last executing test programs: 2m9.183930044s ago: executing program 3 (id=592): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x3, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) close(r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000003780), 0x4) 2m9.041453592s ago: executing program 3 (id=593): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000040)={0x1}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700000008000a40000000000900020073797a31000000009891d8e749838f2600000000080005400000df040800098004000280140008b11000010000000000000000800084000a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='xfs\x00', 0x200013, 0x0) 2m8.847453081s ago: executing program 3 (id=597): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) close(r1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x800000) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r7, 0xc0385720, &(0x7f0000000080)={0x1}) fstatfs(0xffffffffffffffff, &(0x7f0000000200)=""/123) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TCFLSH(r9, 0x400455c8, 0x4) ioctl$TCFLSH(r9, 0x800455c9, 0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448dd, &(0x7f0000000040)) syz_usb_connect(0x3, 0x8d, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)={0x2}) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e9d, @private=0xa010100}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000000000000000008004500002000000020000c2218213d0000"], 0x0) close(r6) 2m5.754282415s ago: executing program 3 (id=605): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b58f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f210c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adf2f4bffaa10a377f66011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x0, 0x10001, 0x10000, 0x0, 0x3, {0x0, 0x0, 0x400000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x800, 0xffffff3c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26b66926}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r5, 0xc01070ce, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e9002cbd7500000000000600000008000300", @ANYRES32=r6, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x9e3a, 0x10100, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000340)={{r1}, r7, 0x1c, @unused=[0x1, 0x7, 0x6, 0x3], @devid}) r9 = syz_open_dev$rtc(&(0x7f0000000040), 0x1, 0x4002) pipe2(&(0x7f0000001380)={0xffffffffffffffff}, 0xcc0) write$P9_RSETATTR(r10, &(0x7f00000013c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$RTC_VL_READ(r9, 0x80047013, &(0x7f0000001340)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m5.592922544s ago: executing program 3 (id=610): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2e, 0x611000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x51, 0x1, 0x1003, {0xfffd, 0x1}, {0x4c, 0x8002}, @const={0x0, {0xcf, 0x9, 0x6d, 0x7}}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='romfs\x00', 0x321004d, 0x0) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sendfile(r2, r3, 0x0, 0x8000fb00) 2m5.29431069s ago: executing program 0 (id=614): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) munmap(&(0x7f0000bb3000/0x2000)=nil, 0x2000) (async) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) (async) r0 = socket(0x1, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000001}) (async) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r0, 0x0) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x13, r5, 0x2000) (async) r6 = dup(r3) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="0500"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r7) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x23, 0x400200) (async) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m5.214136757s ago: executing program 0 (id=615): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="997426bd7000fbdbdf25150000000bd4bd880d0001007564703a73797a3000000000380004001400010002004e237f0000010000000000000000200002000a004e2380000000ff02000000000000000000000000000102000000"], 0x60}, 0x1, 0x0, 0x0, 0x9080}, 0xc090) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd7000f8dbdf2507000000100004800900010073797a3100000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x6c8937268f7bb4af) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000580)={0x0, 0x3, 0x461}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f00000000c0)=@ethtool_stats}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'pim6reg0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x144, 0x1, 0x0, 0x2, 0x0, 0x2}) openat(r0, &(0x7f0000000040)='./file3\x00', 0x4000, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000000)={@any, 0x3}) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000002c0)='./file3/file0\x00', &(0x7f0000000200)='btrfs\x00', 0x0, &(0x7f0000000380)='acy') 2m5.213055449s ago: executing program 0 (id=616): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x220200, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000100)={0xb0, &(0x7f0000000040)="8eab696e83e826265526a85cd79b04af64e552647a2cad11a9d1e347ab1db26d2788a5159e761c652e639883fbbf0319479d521d038c6e6279c02deff82c7e42cc359e1048b534f077094f2cfe0417760f610891c195c3cc4f210756fbc2fc5ba933e3cd696b51949b7fae8e9bc1c238a1b15d1b80bb907e1e57dc4ff4614324f0bd46be74c3dba94a7da5bd7592e88abcc5fc9d127c37cdc984a22c5ee790c508913761691f2eba0426be895ba5847e"}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000180)) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)={0x0, 0x0}) (rerun: 64) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000200)={r2, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={r3, 0x0, 0xffffffffffffffff}) (async) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x800, 0x200) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x44c000, 0x0) ioctl$TUNSETVNETBE(r6, 0x400454de, &(0x7f0000000300)=0x1) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x6, 0x5, 0x4}) (async) r11 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_BLANKSCREEN(r11, 0x541c, &(0x7f0000000480)) sync_file_range(r11, 0x4, 0x1, 0x1) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f00000004c0)={0x1, r7, 0xe8, 0x0, 0x3, 0x1, 0xbc32, 0x0, 0x8}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000006c0)={{r4, &(0x7f0000000500)='\'-&[/\x00', 0x240000, &(0x7f0000000540)={@align=0x8, {0x6, 0x3, 0x6, 0x6195}}, 0x6, &(0x7f0000000580), &(0x7f00000005c0)=0x6}, {[0x88, 0x17, 0x5, 0x8]}, 0x1000, 0xb8, &(0x7f0000000600)=""/184}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r12, 0x80286722, &(0x7f0000000780)={&(0x7f0000000740)=""/64, 0x40, 0x8, 0x91}) (async) fcntl$setstatus(r1, 0x4, 0x4000) fcntl$setsig(r0, 0xa, 0x6) (async) ioctl$TIOCSRS485(r12, 0x542f, &(0x7f00000007c0)={0x3, 0x9, 0x1000}) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) (async) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000000880)=0x0) sendmsg$AUDIT_SET(r14, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x3e9, 0x200, 0x70bd28, 0x25dfdbfc, {0x63, 0x0, 0x2, r15, 0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x81}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r13, 0xf504, 0x0) (async, rerun: 64) ioctl$SNDCTL_SEQ_OUTOFBAND(r12, 0x40085112, &(0x7f0000000980)=@generic={0x8}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000ac0)={&(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0], 0x1, r8}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000b40)={0x4, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r12, 0xc02064b9, &(0x7f0000000c00)={&(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, r9, 0xeeeeeeee}) (rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000d80)={0x200, 0x1, &(0x7f00000009c0)=[r10], &(0x7f0000000a00)=[0xd5a, 0x1000], &(0x7f0000000d00)=[r16, r17, r18, 0x0], &(0x7f0000000d40)=[0x5, 0x7, 0x2, 0xf66], 0x0, 0x401}) 2m5.148205357s ago: executing program 0 (id=617): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000001b80)={0xd, @capture={0x1000, 0x1, {0x3, 0x6}, 0x8000000, 0x6}}) (async) sendmmsg$inet6(r2, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x100, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="9fe579b21df5d0534add0a0c99cde2d9935f1ebc9b0fc79d799b2631882d7d72924b05cd1e63f59e6f68fdd35abc49f73cb5c20bd8f2baa618c2b51392f2955229aae034e3f0c766acf8b9d1f999cbb7c3d26f1b8ea96056d27896392fd5448d56d8030631f747ba403851665c514310a7c93e4ce2d270b784726d69f933fba6aa2fd06aef33ccbf5ef1c73e0c50a17d5377ca47a8f96134545309dacf28ab315060e453f2a2aeaddc38b67c5b16eb60f4a0cd17ba2bb453c1ced3eb0a092df8649e455391c8664674e933ccee91c77f9de7659fe087446df8177cf40ec7d4d429b9fbe1f57e52fe84161af960", 0xed}, {&(0x7f0000000080)="733967978117c556026c4a3c379ed699b460b483862669da7e79d1ed5da4b8b8792eff9e0ef15c3ee32c4647cf249580dc4fb8cdf537", 0x36}, {&(0x7f0000000100)="fea4a81df20d4ca7f50cc20cf31093adc0a167b64fc2cac3da8c862c8b29901ca8961e9ad0971c", 0x27}, {&(0x7f0000000300)="00c7c1e0016b91b57fa0c7b028e8ee074d4dc0d94199a7fd77ea0ea6b451ed6a12f80cf8a2c98c7729d9401e52e3fecbb909d0d13db64cd653ca7012af1da48f8654832392d77e47f8eeff81725888bbe822fac377dc98bafca2f0596c34f449eace6f49ad676915bbc9b17eea4aa5be78a2afad10a3c24abfeedda7caafb74fe1575be5e997451bcf0b412a8d8962e3e946f5359179e38cfee5f661bef56f5046d01b40", 0xa4}, {&(0x7f00000003c0)="9e202c621026065355af603672b8a56387e4efd82b90e99b2c64a9919cfcd6fb90ad430ed09b09a7ce066f406e2bbfc867c4882204aa708004dc501f091ff778c353ee70b8691f3939251c7f0c7ffa20b122cfb24997268cf93c25f509b2d2c0adc0b4b0be36012901c1f697142bde769d4e4c82a1448706aaa35d155e53dcbfd885a5688138ff56bb8876edab680ac660d1e523385b07a509a4acc377ea006c5f684660c33c5afdd872771beacf8a91504192b9b64445c8a44a92825095f073d2ead1e67daf4538fb7ae115298ae5b8d0720c0dc225b488f2a14b", 0xdb}, {&(0x7f0000000140)="82112c43f3e98351f97f213f14231a43da5e832720acbe7e0554aa8be2a82989e482be5c269127b21edac343e97fc91c3340", 0x32}, {&(0x7f00000004c0)="18c204c6d36b0fda148a3387794f91ee1cd0902e2eeebe2d10d710e509c77e3f0a8e6d836f47af8db4ae67423cbd758c5df62e646c61fa", 0x37}, {&(0x7f0000000500)="8e36127223cbeba62ba386d0ba3de1d50feb445ce9c0a64bfdf7da107f", 0x1d}], 0x8}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000640)="8168f677b2b4282e0c19c77c87815828ac2e1621a8edfb36942b352fd5539393978af939dd7c738bfffe9f33571c56604010f00943e19f324c16f20a6cc3e93cedebbcf8789bce9daf4bf387dab8f2175ce2", 0x52}, {&(0x7f00000006c0)="5fa5237f41fb711d501e7e5865f7b30598a0f5880675c338b5f2c222577127a11e1706c03dcc86a61f06", 0x2a}, {&(0x7f0000000700)="614c80fe5ca667c491b2322d308648fb21acb5030daa854c0dbe88252ef6d1393d6e95e680477e0f451912f96f5601d9d2c0699818d066588ea5c245274bcf3ba36bee1bec9eb5b332169b9da66ad4329e86db11ac7ef83531f1b0997b7373294bc1eb363499233fba11ff8ba684bc51f119340873e034063750217e96c0", 0x7e}, {&(0x7f0000000780)="8f788d73fd981c24bfe44ac0fe15d456662f1cd3626832354788077b78d9cefdc86a3f13872fd0512b3987265440573faaf7147e9d8cc1f4374883fbccfe8f5d73aa8769a6dd", 0x46}, {&(0x7f0000000800)="68bfa0a9157390", 0x7}, {&(0x7f0000000840)="9a255838c1e13242c3b9772ec7ccea86674a2d23edbee907518adec1ab577641f39ecefb7d90ad0740831264ea2bdee563e0ab0bcf4ed63b0f7af3895048c9304395a1e1a6a7dbbd12e856bb072f6edab7959c26982026baa73f23142c26f2e7df0069be24693355d4ceda29f97f7fe79d6c7af23b36ce4b2aaa092c623593a039c661f99cb1dfb7d1e7c2cf6ab749e0d880e90710467be421f4c2041768927b656387e16ccae91070b04b3b90fca8a28b", 0xb1}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000000900)="b8b1a8f5152f782271521fa7983ddaebc632b62a0b87ff1648c99975c6058bc07ab84f2d2ea342479e134f23f0a204736cf13d8b2a07cc7eaf1f8cb3d64b81489cd2cafd20d95e339ad011f6bab6051702c14cb7c2d079eb87", 0x59}, {&(0x7f0000000980)="e1d3ff68013159747e6e4b8cc17bbbd6a6e669479d0f712b1c535386a3f9f3e71d825835", 0x24}, {&(0x7f0000002340)="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", 0x6fc}], 0xa}}], 0x4, 0x8008800) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000009c0)={0xb, @vbi={0x6dc00000, 0x7, 0x9, 0x41495043, [0x80, 0x9657], [0x9, 0x9], 0x108}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0108fefffffffddbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="0400280004000b000a0006000802111f0001000008000a"], 0x50}}, 0x0) 2m5.147144541s ago: executing program 3 (id=618): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x114, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcac1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 2m5.095863713s ago: executing program 32 (id=618): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x114, 0x20, 0x1, 0x3, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x8, 0xeb, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcac1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000480)=""/154, 0x9a, 0xe4) 2m5.05376686s ago: executing program 0 (id=620): r0 = socket(0x28, 0x5, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r2, 0x401) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) close(0x3) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000), 0x3) r6 = dup(r3) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r8, r9, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet6(0xa, 0x3, 0x2f) bind$inet6(r10, &(0x7f0000000280)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000440)=""/205, &(0x7f00000002c0)=0xcd) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000040)={0x3, @bcast, r8}) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) getsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x4) 2m5.053288688s ago: executing program 0 (id=621): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c) (async) read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text32={0x20, &(0x7f0000000940)="b9800000c00f3235000800000f300f35b9aa020000b8baea0000ba000000000f3004ddd8b805000000c1720a000f01c166ba4100b0daeec4c1e1f267eb670f01c2f2360f217a0f07", 0x48}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="02", 0x1) (async) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="02", 0x1) getsockopt$inet_opts(r5, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) 2m2.661746253s ago: executing program 4 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x4) listen(r0, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa001780c4", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16=r1], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) (async) mkdir(0x0, 0x10) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) listen(r0, 0x4) (async) listen(r0, 0x5) (async) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa001780c4", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES16=r1], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) (async) 2m2.584318932s ago: executing program 4 (id=636): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) r2 = syz_open_pts(r1, 0x40000) ioctl$TCGETS(r2, 0x8926, &(0x7f0000000180)) close(r0) 2m0.344160817s ago: executing program 4 (id=650): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x1, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) 2m0.305784066s ago: executing program 33 (id=650): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x1, 0x61, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x94) 1m50.015876923s ago: executing program 34 (id=621): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c) (async) read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text32={0x20, &(0x7f0000000940)="b9800000c00f3235000800000f300f35b9aa020000b8baea0000ba000000000f3004ddd8b805000000c1720a000f01c166ba4100b0daeec4c1e1f267eb670f01c2f2360f217a0f07", 0x48}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="02", 0x1) (async) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000240)="02", 0x1) getsockopt$inet_opts(r5, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) 1m12.134068825s ago: executing program 1 (id=1383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x9d000, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100010, r2, 0x62553000) 1m12.073550854s ago: executing program 1 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) close(r1) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) syz_genetlink_get_family_id$l2tp(&(0x7f0000001400), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x7, 0x30, 0x7, 0x8000000000000001}, &(0x7f0000000300)=0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)={r4, 