10/0x10 [ 179.035213][ T6462] ? selinux_file_ioctl+0x13b/0x290 [ 179.035237][ T6462] ? selinux_file_ioctl+0xb6/0x290 [ 179.035261][ T6462] ? __pfx_drm_ioctl+0x10/0x10 [ 179.035280][ T6462] __x64_sys_ioctl+0x18e/0x210 [ 179.035307][ T6462] do_syscall_64+0x115/0x870 [ 179.035332][ T6462] ? clear_bhb_loop+0x40/0x90 [ 179.035355][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.035374][ T6462] RIP: 0033:0x7fd64939de59 [ 179.035391][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.035409][ T6462] RSP: 002b:00007fd64a24e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.035427][ T6462] RAX: ffffffffffffffda RBX: 00007fd649625fa0 RCX: 00007fd64939de59 [ 179.035440][ T6462] RDX: 0000200000000000 RSI: 00000000c01864cd RDI: 0000000000000005 [ 179.035450][ T6462] RBP: 00007fd649433e6f R08: 0000000000000000 R09: 0000000000000000 [ 179.035461][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.035472][ T6462] R13: 00007fd649626038 R14: 00007fd649625fa0 R15: 00007ffd001945a8 [ 179.035496][ T6462] [ 179.041967][ T6462] Kernel Offset: disabled