0xf4, "5792d8fcef0b0e56d62a01f8f35415324c66a0b53e8848139f5a57db7cb1cfe1df0f8062a42ebd69e642514599270efc0f278c99783c0d25f2c860c022c2b4912eadbe2aba28289cb4a5a8959e21edf6cf51d4226deb48891b39af495c96c34d4e6d8801eeb0cd0e66506d3b7852befb38387c8119946356d1a863c563c0ee7c6edb414a74f5c167e817a2e890146bb4a5bfa2f59e2014e96e848115b45237bf5ecba68d4f6b534057ad0df6d92f48e7cdde419a96201191ab34c4a330040ca49bc70ddd18d171df1e4b9e9b69f3c03bdc1266fbc2d684ac527d24dac8c242cbcb4f75aeba65eb2eb19cf73c8018d43d64ac4ae5"}, &(0x7f0000000440)=0xfc) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x70, r3, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5d}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x47, 0xe, {{{0x0, 0x2}, {0x9}, @device_b, @device_a, @random="ec03f3b85ad3"}, 0xffffffffffffffa1, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2, 0x8343}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x70}, 0x1, 0x0, 0x0, 0x8810}, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) 1m12.002493852s ago: executing program 1 (id=1386): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9", 0xe, 0x8004, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x5, 0x2000000000001]}}) 1m11.871569219s ago: executing program 1 (id=1392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x6, 0x3, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x2, 0x6f, 0x8, 0x8, 0x4}, 0x10, &(0x7f0000000440)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x7f, 0x6, 0xfff8, 0x2}]}, 0x4, [{0x50, &(0x7f0000000480)=@string={0x50, 0x3, "1d8ada971c23eedd5b79752bc401c704955a169c99c977869772495ffabe9d0edb1caf85b0e66328874cff92a687421eb1e0dbec218f3182ac4cd203c1c0c6f59f3594af05f4a51a4918f1eb9bd0"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2009}}, {0xc7, &(0x7f0000000640)=@string={0xc7, 0x3, "eaf00ce4be433b1f86fa732e7de0c452e7857c44490f1542e1a2895aa46e51b6bc210bdbdbf8ed7228cb5fc1431678d20510b61c6e210468a09d2c60dd79ff5b9b64e1a782cd9fa4bb720cd3d45bc82799346e9f74a673ed47601f2081c92bae162bc4ee71e5404c04881f7fd38312e42e55857ad9966b8b60cf23963f84640b3d1c9b956d004986c961fd388b00c8f54d946ca2dbc7e44387d6028284212b625a7ade2a7175fa1f951d4b6690f5fb1bf2cb77dfe7aa4a7f0e90b75ad4a560babb5b386f5d"}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000880)={0x14, &(0x7f00000007c0)={0x20, 0x9, 0xae, {0xae, 0x1, "435f121c18603eb280a7e56f8fc4370612321574b8f72f1ea3ab64f360db4ff2a86e75c75bbb5cb385ee0a9529e3597562c29c4d10de757f04d00e995a9fc468087a819f665bfc9a7089ee894aae26416e5ea452fdaf150e22ed42e8a097755e6e141cf6ed28700d502406da1013d22acf9d4366a1ca77c1df777e2ee202ba3934fae11ba1e5c7f29ec7a81a3c90b4ce1296609a1dc73159c111b40315b8242d2f5087618624adfbb42aa03f"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f0000000b80)={0x34, &(0x7f00000008c0)={0x0, 0x5, 0xa0, "345293aa3183fb4081842e379781829db3faf5032cdb77b1f444700dd484b1ef56b25fad2352b75561f62f63cd7aa3a4158bbe91f0975db0fc185e5e97cc064a2da3f80bbf43ff6dfaa11a1ebada1401f2f8be67ae78953638aa3656043a803bff8d65edb060b107e25a57207a10eab6e70fcb5c5322d531887886b60e2a84faf50e2c3922e48328d57ac36e1d75764f4a18efddaa27b35a8e40f7cc0d3a2a89"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x0, 0xbf, {0xbd, "246363ba3740051a5ba820a26f2fbfd4b1ec0b0768d9f2a2b1abcf8362ec253edac02e6d0f9882a919da2443ec644ba6f7afb51fba3e8c18e815e21d90de0ea59755fbb049a49c9d8000c4e0bdaee7dfe3419c5aca1325fd75c2a79d7d8b3abd05f0c49f7e06dfc4681ab89dd60b27f68afb5a1423aea4a3600b7035fc4669f13b5a3a7f2cf7d6ca398f4cb5dea6100e2f755ae127301bc2bb3a34f9f304cc4fd1f704f5444a44c863483586c096a2f94479cfc0ea3399c19993251480"}}, &(0x7f0000000b00)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000000b40)={0x20, 0x0, 0x1, 0x2}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x37, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000000021100000008021100000000000000314df1690154db8d01000006020202020202010182"], 0x2f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003cddcb00000000000200000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x35, 0x301, 0x70bd29, 0xfffffffc, {0x6}}, 0x14}}, 0x0) 1m10.373787188s ago: executing program 1 (id=1398): sigaltstack(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000d0429be7000fcdbdf25f300f385", @ANYRES32=0x0, @ANYBLOB="1000000000000000200012800b000100627269646765"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r2, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x5422) shutdown(r1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @empty, 0x2}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0xfc}], 0x1, 0x100, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000240)={0x9}, 0x4) 1m10.373522938s ago: executing program 1 (id=1399): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x6) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) 54.829441349s ago: executing program 35 (id=1399): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x6) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) 10.782302242s ago: executing program 2 (id=2155): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@gettaction={0x48, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x3ffd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYRES32=0xffffffffffffffff], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec19967fa37d0f3afef4f2186fedc79d72202c698d5571e9286caa8a459ff62c9b803da7c83b2253ffae27d7ecb690b18071e48205dc6d9890a071345d3bc0c9445680e2cf08f2884b8bf60c4c4e0733adab59f2c32335128ca5a1d36d96eccbbe24ffee5a6ef929cc45c01a0bcc2c010aea5c5a4ab9936f7eec471d6125ae02e51b59e0e3ddb72b4a7da4558c58c3188248d480f47ad9a989668fc452d0435b1ca38b3a46d8ec427b26e53b23354b8f92219e07a4483b4179", @ANYBLOB="77c929635d9b61d46a8276a290ac46126c5cab5aec72918e22f198c1929f98", @ANYRES32=r1, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="bc6d87012eaee3a7549da31e8a5256722f2908b5dba265fb986b5ca501db634c40338257042c11495a9844ab925842068a7cb9c937aa7388de35f2330597a1615b7d7381be6b5b5585378ee65fffbab63e0fd461a011219f1d30545afa74682fbe7e7e4691a108b82f4b01aa93dae9d3e5e1bd961869398fc34165c388b8d5f026a44c5fbd86945020d98dcbfcecb6f4374cefa25797daa46a5a7969338bbcbf742df02ed82dbf8b20062e72163256125e8d803e231f07d28b5c8448b171bd04a88e5b4e242705c7367a0af1d1ad44432880d6c28e774e1d9b976378c4656c8744a97ec784777a11c87bb062935bd125c47c92", @ANYRES8, @ANYRESDEC=r1, @ANYRESDEC, @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c95}, 0x4008840) r2 = syz_open_dev$I2C(&(0x7f0000000140), 0x8, 0x30080) ioctl$I2C_SLAVE(r2, 0x703, 0x210) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x0, 0x1, 0x400, 0x1, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 10.777879646s ago: executing program 2 (id=2157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x3}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="000e82b4a8eb682deeb35c6d56a09305a6000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200"], 0x5c}}, 0x0) 10.673237392s ago: executing program 2 (id=2158): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff25, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) 10.672304222s ago: executing program 2 (id=2159): r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) fsopen(&(0x7f0000000000)='coda\x00', 0x0) setns(r1, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000140)) 10.43220976s ago: executing program 2 (id=2166): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x44040, 0x11b) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r1, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000f00)=0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000540)={[0x100000, 0x100000, 0x41000, 0xffffffff], 0x8, 0x40}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000040)=[{0xd, '\x00', @st={0x4, [{0x2, @uvalue=0x9}, {0x3, @uvalue=0xfff}, {0x1, @svalue=0xdf03}, {0x1, @uvalue=0x7c31}]}, 0x3}]}) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) write$binfmt_elf64(r8, &(0x7f00000005c0)=ANY=[@ANYRES8=r2], 0xff) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r8) fsetxattr$security_evm(r5, &(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYBLOB="03b901000000080022b66127128a444840a0b63686a045ff6521a5283281121ed581b091891fcd8582e0ec"], 0x2b, 0x2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 9.462364866s ago: executing program 2 (id=2192): add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x99000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x618f, 0x10000) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000001c0)={0x24000000000, r2, 0x80000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x17, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 363.304897ms ago: executing program 6 (id=2344): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xce, 0x0, 0x6}]}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x11) syz_clone(0x623d5c00, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, 0x1c) syz_clone(0x8d040280, 0x0, 0x0, 0x0, 0x0, 0x0) 362.817164ms ago: executing program 5 (id=2345): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) ioctl$XFS_IOC_AG_GEOMETRY(r4, 0xc080583d, &(0x7f0000000140)={0x0, 0x2, 0x400, 0x6, 0x100, 0x5, 0x9eb, 0x38}) 313.147473ms ago: executing program 6 (id=2346): prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x2) (async) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x2) (async) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) (async) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x2) (async) prctl$PR_SET_FPEMU(0xa, 0x2) r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_FPEMU(0xa, 0x5) (async) prctl$PR_SET_FPEMU(0xa, 0x5) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x0) (async) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) (async) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x3) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000100)={r1, 0x2, 0x7, 0xfffff3ec, 0x0, [], [0x5, 0x2, 0x6, 0xffffffda], [0xda6c, 0x4, 0xfffffffd, 0x2], [0x6, 0xfd50, 0x9, 0x10001]}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) (async) prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x3) (async) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x1) (async) prctl$PR_SET_FPEMU(0xa, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7ce}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c4}, 0x44854) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x1) r4 = openat(r2, &(0x7f0000000300)='./file0\x00', 0x81, 0x138) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x6c}}}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004050}, 0x40800) 312.764436ms ago: executing program 6 (id=2347): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) 312.156686ms ago: executing program 5 (id=2348): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 251.875765ms ago: executing program 6 (id=2349): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) 251.688623ms ago: executing program 7 (id=2350): setgid(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 251.341616ms ago: executing program 5 (id=2351): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x3, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000000)={0x10, 0x1, r4}) 193.070298ms ago: executing program 5 (id=2352): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 190.192798ms ago: executing program 6 (id=2353): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x102) kcmp(r0, r2, 0x3, r3, r1) (async) r4 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f00000001c0)) 102.945562ms ago: executing program 7 (id=2354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x55}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x24000081) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, r4, 0x100, 0x70bd24, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x55}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x24000081) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, r4, 0x100, 0x70bd24, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) (async) 102.558493ms ago: executing program 7 (id=2355): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xe2, 0x100, 0x25, 0x7fff}, 0x9c) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1}) 98.722151ms ago: executing program 7 (id=2356): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4004001}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x6, 0x10000) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) 2.068695ms ago: executing program 7 (id=2357): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) 1.667977ms ago: executing program 5 (id=2358): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) removexattr(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000180)=@random={'user.', '%[$:}#$+:.\x00'}) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000800), 0x4) 1.194938ms ago: executing program 7 (id=2359): ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 148.517µs ago: executing program 6 (id=2360): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0x1b0, 0x0, 0x378, 0x378, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff, 0xffffffff, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {0x0, 0x0, 0x9}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1ff, 0x8}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x3a, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x1, 0x80, 0x5, 0x19a698a4bf91e5dd}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x0, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xff, 0xffffff, 0xffffff00], [0x0, 0xff, 0xff000000, 0xffffffff], 'veth1_vlan\x00', 'rose0\x00', {}, {0xff}, 0x89, 0xbf, 0x2, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xd, 0x5}}}, {{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x2, 0x0, [0xfffc, 0x6, 0x4, 0x6, 0x400, 0x9b, 0x1, 0xdfa4, 0xfffe, 0x8, 0x5, 0x0, 0x0, 0x1, 0xff, 0xdb], 0x4}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x40, 0x8, 0x0, 0x1ff, 0x6, 0x9, 0x100, 0x0, 0x20}, {0x8000000000000001}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) (rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@loopback}, {@in=@local, 0x0, 0x2b}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x42}, [@coaddr={0x14, 0xe, @in6=@private0}]}, 0x104}}, 0x0) 0s ago: executing program 5 (id=2361): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000180)={&(0x7f00000001c0)=[r1], 0x0, 0x200000000009, 0x1, 0xb}) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000180)={0x0, 0xfffffffc, 0x13580}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e2202010200aa365ba75a2e51ea9b"], 0x25) r4 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001d180000000000000014000000a8141000000200000000000000010000130400000002000000010100007b7fb53eb44244016941f357300a403abbf5ac5982c9e0f709327037714430514ac8f8450dc8adddbd08e436e06bdfc25b6ea8a4956b4afc8ec40c7660f1bb114a78c5806481bbda4e91daf066737c7f747d4586add1e0c01049a92664319e3babff8025e6abc058a1b0c659276164c89520ccc8733bdd064d78a0150bb6e3fb6b9dc437389a25f4c871883f8bc67865afbe61c8b3b69b862d664ea812e44bd1bdc92ae25f929515f61e30f410bb2eda4460de5a2cc1f34c23e65a884ff01956302ad12679d7f179c1f3bf9f8a37d841d2f925df93271469eebf79037c5a"], 0x0, 0x2e, 0x0, 0x1}, 0x28) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000000180)={&(0x7f00000001c0)=[r1], 0x0, 0x200000000009, 0x1, 0xb}) (async) syz_io_uring_setup(0x1f87, &(0x7f0000000180)={0x0, 0xfffffffc, 0x13580}, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x8000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) (async) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x23, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0}) (async) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e2202010200aa365ba75a2e51ea9b"], 0x25) (async) socket(0x400000000010, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x2e, 0x0, 0x1}, 0x28) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) (async) kernel console output (not intermixed with test programs): : used from hooks FORWARD, but only usable from PREROUTING [ 149.274356][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 149.283389][T10854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.286137][T10854] IPv6: NLM_F_CREATE should be set when creating new route [ 149.288825][T10854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.291375][T10854] IPv6: NLM_F_CREATE should be set when creating new route [ 149.349566][T10868] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 149.423567][T10875] FAT-fs (sr0): bogus number of reserved sectors [ 149.425702][T10875] FAT-fs (sr0): Can't find a valid FAT filesystem [ 149.453200][T10879] ref_ctr_offset mismatch. inode: 0x86b offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 149.476161][T10879] comedi comedi3: Minor 20265 is invalid! [ 149.477615][T10879] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1337'. [ 149.492592][T10879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.494464][T10879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.496186][T10879] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 149.498134][T10879] bond0 (unregistering): Released all slaves [ 149.622448][T10883] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 149.645268][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.656571][T10883] bond0: (slave gretap1): making interface the new active one [ 149.657712][T10883] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 149.792124][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1340'. [ 150.037992][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1344'. [ 150.056420][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 150.056435][ T40] audit: type=1400 audit(1770834369.558:700): avc: denied { ioctl } for pid=10902 comm="syz.6.1345" path="socket:[41366]" dev="sockfs" ino=41366 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.057553][T10903] sctp: [Deprecated]: syz.6.1345 (pid 10903) Use of int in max_burst socket option deprecated. [ 150.057553][T10903] Use struct sctp_assoc_value instead [ 150.395464][T10941] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 150.407696][T10941] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 150.463976][T10949] vivid-000: ================= START STATUS ================= [ 150.469516][T10949] vivid-000: Test Pattern: 75% Colorbar [ 150.472221][T10949] vivid-000: Fill Percentage of Frame: 100 [ 150.475524][T10949] vivid-000: Horizontal Movement: No Movement [ 150.478154][T10949] vivid-000: Vertical Movement: No Movement [ 150.488412][T10949] vivid-000: OSD Text Mode: All [ 150.490610][T10949] vivid-000: Show Border: false [ 150.492707][T10949] vivid-000: Show Square: true [ 150.494692][T10949] vivid-000: Sensor Flipped Horizontally: true [ 150.497048][T10949] vivid-000: Sensor Flipped Vertically: false [ 150.508002][T10949] vivid-000: Insert SAV Code in Image: false [ 150.510759][T10949] vivid-000: Insert EAV Code in Image: false [ 150.513388][T10949] vivid-000: Insert Video Guard Band: false [ 150.516419][T10949] vivid-000: Reduced Framerate: false [ 150.527230][T10949] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 150.530859][T10949] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 150.534295][T10949] vivid-000: Enable Capture Cropping: true grabbed [ 150.537488][T10949] vivid-000: Enable Capture Composing: true grabbed [ 150.540488][T10949] vivid-000: Enable Capture Scaler: true grabbed [ 150.543249][T10949] vivid-000: Timestamp Source: End of Frame [ 150.546099][T10949] vivid-000: Colorspace: Rec. 709 [ 150.548447][T10949] vivid-000: Transfer Function: Default [ 150.550867][T10949] vivid-000: Y'CbCr Encoding: Default [ 150.553181][T10949] vivid-000: HSV Encoding: Hue 0-179 [ 150.555522][T10949] vivid-000: Quantization: Default [ 150.559880][T10949] vivid-000: Apply Alpha To Red Only: false [ 150.562511][T10949] vivid-000: Standard Aspect Ratio: 16x9 Anamorphic [ 150.565344][T10949] vivid-000: DV Timings Signal Mode: Current DV Timings [ 150.568510][T10949] vivid-000: DV Timings: 640x480p59 inactive [ 150.571154][T10949] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 150.576085][T10949] vivid-000: Maximum EDID Blocks: 1 [ 150.578581][T10949] vivid-000: Limited RGB Range (16-235): true [ 150.581179][T10949] vivid-000: Rx RGB Quantization Range: Automatic [ 150.583949][T10949] vivid-000: Power Present: 0x00000001 [ 150.586335][T10949] tpg source WxH: 1280x720 (Y'CbCr) [ 150.589911][T10949] tpg field: 1 [ 150.591415][T10949] tpg crop: (0,0)/1280x720 [ 150.593537][T10949] tpg compose: (0,0)/1280x720 [ 150.595629][T10949] tpg colorspace: 3 [ 150.597287][T10949] tpg transfer function: 0/1 [ 150.599920][T10949] tpg Y'CbCr encoding: 0/2 [ 150.601882][T10949] tpg quantization: 0/2 [ 150.606068][T10949] tpg RGB range: 0/1 [ 150.607795][T10949] vivid-000: ================== END STATUS ================== [ 150.687731][T10971] : renamed from wg2 [ 150.743428][T10974] /dev/nullb0: Can't open blockdev [ 150.776930][T10977] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1365'. [ 150.796128][T10977] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 150.859689][ T140] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 150.869677][ T40] audit: type=1804 audit(1770834370.368:701): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1367" name="/newroot/133/file0" dev="tmpfs" ino=717 res=1 errno=0 [ 150.881762][T10984] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 150.886028][T10984] ref_ctr increment failed for inode: 0x2cd offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888054a44980 [ 150.937512][T10989] netlink: 'syz.6.1368': attribute type 23 has an invalid length. [ 151.018458][ T140] usb 7-1: Using ep0 maxpacket: 8 [ 151.024829][ T140] usb 7-1: unable to get BOS descriptor or descriptor too short [ 151.029024][ T140] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 151.033102][ T140] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.037089][ T140] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 151.073386][ T140] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 151.084726][ T140] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 151.089192][ T140] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 151.093372][ T140] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 151.099564][ T140] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 151.102967][ T140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.106125][ T140] usb 7-1: Product: syz [ 151.107801][ T140] usb 7-1: Manufacturer: syz [ 151.110088][ T140] usb 7-1: SerialNumber: syz [ 151.114349][ T140] usb 7-1: config 0 descriptor?? [ 151.116957][T10967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.120181][T10967] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.125716][ T140] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.255674][T11008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=11008 comm=syz.6.1373 [ 151.255786][ T40] audit: type=1400 audit(1770834370.758:702): avc: denied { connect } for pid=11007 comm="syz.1.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 151.351644][ T8207] usb 7-1: USB disconnect, device number 20 [ 151.926202][T11023] binder_alloc: binder_alloc_mmap_handler: 11022 200000ffc000-200000ffd000 already mapped failed -16 [ 152.063004][T11030] netlink: 'syz.2.1380': attribute type 8 has an invalid length. [ 152.112081][T11034] syzkaller0: entered promiscuous mode [ 152.114156][T11034] syzkaller0: entered allmulticast mode [ 152.132646][T11032] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 152.204996][T11041] netlink: Unknown conntrack attr (0) [ 152.209914][T11041] overlayfs: failed to resolve '/': -2 [ 152.332776][T11051] loop2: detected capacity change from 0 to 7 [ 152.342179][ T8318] Dev loop2: unable to read RDB block 7 [ 152.343986][ T8318] loop2: AHDI p1 p2 [ 152.345291][ T8318] loop2: partition table partially beyond EOD, truncated [ 152.349127][ T8318] loop2: p1 start 1818582900 is beyond EOD, truncated [ 152.356803][T11051] Dev loop2: unable to read RDB block 7 [ 152.360422][T11051] loop2: AHDI p1 p2 [ 152.361728][T11051] loop2: partition table partially beyond EOD, truncated [ 152.365279][T11051] loop2: p1 start 1818582900 is beyond EOD, truncated [ 152.678579][ T39] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 152.828381][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 152.842545][ T39] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 32 [ 152.846786][ T39] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.851365][ T39] usb 6-1: config 1 interface 0 has no altsetting 0 [ 152.856131][ T39] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 152.860138][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.863512][ T39] usb 6-1: Product:   [ 152.865299][ T39] usb 6-1: Manufacturer: ь [ 152.867273][ T39] usb 6-1: SerialNumber: 䎾Ἳ惘⹳勄藧䑼ཉ䈕ꋡ媉溤뙑↼狭쬨셟ᙃ퉸စᲶⅮ栄鶠怬秝寿撛꟡춂꒟犻파寔⟈㒙齮ꙴ恇‟즁긫⬖䱀蠄缟菓售窅雙譫콠阣萿୤᰽閛m虉應㣽‹鑍ꉬ쟛䏤횇舂ↄ戫穚⫞畱Ὼᶕ晋᯻쯲ꫧ罊逎媷ꗔ멠宻漸 [ 152.888688][T11065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.891422][T11065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 153.149504][ T40] audit: type=1326 audit(1770834372.648:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11077 comm="syz.5.1395" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa40b9bf79 code=0x0 [ 153.299250][T11065] syzkaller0: entered promiscuous mode [ 153.302586][T11065] syzkaller0: entered allmulticast mode [ 153.310496][T11065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.327507][ T39] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8 [ 153.351125][ T40] audit: type=1400 audit(1770834372.858:704): avc: denied { write } for pid=11083 comm="syz.5.1396" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 153.351713][ T39] usb 6-1: USB disconnect, device number 23 [ 153.370590][ T39] usblp0: removed [ 153.378704][T11085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.389448][T11085] syzkaller0: entered promiscuous mode [ 153.391256][T11085] syzkaller0: entered allmulticast mode [ 153.865146][T11093] __nla_validate_parse: 3 callbacks suppressed [ 153.865158][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1398'. [ 154.129963][T11099] netlink: 'syz.6.1400': attribute type 15 has an invalid length. [ 154.227596][T11103] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1402'. [ 154.408027][ T40] audit: type=1400 audit(1770834373.908:705): avc: denied { getopt } for pid=11109 comm="syz.6.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.480327][ T40] audit: type=1400 audit(1770834373.988:706): avc: denied { listen } for pid=11116 comm="syz.6.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.693775][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 154.696587][T11136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1412'. [ 154.723419][T11136] kvm: vcpu 0: requested 40 ns lapic timer period limited to 200000 ns [ 154.728481][T11136] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=167772160 (335544320 ns) > initial count (200000 ns). Using initial count to start timer. [ 154.753210][T11143] binder: 11142:11143 ioctl c0306201 200000000540 returned -14 [ 154.755964][T11143] binder: 11142:11143 ioctl c0306201 200000000640 returned -22 [ 154.891270][ T40] audit: type=1400 audit(1770834374.398:707): avc: denied { wake_alarm } for pid=11152 comm="syz.6.1417" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.996234][T11163] overlayfs: conflicting options: nfs_export=on,index=off [ 155.009255][T11163] pvfs2: Unknown parameter '\' [ 155.054004][ T40] audit: type=1400 audit(1770834374.558:708): avc: denied { setopt } for pid=11164 comm="syz.2.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.149788][T11170] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 155.203338][ T40] audit: type=1400 audit(1770834374.708:709): avc: denied { read } for pid=11175 comm="syz.5.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.268566][T11182] i2c i2c-1: Invalid block write size 34 [ 155.307864][T11184] netlink: 4456 bytes leftover after parsing attributes in process `syz.2.1426'. [ 155.484692][T11196] team0: left allmulticast mode [ 155.486454][T11196] team_slave_0: left allmulticast mode [ 155.488521][T11196] team_slave_1: left allmulticast mode [ 155.500061][T11196] team0: left promiscuous mode [ 155.503100][T11196] team_slave_0: left promiscuous mode [ 155.505135][T11196] team_slave_1: left promiscuous mode [ 155.507907][T11196] bridge0: port 3(team0) entered disabled state [ 155.529009][T11196] bridge_slave_1: left allmulticast mode [ 155.551228][T11196] bridge_slave_1: left promiscuous mode [ 155.553821][T11196] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.579303][T11196] bridge_slave_0: left allmulticast mode [ 155.581178][T11190] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 155.584169][T11190] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 155.595149][T11196] bridge_slave_0: left promiscuous mode [ 155.597791][T11196] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.755723][T11184] syzkaller1: entered promiscuous mode [ 155.757606][T11184] syzkaller1: entered allmulticast mode [ 155.766196][T11206] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 155.879017][T11210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.938034][T11212] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 155.942666][T11215] 9p: p9: multiple sources not supported [ 156.050433][T11221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.056584][T11221] bond0: (slave rose0): Enslaving as an active interface with an up link [ 156.109433][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1438'. [ 156.112418][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1438'. [ 156.159694][ T40] audit: type=1400 audit(1770834375.668:710): avc: denied { read } for pid=11223 comm="syz.2.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.167242][T11234] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 156.167468][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1438'. [ 156.170801][ T40] audit: type=1400 audit(1770834375.668:711): avc: denied { ioctl } for pid=11223 comm="syz.2.1437" path="socket:[43341]" dev="sockfs" ino=43341 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.525361][T11268] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 156.565795][T11272] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 156.660945][ T40] audit: type=1400 audit(1770834376.158:712): avc: denied { getopt } for pid=11280 comm="syz.6.1440" lport=48628 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 156.660955][T11281] overlayfs: failed to resolve './file0': -2 [ 156.710870][ T5938] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 156.793357][T11297] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 156.864890][ T40] audit: type=1326 audit(1770834376.368:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.6.1445" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8852b9bf79 code=0x7ffc0000 [ 156.878471][ T40] audit: type=1326 audit(1770834376.368:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.6.1445" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8852b9bf79 code=0x7ffc0000 [ 156.882477][T11304] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1446'. [ 156.885824][ T40] audit: type=1326 audit(1770834376.368:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11305 comm="syz.6.1445" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f8852b9bf79 code=0x7ffc0000 [ 156.913871][T11308] overlayfs: failed lookup in lower (newroot/168, name='file2', err=-40): overlapping layers [ 157.076720][T11323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.130046][T11328] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.135160][T11328] block device autoloading is deprecated and will be removed. [ 157.149055][T11328] random: crng reseeded on system resumption [ 157.328389][ T5996] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 157.357746][T11343] IPv6: Can't replace route, no match found [ 157.382458][T11345] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 157.414309][T11350] mac80211_hwsim hwsim14 : renamed from wlan1 (while UP) [ 157.460839][T11352] random: crng reseeded on system resumption [ 157.480322][ T5996] usb 11-1: config 156 has too many interfaces: 182, using maximum allowed: 32 [ 157.484205][ T5996] usb 11-1: config 156 has an invalid descriptor of length 197, skipping remainder of the config [ 157.493965][ T5996] usb 11-1: config 156 has 0 interfaces, different from the descriptor's value: 182 [ 157.500064][ T5996] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.503980][ T5996] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.507421][ T5996] usb 11-1: Product: syz [ 157.509896][ T5996] usb 11-1: Manufacturer: syz [ 157.511970][ T5996] usb 11-1: SerialNumber: syz [ 157.709201][T11360] random: crng reseeded on system resumption [ 157.751091][ T5996] usb 11-1: USB disconnect, device number 12 [ 157.760760][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 157.888574][ T40] audit: type=1400 audit(1770834377.388:716): avc: denied { map } for pid=11362 comm="syz.5.1464" path="socket:[41625]" dev="sockfs" ino=41625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 157.889177][T11363] netlink: 'syz.5.1464': attribute type 3 has an invalid length. [ 157.908323][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 157.912357][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 157.916102][ T9] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 157.921086][ T9] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 64 [ 157.924266][ T9] usb 7-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.929698][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 157.930032][T11365] netlink: 'syz.5.1465': attribute type 29 has an invalid length. [ 157.933469][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.937229][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.940474][ T9] usb 7-1: Product: syz [ 157.941862][ T9] usb 7-1: Manufacturer: syz [ 157.943403][ T9] usb 7-1: SerialNumber: syz [ 157.945282][T11365] netlink: 'syz.5.1465': attribute type 29 has an invalid length. [ 157.947605][T11337] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 157.949937][T11365] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1465'. [ 157.950324][T11337] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.161274][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 158.166914][ T9] usb 7-1: USB disconnect, device number 21 [ 158.300305][ T40] audit: type=1400 audit(1770834377.798:717): avc: denied { setopt } for pid=11371 comm="syz.6.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.713502][T11381] fuse: Unknown parameter '18446744073709551615000000000000000000000060177777777777777777777700000000000000000000' [ 158.719348][T11381] sctp: [Deprecated]: syz.2.1470 (pid 11381) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.719348][T11381] Use struct sctp_sack_info instead [ 158.876611][ T40] audit: type=1400 audit(1770834378.368:718): avc: denied { read } for pid=11379 comm="syz.2.1470" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.022903][T11386] IPv6: sit1: Disabled Multicast RS [ 159.027059][T11386] sit1: entered allmulticast mode [ 159.380078][T11395] __nla_validate_parse: 1 callbacks suppressed [ 159.380091][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1475'. [ 159.385102][T11395] netlink: 'syz.5.1475': attribute type 7 has an invalid length. [ 159.388023][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1475'. [ 159.393165][T11395] netlink: 'syz.5.1475': attribute type 7 has an invalid length. [ 159.586850][T11404] random: crng reseeded on system resumption [ 160.093677][T11435] random: crng reseeded on system resumption [ 160.130107][T11435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11435 comm=syz.2.1482 [ 160.206082][T11445] netlink: 'syz.6.1488': attribute type 10 has an invalid length. [ 160.229592][T11445] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 169.459684][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1492'. [ 169.499133][T11472] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 169.502326][T11472] overlayfs: failed to set xattr on upper [ 169.508521][T11472] overlayfs: ...falling back to redirect_dir=nofollow. [ 169.511453][T11472] overlayfs: ...falling back to metacopy=off. [ 169.514045][T11472] overlayfs: ...falling back to index=off. [ 169.516526][T11472] overlayfs: ...falling back to uuid=null. [ 169.550459][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 169.550470][ T40] audit: type=1400 audit(1770834389.058:721): avc: denied { bind } for pid=11471 comm="syz.6.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.568693][ T40] audit: type=1400 audit(1770834389.078:722): avc: denied { listen } for pid=11471 comm="syz.6.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.584442][ T5939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.588821][ T5939] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.591951][ T5939] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.596211][ T5939] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.600842][ T5939] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.736632][T11478] chnl_net:caif_netlink_parms(): no params data found [ 169.765327][T11488] binder: 11487:11488 ioctl c0306201 200000000680 returned -14 [ 169.798604][ T6014] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 169.802561][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.805021][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.807798][T11478] bridge_slave_0: entered allmulticast mode [ 169.828366][T11478] bridge_slave_0: entered promiscuous mode [ 169.831592][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.834187][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.836634][T11478] bridge_slave_1: entered allmulticast mode [ 169.839683][T11478] bridge_slave_1: entered promiscuous mode [ 169.871473][T11478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.876081][T11478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.892637][T11478] team0: Port device team_slave_0 added [ 169.896032][T11478] team0: Port device team_slave_1 added [ 169.909590][T11478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.911915][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.920191][T11478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.935529][T11478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.937766][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.946693][T11478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.961759][ T6014] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 169.965195][ T6014] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 169.969961][ T6014] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.974783][ T6014] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 169.980600][ T6014] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 169.982308][T11478] hsr_slave_0: entered promiscuous mode [ 169.985943][ T6014] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 169.987942][T11478] hsr_slave_1: entered promiscuous mode [ 169.990194][ T6014] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 169.993533][T11478] debugfs: 'hsr0' already exists in 'hsr' [ 169.996594][ T6014] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.999424][T11478] Cannot create hsr debugfs directory [ 170.003277][ T6014] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.008515][ T6014] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.014669][ T6014] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 170.017865][ T6014] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 170.021999][ T6014] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.027176][ T6014] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 170.033798][ T6014] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 170.060048][ T6014] usb 10-1: string descriptor 0 read error: -22 [ 170.062689][ T6014] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 170.066281][ T6014] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.081322][ T6014] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 170.086670][T11500] wg1: entered promiscuous mode [ 170.125866][ T40] audit: type=1400 audit(1770834389.628:723): avc: denied { accept } for pid=11501 comm="syz.6.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 170.231054][T11508] o2cb: This node has not been configured. [ 170.233919][T11508] o2cb: Cluster check failed. Fix errors before retrying. [ 170.236955][T11508] (syz.6.1506,11508,2):user_dlm_register:674 ERROR: status = -22 [ 170.241249][T11508] (syz.6.1506,11508,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 170.246298][ T40] audit: type=1400 audit(1770834389.748:724): avc: denied { nlmsg_write } for pid=11507 comm="syz.6.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 170.248409][T11508] netlink: 'syz.6.1506': attribute type 10 has an invalid length. [ 170.257500][T11508] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1506'. [ 170.292109][T11510] netlink: 'syz.6.1507': attribute type 1 has an invalid length. [ 170.294680][T11510] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1507'. [ 170.342505][T11511] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1507'. [ 170.393377][T11478] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 170.400370][T11478] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 170.406577][T11478] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 170.415931][T11478] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 170.616086][ T6730] bond0 (unregistering): (slave gretap1): Releasing active interface [ 170.722002][T11527] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 170.725002][T11527] /dev/nullb0: Can't open blockdev [ 170.777309][T11529] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1512'. [ 170.955436][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1513'. [ 171.051141][ T6730] bond1 (unregistering): Released all slaves [ 171.129866][ T6730] bond2 (unregistering): Released all slaves [ 171.208828][ T6730] bond0 (unregistering): Released all slaves [ 171.217394][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.219842][T11478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.222439][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.224998][T11478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.230073][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.232932][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.301488][T11535] team0: Port device team_slave_0 removed [ 171.351911][T11478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.364440][T11478] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.369533][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.371990][ T6732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.393219][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.395756][ T6735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.443913][T11478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.447976][T11478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.552538][T11478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.559796][ T5938] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 171.614635][ T40] audit: type=1400 audit(1770834391.118:725): avc: denied { setopt } for pid=11558 comm="syz.2.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 171.633068][ T6730] hsr_slave_0: left promiscuous mode [ 171.636186][ T6730] hsr_slave_1: left promiscuous mode [ 171.643678][ T5938] Bluetooth: hci5: command tx timeout [ 171.705659][ T40] audit: type=1400 audit(1770834391.208:726): avc: denied { audit_write } for pid=11573 comm="syz.2.1518" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 171.714726][ T40] audit: type=1400 audit(1770834391.208:727): avc: denied { setopt } for pid=11573 comm="syz.2.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 171.807397][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 171.839240][ T6730] vlan0 (unregistering): left allmulticast mode [ 171.841358][ T6730] veth0_vlan (unregistering): left allmulticast mode [ 171.844638][ T6730] team0 (unregistering): Port device vlan0 removed [ 172.012735][ T6730] team0 (unregistering): Port device team_slave_1 removed [ 172.037420][ T6730] team0 (unregistering): Port device team_slave_0 removed [ 172.318419][ T34] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 172.400148][T11478] veth0_vlan: entered promiscuous mode [ 172.407437][T11478] veth1_vlan: entered promiscuous mode [ 172.428088][T11478] veth0_macvtap: entered promiscuous mode [ 172.436383][T11478] veth1_macvtap: entered promiscuous mode [ 172.447825][T11478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.462616][T11478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.474615][ T34] usb 11-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 172.480036][ T6739] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.483134][ T6739] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.487077][ T34] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x6 has invalid wMaxPacketSize 0 [ 172.487986][ T53] usb 10-1: USB disconnect, device number 12 [ 172.493952][ T34] usb 11-1: config 0 interface 0 has no altsetting 0 [ 172.506329][ T6739] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.508446][ T34] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 172.513001][ T34] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 172.515773][ T34] usb 11-1: Product: syz [ 172.517049][ T6739] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.517131][ T34] usb 11-1: Manufacturer: syz [ 172.523177][ T34] usb 11-1: SerialNumber: syz [ 172.526784][ T34] usb 11-1: config 0 descriptor?? [ 172.535345][ T34] usb 11-1: selecting invalid altsetting 0 [ 172.538179][ T24] IPVS: starting estimator thread 0... [ 172.650862][T11595] IPVS: using max 45 ests per chain, 108000 per kthread [ 172.685175][ T6735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.687881][ T6735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.696022][T11611] MPI: mpi too large (113288 bits) [ 172.712094][ T6732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.714690][ T6732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.738453][ T8207] usb 11-1: USB disconnect, device number 13 [ 172.739021][ T40] audit: type=1400 audit(1770834648.248:728): avc: denied { mounton } for pid=11478 comm="syz-executor" path="/syzkaller.ASxtJq/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 172.792123][ T40] audit: type=1400 audit(1770834648.298:729): avc: denied { ioctl } for pid=11623 comm="syz.2.1529" path="socket:[43989]" dev="sockfs" ino=43989 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.854380][ T6730] IPVS: stop unused estimator thread 0... [ 172.889799][T11629] random: crng reseeded on system resumption [ 173.011870][T11647] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.294924][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1541'. [ 173.503417][T11700] netlink: 'syz.7.1547': attribute type 4 has an invalid length. [ 173.506903][T11700] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1547'. [ 173.515964][T11700] .`: renamed from bond0 (while UP) [ 173.522246][T11700] netlink: 'syz.7.1547': attribute type 4 has an invalid length. [ 173.525302][T11700] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1547'. [ 173.728466][ T5938] Bluetooth: hci5: command tx timeout [ 174.061011][T11743] netlink: 'syz.5.1554': attribute type 2 has an invalid length. [ 174.181608][T11746] netlink: 'syz.7.1556': attribute type 39 has an invalid length. [ 174.396946][T11762] xt_hashlimit: size too large, truncated to 1048576 [ 174.550046][T11770] SET target dimension over the limit! [ 174.584680][T11772] tc_dump_action: action bad kind [ 174.698628][T11775] __nla_validate_parse: 4 callbacks suppressed [ 174.698641][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 174.856192][T11792] overlay: Unknown parameter 'Q k`C.5ݏ^gkuu[' [ 174.952185][T11799] overlay: filesystem on ./bus not supported as upperdir [ 174.977892][ T40] audit: type=1400 audit(1770834650.478:730): avc: denied { write } for pid=11796 comm="syz.6.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 175.052852][T11803] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 175.060236][T11813] 9pnet_fd: p9_fd_create_unix (11813): problem connecting socket: ./file0: -30 [ 175.063962][T11813] afs: Unknown parameter 'dynile0' [ 175.147532][ T40] audit: type=1400 audit(1770834650.648:731): avc: denied { read } for pid=11821 comm="syz.6.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 175.295255][T11842] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1578'. [ 175.464402][T11859] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1581'. [ 175.688925][T11896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1589'. [ 175.798961][ T5938] Bluetooth: hci5: command tx timeout [ 175.799032][ T40] audit: type=1400 audit(1770834651.308:732): avc: denied { create } for pid=11906 comm="syz.2.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 175.818678][T11899] netlink: 57 bytes leftover after parsing attributes in process `syz.6.1590'. [ 175.882458][T11916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1594'. [ 175.902866][T11916] syzkaller0: entered promiscuous mode [ 175.904671][T11916] syzkaller0: entered allmulticast mode [ 175.958738][T11929] netlink: 'syz.5.1597': attribute type 9 has an invalid length. [ 175.999342][T11933] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 176.057894][T11937] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 176.073043][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1599'. [ 177.294228][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1599'. [ 177.335418][T11953] ptrace attach of ""[11954] was attempted by "/syz-executor exec"[11953] [ 177.369565][T11961] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 177.386589][T11950] : renamed from bridge_slave_0 (while UP) [ 177.399326][T11959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.402469][T11959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62293 sclass=netlink_route_socket pid=11959 comm=syz.5.1606 [ 177.583299][ T5938] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 177.608643][ T9] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 177.643577][T11973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1611'. [ 177.692569][T11968] input: syz1 as /devices/virtual/input/input31 [ 177.742732][T11977] xt_hashlimit: size too large, truncated to 1048576 [ 177.778326][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 177.782503][ T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.785635][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.789521][ T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.793088][ T9] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.798326][ T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.801268][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.807970][T11966] netlink: 'syz.7.1608': attribute type 32 has an invalid length. [ 177.858857][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1608'. [ 177.878589][ T5938] Bluetooth: hci5: command tx timeout [ 178.005063][T11997] netlink: 'syz.7.1616': attribute type 2 has an invalid length. [ 178.009033][T11997] netlink: 'syz.7.1616': attribute type 1 has an invalid length. [ 178.013762][ T9] usb 11-1: GET_CAPABILITIES returned 0 [ 178.013786][ T9] usbtmc 11-1:16.0: can't read capabilities [ 178.125310][T12002] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 178.132625][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.134623][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.136762][T12003] sock: sock_timestamping_bind_phc: sock not bind to device [ 178.137089][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.139979][T12003] binder: 12001:12003 ioctl c0306201 200000000640 returned -22 [ 178.142793][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.147003][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.150431][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.153015][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.154978][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.157423][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.160896][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.163818][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.165793][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.168343][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.170359][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.173701][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.175667][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.178148][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.180307][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.182821][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.185093][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.187627][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.189944][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.192424][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.194307][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.196855][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.199730][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.202266][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.204179][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.206645][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.208863][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.211329][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.213304][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.215798][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.217772][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.220476][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.222469][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.225008][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.227027][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.229643][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.231640][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.234122][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.236067][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.238632][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.240602][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.243147][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.245078][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.247519][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.249609][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.252003][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.254232][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.257349][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.259498][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.261941][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.263844][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.266528][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.268554][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.270955][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.272852][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.275279][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.277256][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.279796][T12002] binder: BINDER_SET_CONTEXT_MGR already set [ 178.281727][T12002] binder: 12001:12002 ioctl 4018620d 200000000480 returned -16 [ 178.300995][ T53] usb 11-1: USB disconnect, device number 14 [ 178.355326][ T40] audit: type=1400 audit(1770834653.858:733): avc: denied { write } for pid=12011 comm="syz.7.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 178.361683][ T40] audit: type=1400 audit(1770834653.858:734): avc: denied { getopt } for pid=12011 comm="syz.7.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 178.620904][T12030] sctp: [Deprecated]: syz.2.1621 (pid 12030) Use of int in max_burst socket option. [ 178.620904][T12030] Use struct sctp_assoc_value instead [ 178.733607][T12032] 9pnet_virtio: no channels available for device 127.0.0.1 [ 178.839898][T12036] netlink: 'syz.6.1626': attribute type 1 has an invalid length. [ 178.848839][ T53] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 178.853646][T12036] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 178.958382][ T40] audit: type=1400 audit(1770834654.458:735): avc: denied { setattr } for pid=12033 comm="syz.7.1625" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 178.978405][ T53] usb 10-1: device descriptor read/64, error -71 [ 179.219335][ T53] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 179.348417][ T53] usb 10-1: device descriptor read/64, error -71 [ 179.458608][ T53] usb usb10-port1: attempt power cycle [ 179.758342][ T6014] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 179.798488][ T53] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 179.818782][ T53] usb 10-1: device descriptor read/8, error -71 [ 179.910573][ T6014] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.914657][ T6014] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.918669][ T6014] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.921960][ T6014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.927994][T12054] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 179.934290][ T6014] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.058379][ T53] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 180.063374][T12059] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 180.071902][T12059] batadv_slave_1: entered promiscuous mode [ 180.079085][ T53] usb 10-1: device descriptor read/8, error -71 [ 180.113471][T12058] batadv_slave_1: left promiscuous mode [ 180.133471][ T39] usb 7-1: USB disconnect, device number 22 [ 180.188571][ T53] usb usb10-port1: unable to enumerate USB device [ 180.371886][T12077] netlink: 'syz.6.1638': attribute type 18 has an invalid length. [ 180.374429][T12077] __nla_validate_parse: 3 callbacks suppressed [ 180.374438][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1638'. [ 180.384626][T12077] netlink: 'syz.6.1638': attribute type 18 has an invalid length. [ 180.387295][ T6754] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.388898][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1638'. [ 180.391341][ T6754] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.396622][ T6754] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.399915][ T6754] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.736411][ T39] libceph: connect (1)[c::]:6789 error -101 [ 180.740310][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 181.010954][ T39] libceph: connect (1)[c::]:6789 error -101 [ 181.013755][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 181.126264][T12102] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.130804][ T40] audit: type=1400 audit(1770834656.638:736): avc: denied { shutdown } for pid=12101 comm="syz.2.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.210309][T12107] loop2: detected capacity change from 0 to 7 [ 181.213080][T12107] Dev loop2: unable to read RDB block 7 [ 181.215338][T12107] loop2: unable to read partition table [ 181.217900][T12107] loop2: partition table beyond EOD, truncated [ 181.220138][T12107] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 181.325140][T12113] syzkaller0: entered promiscuous mode [ 181.326761][T12113] syzkaller0: entered allmulticast mode [ 181.519991][ T39] libceph: connect (1)[c::]:6789 error -101 [ 181.521834][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 181.559521][T12096] ceph: No mds server is up or the cluster is laggy [ 181.791808][T12123] netlink: 'syz.6.1651': attribute type 39 has an invalid length. [ 182.617944][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 182.623035][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1654'. [ 182.743169][ T40] audit: type=1400 audit(1770834658.248:737): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=59210 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 182.811874][T12140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.870715][ T6739] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.873675][ T6739] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.876662][ T6739] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.880245][ T6739] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.883167][ T6739] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.886008][ T6739] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.889341][ T6739] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.892357][ T6739] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.070079][ T40] audit: type=1400 audit(1770834658.578:738): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=59210 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 183.304663][T12171] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1663'. [ 183.323156][T12171] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 183.325529][T12171] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 183.331788][T12171] vhci_hcd vhci_hcd.0: Device attached [ 183.339838][T12176] vhci_hcd: cannot find the pending unlink 4095 [ 183.344393][T12176] vhci_hcd: connection closed [ 183.348228][ T6736] vhci_hcd vhci_hcd.2: stop threads [ 183.354469][ T6736] vhci_hcd vhci_hcd.2: release socket [ 183.356722][ T6736] vhci_hcd vhci_hcd.2: disconnect device [ 183.362515][T12182] netlink: 'syz.7.1668': attribute type 1 has an invalid length. [ 183.365717][T12182] netlink: 'syz.7.1668': attribute type 2 has an invalid length. [ 183.460859][T12193] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 183.543283][T12198] 9pnet_virtio: no channels available for device syz [ 183.615899][T12141] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 183.625316][T12200] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1674'. [ 183.628869][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1674'. [ 183.668176][T12200] input: syz1 as /devices/virtual/input/input33 [ 183.798501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.085504][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 184.090235][T12235] netlink: 'syz.2.1680': attribute type 19 has an invalid length. [ 184.093433][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1680'. [ 184.098184][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1680'. [ 184.101925][T12235] netlink: 'syz.2.1680': attribute type 19 has an invalid length. [ 184.200337][ T40] audit: type=1400 audit(1770834659.708:739): avc: denied { node_bind } for pid=12244 comm="syz.2.1683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 184.216597][T12245] comedi comedi0: board detection failed [ 184.282302][ T40] audit: type=1400 audit(1770834659.788:740): avc: denied { remount } for pid=12262 comm="syz.7.1686" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 184.447473][T12277] xt_connbytes: Forcing CT accounting to be enabled [ 184.449972][T12277] Cannot find set identified by id 0 to match [ 184.451140][T12279] tmpfs: Unknown parameter 'm+휶Ivpol' [ 184.459462][ T40] audit: type=1400 audit(1770834659.968:741): avc: denied { ioctl } for pid=12280 comm="syz.7.1694" path="socket:[51582]" dev="sockfs" ino=51582 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 184.510439][T12288] netlink: ct family unspecified [ 184.521596][T12294] netlink: 'syz.2.1698': attribute type 1 has an invalid length. [ 184.530201][T12288] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 184.575050][T12300] 9p: Bad value for 'rfdno' [ 184.586813][T12301] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 184.670125][T12307] : entered promiscuous mode [ 184.756322][T12312] btrfs: Unknown parameter 'acl' [ 184.828005][T12331] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 184.830192][T12331] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 184.833928][T12331] vhci_hcd vhci_hcd.0: Device attached [ 184.843324][T12335] kernel profiling enabled (shift: 5) [ 184.843497][T12332] vhci_hcd: connection closed [ 184.847940][ T6739] vhci_hcd vhci_hcd.5: stop threads [ 184.858581][ T6739] vhci_hcd vhci_hcd.5: release socket [ 184.860328][ T6739] vhci_hcd vhci_hcd.5: disconnect device [ 184.935806][T12347] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 184.935806][T12347] program syz.6.1710 not setting count and/or reply_len properly [ 185.271277][T12354] ubi0: attaching mtd0 [ 185.272825][T12354] ubi0 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 185.384311][ T40] audit: type=1400 audit(1770834660.888:742): avc: denied { read } for pid=12359 comm="syz.5.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 185.391523][ T40] audit: type=1804 audit(1770834660.888:743): pid=12361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1715" name="/newroot/265/file1" dev="tmpfs" ino=1413 res=1 errno=0 [ 185.415247][T12364] netlink: 'syz.2.1714': attribute type 30 has an invalid length. [ 185.449449][T12364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.453183][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.457141][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.460497][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.463709][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.466541][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.469974][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.473292][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.476463][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.480177][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.483330][ T8520] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 185.496079][ T8520] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [sy] on syz0 [ 185.578181][T12368] fido_id[12368]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 185.630280][T12371] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 185.721528][ T40] audit: type=1400 audit(1770834661.228:744): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 185.729097][ T40] audit: type=1400 audit(1770834661.228:745): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 187.915566][T12343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.972995][T12379] __nla_validate_parse: 5 callbacks suppressed [ 187.973008][T12379] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1719'. [ 187.978428][T12379] netlink: 'syz.5.1719': attribute type 3 has an invalid length. [ 187.991301][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1720'. [ 188.095398][T12392] geneve4: entered promiscuous mode [ 188.097773][T12392] geneve4: entered allmulticast mode [ 188.150699][T12396] Invalid source name [ 188.152032][T12396] UBIFS error (pid: 12396): cannot open "/dev/sg0", error -22 [ 188.175508][T12398] ufs: You didn't specify the type of your ufs filesystem [ 188.175508][T12398] [ 188.175508][T12398] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 188.175508][T12398] [ 188.175508][T12398] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 188.299715][T12419] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 188.301595][ T40] audit: type=1400 audit(1770834663.798:746): avc: denied { mount } for pid=12418 comm="syz.2.1732" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.307028][ T6730] Bluetooth: hci2: Frame reassembly failed (-84) [ 188.314603][ T40] audit: type=1400 audit(1770834663.808:747): avc: denied { mounton } for pid=12418 comm="syz.2.1732" path="/399/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.318519][ T6730] Bluetooth: hci2: Frame reassembly failed (-84) [ 188.326545][ T40] audit: type=1400 audit(1770834663.808:748): avc: denied { read } for pid=12418 comm="syz.2.1732" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.340114][ T40] audit: type=1400 audit(1770834663.808:749): avc: denied { read } for pid=12418 comm="syz.2.1732" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.347428][ T40] audit: type=1400 audit(1770834663.828:750): avc: denied { read } for pid=12418 comm="syz.2.1732" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.347453][ T40] audit: type=1400 audit(1770834663.828:751): avc: denied { read } for pid=12418 comm="syz.2.1732" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.347476][ T40] audit: type=1400 audit(1770834663.828:752): avc: denied { read } for pid=12418 comm="syz.2.1732" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.347497][ T40] audit: type=1400 audit(1770834663.828:753): avc: denied { read } for pid=12418 comm="syz.2.1732" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.347516][ T40] audit: type=1400 audit(1770834663.828:754): avc: denied { read } for pid=12418 comm="syz.2.1732" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.347536][ T40] audit: type=1400 audit(1770834663.828:755): avc: denied { read } for pid=12418 comm="syz.2.1732" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.427045][T12430] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.452703][T12432] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 188.503497][T12432] veth3: entered promiscuous mode [ 188.546062][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 188.549928][T12441] SELinux: ebitmap: map size 402653248 does not match my size 64 (high bit was 0) [ 188.552490][T12441] SELinux: failed to load policy [ 188.799207][T12454] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 188.802151][T12454] overlayfs: failed to set xattr on upper [ 188.804546][T12454] overlayfs: ...falling back to redirect_dir=nofollow. [ 188.807389][T12454] overlayfs: ...falling back to metacopy=off. [ 188.810715][T12454] overlayfs: ...falling back to index=off. [ 188.813281][T12454] overlayfs: ...falling back to uuid=null. [ 188.863733][T12462] input: syz1 as /devices/virtual/input/input34 [ 189.193602][T12467] dlm: no local IP address has been set [ 189.196856][T12467] dlm: cannot start dlm midcomms -107 [ 189.441803][ T5937] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 190.087292][T12484] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 190.090360][T12484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.120225][T12484] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 190.358432][ T5938] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 190.358934][ T5937] Bluetooth: hci2: command 0x1003 tx timeout [ 191.774761][T12456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.856597][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'. [ 191.908408][T12508] overlay: Unknown parameter 'fsmagic' [ 191.940614][T12504] bond0 (unregistering): Released all slaves [ 192.048746][T12523] /dev/nullb0: Can't open blockdev [ 192.071205][T12529] PM: Enabling pm_trace changes system date and time during resume. [ 192.071205][T12529] PM: Correct system time has to be restored manually after resume. [ 192.085966][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1763'. [ 192.132705][T12529] netlink: 'syz.2.1766': attribute type 4 has an invalid length. [ 192.135312][T12529] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 192.137880][T12529] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1766'. [ 192.196267][T12523] uprobe: syz.6.1765:12523 failed to unregister, leaking uprobe [ 192.233005][T12539] i2c i2c-1: Invalid block write size 34 [ 192.326876][T12542] netlink: 'syz.5.1770': attribute type 4 has an invalid length. [ 192.337507][T12542] netlink: 'syz.5.1770': attribute type 4 has an invalid length. [ 192.385137][T12548] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1772'. [ 192.435730][T12547] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1769'. [ 192.550610][T12566] sp0: Synchronizing with TNC [ 192.592060][T12571] /dev/nullb0: Can't open blockdev [ 192.703859][T12579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.709562][T12579] Driver unsupported XDP return value 0 on prog (id 272) dev N/A, expect packet loss! [ 192.713295][T12571] uprobe: syz.5.1778:12571 failed to unregister, leaking uprobe [ 192.763388][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1782'. [ 192.777790][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.788231][T12581] macvlan2: entered promiscuous mode [ 192.790142][T12581] macvlan2: entered allmulticast mode [ 192.792593][T12581] bond0: entered promiscuous mode [ 192.794713][T12581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.800691][T12581] bond0: left promiscuous mode [ 192.818422][ T8520] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 192.978389][ T8520] usb 11-1: Using ep0 maxpacket: 8 [ 192.989794][ T8520] usb 11-1: config 0 interface 0 has no altsetting 0 [ 192.992671][ T8520] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 192.995806][ T8520] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.001013][ T8520] usb 11-1: config 0 descriptor?? [ 193.096402][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1786'. [ 193.409954][ T8520] hid_parser_main: 22 callbacks suppressed [ 193.409967][ T8520] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 193.414374][ T8520] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 193.424503][ T8520] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 193.427506][ T8520] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 193.430693][ T8520] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 193.433497][ T8520] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 193.613029][ T9] usb 11-1: USB disconnect, device number 15 [ 193.909564][T12631] /dev/nullb0: Can't open blockdev [ 193.927421][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 193.927434][ T40] audit: type=1804 audit(1770834669.428:768): pid=12631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1793" name="/newroot/294/file0/file0" dev="9p" ino=72614029 res=1 errno=0 [ 194.170821][T12655] Invalid source name [ 194.172231][T12655] UBIFS error (pid: 12655): cannot open "./file0", error -22 [ 194.217264][T12663] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 194.237904][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1799'. [ 194.355805][T12679] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1802'. [ 194.396041][ T40] audit: type=1804 audit(1770834669.898:769): pid=12682 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1803" name="/newroot/298/file0/file0" dev="9p" ino=72614029 res=1 errno=0 [ 194.471245][T12693] netlink: 'syz.7.1805': attribute type 10 has an invalid length. [ 194.484064][T12693] team0: Port device dummy0 added [ 194.487134][T12693] netlink: 'syz.7.1805': attribute type 10 has an invalid length. [ 194.499701][T12693] team0: Port device dummy0 removed [ 194.507869][T12693] .`: (slave dummy0): Enslaving as an active interface with an up link [ 194.549542][T12693] syzkaller0: entered promiscuous mode [ 194.551911][T12693] syzkaller0: entered allmulticast mode [ 194.628723][ T40] audit: type=1400 audit(1770834670.138:770): avc: denied { remount } for pid=12707 comm="syz.5.1808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 194.638156][T12712] bond4: option downdelay: invalid value (18446744073709551615) [ 194.641791][T12712] bond4: option downdelay: allowed values 0 - 2147483647 [ 194.645336][T12712] bond4 (unregistering): Released all slaves [ 194.732742][T12719] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 194.791825][T12724] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 194.809465][ T40] audit: type=1804 audit(1770834670.318:771): pid=12722 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1812" name="/newroot/74/file0/file0" dev="9p" ino=72614029 res=1 errno=0 [ 194.992986][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1818'. [ 195.024056][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1821'. [ 195.029598][T12753] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1821'. [ 195.185411][ T40] audit: type=1400 audit(1770834670.688:772): avc: denied { module_load } for pid=12759 comm="syz.5.1823" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 195.185922][T12761] kernel read not supported for file /policy (pid: 12761 comm: syz.5.1823) [ 195.250283][ T40] audit: type=1804 audit(1770834670.758:773): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1824" name="/newroot/429/file0/file0" dev="9p" ino=72614029 res=1 errno=0 [ 195.567991][ T40] audit: type=1400 audit(1770834671.068:774): avc: denied { unmount } for pid=8954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 195.592056][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1828'. [ 195.754929][T12795] program syz.2.1833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.864429][ T40] audit: type=1804 audit(1770834671.368:775): pid=12799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1834" name="/newroot/77/file0/file0" dev="9p" ino=72614029 res=1 errno=0 [ 196.014378][T12760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.018679][T12760] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.021432][T12760] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 196.024066][T12760] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 196.029684][T12760] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 196.256062][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1838'. [ 196.286284][T12810] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 196.289207][T12810] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 196.294726][T12810] vhci_hcd vhci_hcd.0: Device attached [ 196.310956][ T40] audit: type=1400 audit(1770834671.808:776): avc: denied { map } for pid=12825 comm="syz.2.1841" path="socket:[53085]" dev="sockfs" ino=53085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 196.367798][ T40] audit: type=1804 audit(1770834671.868:777): pid=12834 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1843" name="/newroot/274/file0/file0" dev="9p" ino=72614029 res=1 errno=0 [ 196.546223][T12840] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 196.548504][ T1473] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 196.563413][T12840] cramfs: wrong magic [ 196.571441][ T5996] usb 48-1: SetAddress Request (2) to port 0 [ 196.573650][ T5996] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 196.577149][T12841] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 196.708390][ T1473] usb 10-1: Using ep0 maxpacket: 32 [ 196.714481][ T1473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.728030][ T1473] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.735857][ T1473] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 196.744556][ T1473] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 196.749831][ T1473] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.760564][ T1473] usb 10-1: config 0 descriptor?? [ 196.923264][T12868] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 197.142803][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 197.145592][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 197.174186][T12810] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 197.176108][T12810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 197.179099][T12810] vhci_hcd vhci_hcd.0: Device attached [ 197.183367][T12883] vhci_hcd: connection closed [ 197.183604][ T6754] vhci_hcd vhci_hcd.5: stop threads [ 197.184941][T12823] vhci_hcd: connection reset by peer [ 197.185235][ T1473] usbhid 10-1:0.0: can't add hid device: -71 [ 197.185306][ T1473] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 197.185580][ T6754] vhci_hcd vhci_hcd.5: release socket [ 197.189997][ T1473] usb 10-1: USB disconnect, device number 17 [ 197.192292][ T6754] vhci_hcd vhci_hcd.5: disconnect device [ 197.200615][ T6754] vhci_hcd vhci_hcd.5: stop threads [ 197.202323][ T6754] vhci_hcd vhci_hcd.5: release socket [ 197.206427][ T6754] vhci_hcd vhci_hcd.5: disconnect device [ 197.318522][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 197.631255][T12894] kvm_pr_unimpl_wrmsr: 3 callbacks suppressed [ 197.631270][T12894] kvm: kvm [12893]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 198.048543][ T5938] Bluetooth: hci5: command 0x0c1a tx timeout [ 198.048578][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.172736][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.038430][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.040554][T12908] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 200.118481][ T5937] Bluetooth: hci5: command 0x0c1a tx timeout [ 200.928737][T12908] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.931285][T12908] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 200.975011][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1871'. [ 201.001751][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 201.001767][ T40] audit: type=1804 audit(1770834676.518:785): pid=12925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1873" name="/newroot/445/file0/file0" dev="9p" ino=72614029 res=1 errno=0 [ 201.102740][T12932] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1876'. [ 201.187973][T12943] 9pnet_virtio: no channels available for device ./file0 [ 201.252340][T12945] bridge0: port 1() entered disabled state [ 201.268365][ T40] audit: type=1804 audit(1770834676.778:786): pid=12951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1884" name="/newroot/447/file0/file0" dev="9p" ino=72614029 res=1 errno=0 [ 201.276400][T12949] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=787 (25184 ns) > initial count (4096 ns). Using initial count to start timer. [ 201.297060][T12945]  (unregistering): left allmulticast mode [ 201.300127][T12945]  (unregistering): left promiscuous mode [ 201.303050][T12945] bridge0: port 1() entered disabled state [ 201.320536][ T40] audit: type=1400 audit(1770834676.818:787): avc: denied { map } for pid=12959 comm="syz.6.1886" path="socket:[55477]" dev="sockfs" ino=55477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 201.496662][T12970] netlink: 'syz.2.1887': attribute type 8 has an invalid length. [ 201.500692][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 201.542736][ T40] audit: type=1400 audit(1770834677.048:788): avc: denied { mounton } for pid=12979 comm="syz.2.1891" path="/syzcgroup/unified/syz2" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 201.550867][T12981] hfsplus: unable to find HFS+ superblock [ 201.587505][T12989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12989 comm=syz.7.1893 [ 201.639879][ T5996] usb 48-1: device descriptor read/8, error -110 [ 201.659346][ T40] audit: type=1804 audit(1770834677.158:789): pid=12998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1896" name="/newroot/451/file0/file0" dev="9p" ino=72614029 res=1 errno=0 [ 201.717618][ T40] audit: type=1400 audit(1770834677.218:790): avc: denied { connect } for pid=12999 comm="syz.6.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 201.842357][T13004] xt_hashlimit: size too large, truncated to 1048576 [ 201.905648][ T7482] libceph: connect (1)[c::]:6789 error -101 [ 201.907743][ T7482] libceph: mon0 (1)[c::]:6789 connect error [ 202.029988][ T5996] usb usb48-port1: attempt power cycle [ 202.068387][ T53] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 202.118382][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.170391][ T7482] libceph: connect (1)[c::]:6789 error -101 [ 202.172397][ T7482] libceph: mon0 (1)[c::]:6789 connect error [ 202.239261][ T53] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 202.242013][ T53] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.248855][ T53] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 202.252441][ T40] audit: type=1400 audit(1770834677.758:791): avc: denied { override_creds } for pid=13031 comm="syz.5.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 202.258361][ T53] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 202.268398][ T53] usb 11-1: Manufacturer: syz [ 202.271173][ T53] usb 11-1: config 0 descriptor?? [ 202.328335][ T53] rc_core: IR keymap rc-hauppauge not found [ 202.330335][ T53] Registered IR keymap rc-empty [ 202.332530][ T53] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 202.337236][ T53] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input35 [ 202.482220][T13051] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 202.553405][ T5976] usb 11-1: USB disconnect, device number 16 [ 202.588883][ T5996] usb usb48-port1: unable to enumerate USB device [ 202.652672][T13062] f2fs: Unknown parameter 'norecoveryI!4a[& Q ɡ*5ٍZ'&@*Ktv)T0)U1'F.B!z9' [ 202.658769][T13062] squashfs: Unknown parameter '$' [ 202.689009][ T7482] libceph: connect (1)[c::]:6789 error -101 [ 202.691157][ T7482] libceph: mon0 (1)[c::]:6789 connect error [ 202.704753][T13014] ceph: No mds server is up or the cluster is laggy [ 202.888100][ T40] audit: type=1400 audit(1770834678.388:792): avc: denied { append } for pid=13075 comm="syz.7.1917" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 202.947686][T13081] sp0: Synchronizing with TNC [ 202.998393][ T5937] Bluetooth: hci5: command 0x0c1a tx timeout [ 203.086089][T13096] efs: device does not support 512 byte blocks [ 203.090923][T13096] device does not support 512 byte blocks [ 203.090923][T13096] [ 203.132346][T13102] autofs4:pid:13102:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 203.137390][T13102] autofs4:pid:13102:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 203.191537][T13109] netlink: 'syz.5.1929': attribute type 1 has an invalid length. [ 203.220447][T13109] 8021q: adding VLAN 0 to HW filter on device bond68 [ 203.228346][ T40] audit: type=1400 audit(1770834678.728:793): avc: denied { listen } for pid=13114 comm="syz.2.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 203.254175][T13109] bond68: (slave veth5): Enslaving as an active interface with a down link [ 203.273014][T13109] netlink: 'syz.5.1929': attribute type 10 has an invalid length. [ 203.275634][T13109] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1929'. [ 203.316355][T13127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13127 comm=syz.5.1936 N [ 203.359490][ T40] audit: type=1400 audit(1770834678.868:794): avc: denied { read } for pid=13122 comm="syz.7.1934" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 ev&[ 203.382215][T13132] tipc: Enabling of bearer rejected, failed to enable media [ 203.386492][T13132] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 203.456303][T13139] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1941'. [ 203.459737][T13139] openvswitch: netlink: Flow key attr not present in new flow. [ 203.535053][T13150] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1945'. [ 203.557634][T13152] comedi: valid board names for 8255 driver are: [ 203.563439][T13152] 8255 [ 203.564364][T13152] comedi: valid board names for vmk80xx driver are: [ 203.566286][T13152] vmk80xx [ 203.567215][T13152] comedi: valid board names for usbduxsigma driver are: [ 203.569359][T13152] usbduxsigma [ 203.570354][T13152] comedi: valid board names for usbduxfast driver are: [ 203.572288][T13152] usbduxfast [ 203.573283][T13152] comedi: valid board names for usbdux driver are: [ 203.575166][T13152] usbdux [ 203.576037][T13152] comedi: valid board names for ni6501 driver are: [ 203.577938][T13152] ni6501 [ 203.580310][T13152] comedi: valid board names for dt9812 driver are: [ 203.582202][T13152] dt9812 [ 203.583542][T13152] comedi: valid board names for ni_labpc_cs driver are: [ 203.585582][T13152] ni_labpc_cs [ 203.586569][T13152] comedi: valid board names for ni_daq_700 driver are: [ 203.589556][T13152] ni_daq_700 [ 203.590560][T13152] comedi: valid board names for labpc_pci driver are: [ 203.592465][T13152] labpc_pci [ 203.593437][T13152] comedi: valid board names for adl_pci9118 driver are: [ 203.595432][T13152] pci9118dg [ 203.596382][T13152] pci9118hg [ 203.597334][T13152] pci9118hr [ 203.598361][T13152] comedi: valid board names for 8255_pci driver are: [ 203.600280][T13152] 8255_pci [ 203.601227][T13152] comedi: valid board names for s526 driver are: [ 203.603140][T13152] s526 [ 203.603998][T13152] comedi: valid board names for multiq3 driver are: [ 203.605888][T13152] multiq3 [ 203.606789][T13152] comedi: valid board names for pcmuio driver are: [ 203.608775][T13152] pcmuio48 [ 203.609740][T13152] pcmuio96 [ 203.610660][T13152] comedi: valid board names for pcmmio driver are: [ 203.612517][T13152] pcmmio [ 203.613382][T13152] comedi: valid board names for pcmda12 driver are: [ 203.615265][T13152] pcmda12 [ 203.616160][T13152] comedi: valid board names for pcmad driver are: [ 203.618392][T13152] pcmad12 [ 203.619275][T13159] x_tables: duplicate underflow at hook 3 [ 203.619402][T13152] pcmad16 [ 203.619408][T13152] comedi: valid board names for ni_labpc driver are: [ 203.624253][T13152] lab-pc-1200 [ 203.625273][T13152] lab-pc-1200ai [ 203.626311][T13152] lab-pc+ [ 203.627224][T13152] comedi: valid board names for atmio16 driver are: [ 203.629223][T13152] atmio16 [ 203.630140][T13152] atmio16d [ 203.631057][T13152] comedi: valid board names for ni_at_ao driver are: [ 203.632940][T13152] at-ao-6 [ 203.633856][T13152] at-ao-10 [ 203.634787][T13152] comedi: valid board names for ni_at_a2150 driver are: [ 203.636730][T13152] ni_at_a2150 [ 203.637754][T13152] comedi: valid board names for adq12b driver are: [ 203.640749][T13152] adq12b [ 203.641715][T13152] comedi: valid board names for mpc624 driver are: [ 203.643598][T13152] mpc624 [ 203.644467][T13152] comedi: valid board names for c6xdigio driver are: [ 203.646379][T13152] c6xdigio [ 203.647324][T13152] comedi: valid board names for aio_iiro_16 driver are: [ 203.649627][T13152] aio_iiro_16 [ 203.650644][T13152] comedi: valid board names for aio_aio12_8 driver are: [ 203.652619][T13152] aio_aio12_8 [ 203.653625][T13152] aio_ai12_8 [ 203.654587][T13152] aio_ao12_4 [ 203.655583][T13152] comedi: valid board names for fl512 driver are: [ 203.657445][T13152] fl512 [ 203.658724][T13152] comedi: valid board names for dmm32at driver are: [ 203.660635][T13152] dmm32at [ 203.661550][T13152] comedi: valid board names for dt282x driver are: [ 203.663435][T13152] dt2821 [ 203.664322][T13152] dt2821-f [ 203.665278][T13152] dt2821-g [ 203.666218][T13152] dt2823 [ 203.667095][T13152] dt2824-pgh [ 203.668082][T13152] dt2824-pgl [ 203.669258][T13152] dt2825 [ 203.677933][T13152] dt2827 [ 203.680908][T13152] dt2828 [ 203.681800][T13152] dt2829 [ 203.682660][T13152] dt21-ez [ 203.683560][T13152] dt23-ez [ 203.684481][T13152] dt24-ez [ 203.685412][T13152] dt24-ez-pgl [ 203.686546][T13152] comedi: valid board names for dt2817 driver are: [ 203.688520][T13152] dt2817 [ 203.689408][T13152] comedi: valid board names for dt2815 driver are: [ 203.691389][T13152] dt2815 [ 203.692292][T13152] comedi: valid board names for dt2814 driver are: [ 203.694147][T13152] dt2814 [ 203.695009][T13152] comedi: valid board names for dt2811 driver are: [ 203.696869][T13152] dt2811-pgh [ 203.697888][T13152] dt2811-pgl [ 203.699021][T13152] comedi: valid board names for dt2801 driver are: [ 203.700907][T13152] dt2801 [ 203.701792][T13152] comedi: valid board names for das6402 driver are: [ 203.703669][T13152] das6402-12 [ 203.704922][T13152] das6402-16 [ 203.705993][T13152] comedi: valid board names for das1800 driver are: [ 203.707929][T13152] das-1701st [ 203.710018][T13152] das-1701st-da [ 203.711092][T13152] das-1702st [ 203.712047][T13152] das-1702st-da [ 203.713069][T13152] das-1702hr [ 203.714049][T13152] das-1702hr-da [ 203.715191][T13152] das-1701ao [ 203.716151][T13152] das-1702ao [ 203.717110][T13152] das-1801st [ 203.718598][T13169] 9pnet_virtio: no channels available for device syz [ 203.718768][T13152] das-1801st-da [ 203.722222][T13152] das-1802st [ 203.723343][T13152] das-1802st-da [ 203.724661][T13152] das-1802hr [ 203.726564][T13152] das-1802hr-da [ 203.727890][T13152] das-1801hc [ 203.730518][T13152] das-1802hc [ 203.731543][T13152] das-1801ao [ 203.732506][T13152] das-1802ao [ 203.733503][T13152] comedi: valid board names for das800 driver are: [ 203.735349][T13152] das-800 [ 203.736264][T13152] cio-das800 [ 203.737236][T13152] das-801 [ 203.738145][T13152] cio-das801 [ 203.739514][T13152] das-802 [ 203.740536][T13152] cio-das802 [ 203.741919][T13152] cio-das802/16 [ 203.743681][T13152] comedi: valid board names for isa-das08 driver are: [ 203.745645][T13152] isa-das08 [ 203.746638][T13152] das08-pgm [ 203.747701][T13152] das08-pgh [ 203.750179][T13152] das08-pgl [ 203.751452][T13152] das08-aoh [ 203.752816][T13152] das08-aol [ 203.753784][T13152] das08-aom [ 203.754766][T13152] das08/jr-ao [ 203.755792][T13152] das08jr-16-ao [ 203.756822][T13152] pc104-das08 [ 203.757853][T13152] das08jr/16 [ 203.758927][T13152] comedi: valid board names for das16m1 driver are: [ 203.760778][T13152] das16m1 [ 203.761681][T13152] comedi: valid board names for dac02 driver are: [ 203.763507][T13152] dac02 [ 203.764344][T13152] comedi: valid board names for rti802 driver are: [ 203.766367][T13152] rti802 [ 203.767224][T13152] comedi: valid board names for rti800 driver are: [ 203.777799][T13152] rti800 [ 203.778976][T13152] rti815 [ 203.779834][T13152] comedi: valid board names for pcm3724 driver are: [ 203.781715][T13152] pcm3724 [ 203.782613][T13152] comedi: valid board names for pcl818 driver are: [ 203.784451][T13152] pcl818l [ 203.785359][T13152] pcl818h [ 203.786261][T13152] pcl818hd [ 203.787178][T13152] pcl818hg [ 203.788106][T13152] pcl818 [ 203.789408][T13152] pcl718 [ 203.792210][T13152] pcm3718 [ 203.793289][T13152] comedi: valid board names for pcl816 driver are: [ 203.795563][T13152] pcl816 [ 203.796438][T13152] pcl814b [ 203.797468][T13152] comedi: valid board names for pcl812 driver are: [ 203.799750][T13152] pcl812 [ 203.800861][T13152] pcl812pg [ 203.801825][T13152] acl8112pg [ 203.802951][T13152] acl8112dg [ 203.803894][T13152] acl8112hg [ 203.804849][T13152] a821pgl [ 203.805771][T13152] a821pglnda [ 203.806735][T13152] a821pgh [ 203.807644][T13152] a822pgl [ 203.808755][T13152] a822pgh [ 203.809758][T13152] a823pgl [ 203.810650][T13152] a823pgh [ 203.811569][T13152] pcl813 [ 203.812442][T13152] pcl813b [ 203.813403][T13152] acl8113 [ 203.814313][T13152] iso813 [ 203.815166][T13152] acl8216 [ 203.816070][T13152] a826pg [ 203.816930][T13152] comedi: valid board names for pcl730 driver are: [ 203.818929][T13152] pcl730 [ 203.819846][T13152] iso730 [ 203.820727][T13152] acl7130 [ 203.821666][T13152] pcm3730 [ 203.822567][T13152] pcl725 [ 203.823425][T13152] p8r8dio [ 203.824322][T13152] acl7225b [ 203.825258][T13152] p16r16dio [ 203.826211][T13152] pcl733 [ 203.827070][T13152] pcl734 [ 203.827950][T13152] opmm-1616-xt [ 203.830049][T13152] pearl-mm-p [ 203.831048][T13152] ir104-pbf [ 203.832003][T13152] comedi: valid board names for pcl726 driver are: [ 203.833925][T13152] pcl726 [ 203.835253][T13152] pcl727 [ 203.836111][T13152] pcl728 [ 203.836974][T13152] acl6126 [ 203.837909][T13152] acl6128 [ 203.838940][T13152] comedi: valid board names for pcl724 driver are: [ 203.840827][T13152] pcl724 [ 203.841699][T13152] pcl722 [ 203.842561][T13152] pcl731 [ 203.843428][T13152] acl7122 [ 203.844341][T13152] acl7124 [ 203.845264][T13152] pet48dio [ 203.846187][T13152] pcmio48 [ 203.847088][T13152] onyx-mm-dio [ 203.848095][T13152] comedi: valid board names for pcl711 driver are: [ 203.850035][T13152] pcl711 [ 203.850908][T13152] pcl711b [ 203.851810][T13152] acl8112hg [ 203.852805][T13152] acl8112dg [ 203.853785][T13152] comedi: valid board names for amplc_pc263 driver are: [ 203.855766][T13152] pc263 [ 203.856629][T13152] comedi: valid board names for amplc_pc236 driver are: [ 203.858670][T13152] pc36at [ 203.859541][T13152] comedi: valid board names for amplc_dio200 driver are: [ 203.861557][T13152] pc212e [ 203.862443][T13152] pc214e [ 203.863319][T13152] pc215e [ 203.864184][T13152] pc218e [ 203.865048][T13152] pc272e [ 203.865915][T13152] comedi: valid board names for comedi_parport driver are: [ 203.867979][T13152] comedi_parport [ 203.869106][T13152] comedi: valid board names for comedi_test driver are: [ 203.871103][T13152] comedi_test [ 203.872108][T13152] comedi: valid board names for comedi_bond driver are: [ 203.874100][T13152] comedi_bond [ 203.947169][T13195] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 204.134511][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1964'. [ 204.138058][T13214] veth1_macvtap: default FDB implementation only supports local addresses [ 204.208393][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.267076][T13225] netlink: 'syz.5.1968': attribute type 1 has an invalid length. [ 204.270962][T13225] netlink: 16138 bytes leftover after parsing attributes in process `syz.5.1968'. [ 204.396528][T13217] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1966'. [ 204.402233][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1966'. [ 204.574821][T13254] SELinux: truncated policydb string identifier [ 204.577032][T13254] SELinux: failed to load policy [ 204.608070][T13251] program syz.5.1978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.728618][T13266] fuse: Unknown parameter 'default_permissi#' [ 205.523263][T13318] binfmt_misc: register: failed to install interpreter file ./file1 [ 205.585732][T13318] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.023373][T13374] __nla_validate_parse: 7 callbacks suppressed [ 206.023385][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2018'. [ 206.031382][T13374] xt_hashlimit: size too large, truncated to 1048576 [ 206.086839][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2018'. [ 206.094587][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 206.094598][ T40] audit: type=1400 audit(1770834681.598:812): avc: denied { read } for pid=13386 comm="syz.5.2022" lport=60727 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 206.124180][T13391] Unsupported ieee802154 address type: 0 [ 206.126390][ T40] audit: type=1400 audit(1770834681.628:813): avc: denied { bind } for pid=13389 comm="syz.7.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.207194][T13391] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 206.211390][T13391] netlink: 'syz.7.2023': attribute type 23 has an invalid length. [ 206.788389][ T1473] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 206.978717][T13413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.983416][T13413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.000368][T13413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.004074][T13413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.018992][ T1473] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 207.021463][ T1473] usb 12-1: can't read configurations, error -71 [ 207.025619][T13421] tmpfs: Bad value for 'mpol' [ 207.142986][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2037'. [ 207.221984][T13441] netlink: 'syz.5.2040': attribute type 29 has an invalid length. [ 207.226461][T13441] netlink: 'syz.5.2040': attribute type 29 has an invalid length. [ 207.227799][T13437] netlink: 'syz.2.2039': attribute type 13 has an invalid length. [ 207.236565][T13437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2039'. [ 207.551045][T13474] openvswitch: netlink: IP tunnel dst address not specified [ 207.563202][T13476] ptrace attach of "/syz-executor exec"[8954] was attempted by "/syz-executor exec"[13476] [ 207.582551][T13476] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.2051'. [ 207.794711][T13499] veth1_to_batadv: entered promiscuous mode [ 208.068735][ T140] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 208.218389][ T140] usb 11-1: Using ep0 maxpacket: 8 [ 208.222082][ T140] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 208.225844][ T140] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.234719][ T140] pvrusb2: Hardware description: Terratec Grabster AV400 [ 208.237696][ T140] pvrusb2: ********** [ 208.239719][ T140] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 208.244076][ T140] pvrusb2: Important functionality might not be entirely working. [ 208.247506][ T140] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 208.253053][ T140] pvrusb2: ********** [ 208.436054][ T2492] pvrusb2: Invalid write control endpoint [ 208.447068][T13504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.449239][T13504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 208.449336][ T34] usb 11-1: USB disconnect, device number 17 [ 208.451304][T13504] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 208.468469][ T2492] pvrusb2: Invalid write control endpoint [ 208.470700][ T2492] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 208.474041][ T2492] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 208.477144][ T2492] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 208.480805][ T2492] pvrusb2: Device being rendered inoperable [ 208.483286][ T2492] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 208.486234][ T2492] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 208.498494][ T2492] pvrusb2: Attached sub-driver cx25840 [ 208.500399][ T2492] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 208.503752][ T2492] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 208.511787][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.515418][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.520162][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.523493][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.526831][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.531208][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.534556][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.537819][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.541391][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.544720][T13513] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 208.586131][ T40] audit: type=1400 audit(1770834684.088:814): avc: denied { lock } for pid=13509 comm="syz.6.2060" path="/dev/dri/renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 208.699738][ T40] audit: type=1400 audit(1770834684.208:815): avc: denied { ioctl } for pid=13517 comm="syz.2.2062" path="socket:[59555]" dev="sockfs" ino=59555 ioctlcmd=0x42c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.958344][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 210.518421][ T5937] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.520600][ T5938] Bluetooth: hci5: command 0x0c1a tx timeout [ 210.553364][T13474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.596522][T13524] gfs2: path_lookup on \\8< $$&6n @M\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 222.600044][T14324] CUSE: unknown device info "&b%ZW)3\my " [ 222.602278][T14324] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 222.606726][T14324] CUSE: DEVNAME unspecified [ 222.702342][T14337] __nla_validate_parse: 4 callbacks suppressed [ 222.702355][T14337] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2321'. [ 223.033667][T14348] syzkaller0: entered promiscuous mode [ 223.036070][T14348] syzkaller0: entered allmulticast mode [ 223.071666][T14362] SELinux: Context system_u:object_r:selinux_config_t:s0 is not valid (left unmapped). [ 223.075088][ T40] audit: type=1400 audit(1770834698.578:944): avc: denied { relabelto } for pid=14361 comm="syz.7.2331" name="204" dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:selinux_config_t:s0" [ 223.088364][ T40] audit: type=1400 audit(1770834698.578:945): avc: denied { associate } for pid=14361 comm="syz.7.2331" name="204" dev="tmpfs" ino=1094 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:selinux_config_t:s0" [ 223.101450][ T40] audit: type=1400 audit(1770834698.598:946): avc: denied { remove_name } for pid=11478 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:selinux_config_t:s0" [ 223.112326][ T40] audit: type=1400 audit(1770834698.608:947): avc: denied { rmdir } for pid=11478 comm="syz-executor" name="204" dev="tmpfs" ino=1094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:selinux_config_t:s0" [ 223.121780][ T40] audit: type=1400 audit(1770834698.628:948): avc: denied { read write } for pid=14364 comm="syz.7.2332" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 223.398060][T14375] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2335'. [ 223.791738][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 223.791751][ T40] audit: type=1400 audit(1770834699.298:951): avc: denied { create } for pid=14392 comm="syz.5.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 223.800902][T14393] netlink: 'syz.5.2342': attribute type 1 has an invalid length. [ 223.830085][T14395] netlink: 'syz.6.2343': attribute type 9 has an invalid length. [ 223.833362][T14395] netlink: 'syz.6.2343': attribute type 11 has an invalid length. [ 223.836370][T14395] netlink: 'syz.6.2343': attribute type 12 has an invalid length. [ 223.840430][T14395] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.2343'. [ 223.843535][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 223.924456][T14402] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 223.997122][T14412] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 224.001145][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2351'. [ 224.004334][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2351'. [ 224.007288][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2351'. [ 224.010529][T14409] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 224.014600][T14409] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 224.017943][T14409] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 224.053485][T14414] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 224.275288][T14440] x_tables: duplicate underflow at hook 2 [ 224.277303][T14440] x_tables: duplicate underflow at hook 2 [ 224.280341][T14440] x_tables: duplicate underflow at hook 2 [ 224.282316][T14440] x_tables: duplicate underflow at hook 2 [ 224.283593][T14442] ------------[ cut here ]------------ [ 224.284256][T14440] x_tables: duplicate underflow at hook 2 [ 224.286587][T14442] 1 [ 224.286596][T14442] WARNING: mm/page_alloc.c:5216 at __alloc_frozen_pages_noprof+0x1e8a/0x2410, CPU#2: syz.5.2361/14442 [ 224.288950][T14440] x_tables: duplicate underflow at hook 2 [ 224.289710][T14442] Modules linked in: [ 224.293264][T14440] x_tables: duplicate underflow at hook 2 [ 224.295786][T14442] [ 224.297150][T14440] x_tables: duplicate underflow at hook 2 [ 224.299373][T14442] CPU: 2 UID: 0 PID: 14442 Comm: syz.5.2361 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.299403][T14442] Tainted: [L]=SOFTLOCKUP [ 224.299411][T14442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.299422][T14442] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 224.299457][T14442] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 c3 bc 0d 00 e9 05 fa ff ff c6 05 43 6a 3b 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 3e e4 81 11 48 8d b8 70 09 00 [ 224.299474][T14442] RSP: 0018:ffffc90003eff7a0 EFLAGS: 00010246 [ 224.299491][T14442] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 224.299502][T14442] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 224.299513][T14442] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 224.299525][T14442] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 224.299535][T14442] R13: 1ffff920007dff3c R14: 1ffff920007dff0a R15: 0000000000000016 [ 224.299548][T14442] FS: 00007ffa419d46c0(0000) GS:ffff8880d67b3000(0000) knlGS:0000000000000000 [ 224.299582][T14442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.299596][T14442] CR2: 00007ffa419d3ff8 CR3: 0000000058591000 CR4: 0000000000352ef0 [ 224.299608][T14442] Call Trace: [ 224.299615][T14442] [ 224.299621][T14442] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.302551][T14440] x_tables: duplicate underflow at hook 2 [ 224.306084][T14442] ? is_bpf_text_address+0x94/0x1a0 [ 224.307551][T14440] x_tables: duplicate underflow at hook 2 [ 224.310830][T14442] ? kernel_text_address+0x8d/0x100 [ 224.310853][T14442] ? widen_string+0xdb/0x2f0 [ 224.356803][T14442] ? __kernel_text_address+0xd/0x30 [ 224.358652][T14442] ? unwind_get_return_address+0x59/0xa0 [ 224.360562][T14442] ? arch_stack_walk+0xa6/0xf0 [ 224.362136][T14442] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.364216][T14442] ? stack_trace_save+0x8e/0xc0 [ 224.365871][T14442] ? stack_depot_save_flags+0x27/0x9d0 [ 224.367649][T14442] ? __lock_acquire+0x4a5/0x2630 [ 224.369484][T14442] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.371590][T14442] ? policy_nodemask+0xed/0x4f0 [ 224.373199][T14442] alloc_pages_mpol+0x1fb/0x550 [ 224.374826][T14442] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 224.376593][T14442] ___kmalloc_large_node+0x104/0x150 [ 224.378468][T14442] __kmalloc_large_node_noprof+0x1c/0x70 [ 224.380492][T14442] ? drm_syncobj_array_find+0x35/0x3a0 [ 224.382319][T14442] __kmalloc_noprof+0x6b1/0x9c0 [ 224.384028][T14442] ? __lock_acquire+0x4a5/0x2630 [ 224.385675][T14442] ? drm_syncobj_array_find+0x35/0x3a0 [ 224.387465][T14442] drm_syncobj_array_find+0x35/0x3a0 [ 224.389384][T14442] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 224.391556][T14442] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 224.393753][T14442] ? find_held_lock+0x2b/0x80 [ 224.395691][T14442] ? drm_dev_exit+0x41/0x60 [ 224.397348][T14442] ? drm_dev_exit+0x41/0x60 [ 224.399002][T14442] drm_ioctl_kernel+0x1f3/0x3e0 [ 224.400720][T14442] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 224.402947][T14442] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 224.404711][T14442] drm_ioctl+0x5e6/0xc60 [ 224.406355][T14442] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 224.408521][T14442] ? __pfx_drm_ioctl+0x10/0x10 [ 224.410121][T14442] ? selinux_file_ioctl+0x139/0x290 [ 224.411799][T14442] ? selinux_file_ioctl+0xb4/0x290 [ 224.413442][T14442] ? __pfx_drm_ioctl+0x10/0x10 [ 224.414963][T14442] __x64_sys_ioctl+0x18e/0x210 [ 224.416596][T14442] do_syscall_64+0x106/0xf80 [ 224.418118][T14442] ? clear_bhb_loop+0x40/0x90 [ 224.419729][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.421546][T14442] RIP: 0033:0x7ffa40b9bf79 [ 224.422969][T14442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.428865][T14442] RSP: 002b:00007ffa419d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.431444][T14442] RAX: ffffffffffffffda RBX: 00007ffa40e16180 RCX: 00007ffa40b9bf79 [ 224.433920][T14442] RDX: 0000200000000180 RSI: 00000000c03064ca RDI: 0000000000000003 [ 224.436341][T14442] RBP: 00007ffa40c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 224.439002][T14442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.441434][T14442] R13: 00007ffa40e16218 R14: 00007ffa40e16180 R15: 00007ffcbc7415a8 [ 224.443821][T14442] [ 224.444815][T14442] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.447127][T14442] CPU: 2 UID: 0 PID: 14442 Comm: syz.5.2361 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.450554][T14442] Tainted: [L]=SOFTLOCKUP [ 224.451928][T14442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.454980][T14442] Call Trace: [ 224.456072][T14442] [ 224.456988][T14442] dump_stack_lvl+0x100/0x190 [ 224.458460][T14442] vpanic+0x20d/0x630 [ 224.459735][T14442] panic+0xd1/0xd1 [ 224.460986][T14442] ? __pfx_panic+0x10/0x10 [ 224.462423][T14442] ? check_panic_on_warn+0x1f/0x90 [ 224.464017][T14442] check_panic_on_warn.cold+0x19/0x34 [ 224.465740][T14442] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 224.467667][T14442] __warn.cold+0x191/0x2f8 [ 224.469052][T14442] __report_bug+0x296/0x3d0 [ 224.470448][T14442] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 224.472403][T14442] ? __pfx___report_bug+0x10/0x10 [ 224.474010][T14442] ? __lock_acquire+0x4a5/0x2630 [ 224.475518][T14442] ? __lock_acquire+0x4a5/0x2630 [ 224.477065][T14442] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 224.478973][T14442] report_bug+0xb2/0x220 [ 224.480258][T14442] ? __alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 224.482175][T14442] handle_bug+0x166/0x2a0 [ 224.483558][T14442] exc_invalid_op+0x17/0x50 [ 224.485032][T14442] asm_exc_invalid_op+0x1a/0x20 [ 224.486496][T14442] RIP: 0010:__alloc_frozen_pages_noprof+0x1e8a/0x2410 [ 224.488543][T14442] Code: 48 8d bb 70 05 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 84 0f fa ff ff e8 c3 bc 0d 00 e9 05 fa ff ff c6 05 43 6a 3b 0e 01 90 <0f> 0b 90 e9 bd e4 ff ff 65 48 8b 05 3e e4 81 11 48 8d b8 70 09 00 [ 224.494416][T14442] RSP: 0018:ffffc90003eff7a0 EFLAGS: 00010246 [ 224.496366][T14442] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 224.499418][T14442] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 224.502204][T14442] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 224.504709][T14442] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 224.507212][T14442] R13: 1ffff920007dff3c R14: 1ffff920007dff0a R15: 0000000000000016 [ 224.509748][T14442] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 224.511741][T14442] ? is_bpf_text_address+0x94/0x1a0 [ 224.513412][T14442] ? kernel_text_address+0x8d/0x100 [ 224.515082][T14442] ? widen_string+0xdb/0x2f0 [ 224.516625][T14442] ? __kernel_text_address+0xd/0x30 [ 224.518277][T14442] ? unwind_get_return_address+0x59/0xa0 [ 224.520047][T14442] ? arch_stack_walk+0xa6/0xf0 [ 224.521603][T14442] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.523605][T14442] ? stack_trace_save+0x8e/0xc0 [ 224.525155][T14442] ? stack_depot_save_flags+0x27/0x9d0 [ 224.526895][T14442] ? __lock_acquire+0x4a5/0x2630 [ 224.528470][T14442] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.530392][T14442] ? policy_nodemask+0xed/0x4f0 [ 224.531931][T14442] alloc_pages_mpol+0x1fb/0x550 [ 224.533511][T14442] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 224.535248][T14442] ___kmalloc_large_node+0x104/0x150 [ 224.536934][T14442] __kmalloc_large_node_noprof+0x1c/0x70 [ 224.538737][T14442] ? drm_syncobj_array_find+0x35/0x3a0 [ 224.540498][T14442] __kmalloc_noprof+0x6b1/0x9c0 [ 224.542065][T14442] ? __lock_acquire+0x4a5/0x2630 [ 224.543650][T14442] ? drm_syncobj_array_find+0x35/0x3a0 [ 224.545416][T14442] drm_syncobj_array_find+0x35/0x3a0 [ 224.547113][T14442] drm_syncobj_timeline_wait_ioctl+0x236/0x390 [ 224.549119][T14442] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 224.551236][T14442] ? find_held_lock+0x2b/0x80 [ 224.552751][T14442] ? drm_dev_exit+0x41/0x60 [ 224.554225][T14442] ? drm_dev_exit+0x41/0x60 [ 224.555688][T14442] drm_ioctl_kernel+0x1f3/0x3e0 [ 224.557244][T14442] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 224.559371][T14442] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 224.561118][T14442] drm_ioctl+0x5e6/0xc60 [ 224.562483][T14442] ? __pfx_drm_syncobj_timeline_wait_ioctl+0x10/0x10 [ 224.564599][T14442] ? __pfx_drm_ioctl+0x10/0x10 [ 224.566179][T14442] ? selinux_file_ioctl+0x139/0x290 [ 224.567854][T14442] ? selinux_file_ioctl+0xb4/0x290 [ 224.569503][T14442] ? __pfx_drm_ioctl+0x10/0x10 [ 224.571030][T14442] __x64_sys_ioctl+0x18e/0x210 [ 224.572594][T14442] do_syscall_64+0x106/0xf80 [ 224.574094][T14442] ? clear_bhb_loop+0x40/0x90 [ 224.575623][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.577552][T14442] RIP: 0033:0x7ffa40b9bf79 [ 224.579006][T14442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.585119][T14442] RSP: 002b:00007ffa419d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.587771][T14442] RAX: ffffffffffffffda RBX: 00007ffa40e16180 RCX: 00007ffa40b9bf79 [ 224.590290][T14442] RDX: 0000200000000180 RSI: 00000000c03064ca RDI: 0000000000000003 [ 224.592804][T14442] RBP: 00007ffa40c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 224.595299][T14442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.597970][T14442] R13: 00007ffa40e16218 R14: 00007ffa40e16180 R15: 00007ffcbc7415a8 [ 224.600514][T14442] [ 224.602260][T14442] Kernel Offset: disabled [ 224.603647][T14442] Rebooting in 86400 seconds..