last executing test programs: 5.76549091s ago: executing program 0 (id=37): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r6, @ANYBLOB="cf0c00000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="0a000600ffffffffffff000006001200000000000c00810005000100fa000000040013000600b500b70200000600ed00170000001800bd00e9002c3602008100000800004600c23d01000c0006001401050000000800bd00070003000500740001000000050019"], 0xa8}}, 0x4800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x7c4, 0x7}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x4000) ioprio_get$uid(0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000200)={0xe9db, 0x59, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 5.689167101s ago: executing program 0 (id=38): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x20000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) bind$bt_hci(r0, &(0x7f0000000c00)={0x1f, 0x2, 0x1}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000008002000050000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000340), 0xca, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600140000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) fchmod(0xffffffffffffffff, 0x0) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGID(r8, 0x80084502, &(0x7f0000000100)=""/178) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ed) mount$nfs4(&(0x7f0000000480)='127.0.0.1:/\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,vers=4.1,clientaddr=1']) 5.099857152s ago: executing program 0 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7002fbdbdf251000000008000300", @ANYRES32=r1, @ANYBLOB="f8000600", @ANYRES32=r3, @ANYBLOB="08003b0067010000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\b', @ANYRES16=r5, @ANYBLOB="59cffeffffff01000000080000000c0001800600010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000940)={0x18c, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x65}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x7}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xe4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5e67}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x703eb4fa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x804}, 0x4040081) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r11, 0x4008586f, &(0x7f00000000c0)={0xefe4, 0xfffffffc}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x7fffffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x408, 0xa0, 0x1}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r14 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r14, 0x6, 0x0, 0x0, 0x0) r15 = fsmount(r14, 0x1, 0x0) fchdir(r15) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r13}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 4.686774189s ago: executing program 0 (id=51): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) iopl(0x3) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x28, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x47}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fanotify_init(0x1200, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) close(0x3) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1e0308004d6b71ef288563", @ANYRESDEC=r5, @ANYRES8=r3, @ANYRES32=r0], 0xffdd) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x101020, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) preadv(r8, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/166, 0x1f8}], 0x1, 0xfffffff7, 0xc84d) close(0x3) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf253800000008000300", @ANYRES32=r10, @ANYBLOB="15a774d6e4400f7f2f8b653e672e8a54f380ade14791bf62a12a98047302b3cd65d7e6a11bd6cfc42232e23b5ab327ea34aa7c6960a408d9a9c9de564b9a83fd480d692cf900801131ac0edd9ff431881d390edba7c03100ccfce74f1b692793a201c871d8a37e5f24268415f0a65f26f1d47e58c0f3344ae2130b499c219788877f1cba8dc9f202ef62f16a57e5b0367914d746f0509ed41a4e8e22beab74f4e6af79781dff79b2dea5f3695184a9c2bb64e084aca1818ceccebe37ae19e92cfcf988825819dcff2fc03d4bb766ef8108a7ad"], 0x1c}, 0x1, 0x0, 0x0, 0xa0}, 0x800) close(r4) 3.900717871s ago: executing program 3 (id=53): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x84000, 0x0) ioctl$CDROMVOLREAD(r0, 0x5313, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) ppoll(&(0x7f00000001c0)=[{r4, 0x10c3}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050027bd7000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a003400020202020202000005001901070000000800c900"], 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x400c084) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00", @ANYRES16=r2], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00", @ANYRES16=r2], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r2, &(0x7f0000002ac0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/106, 0x6a}], 0x2, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000540), 0x6e, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/102, 0x66}, {&(0x7f0000000640)=""/254, 0xfe}, {&(0x7f0000000740)=""/5, 0x5}, {&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/52, 0x34}, {&(0x7f00000008c0)=""/201, 0xc9}], 0x7, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000bc0)=""/250, 0xfa}, {&(0x7f0000000cc0)=""/154, 0x9a}, {&(0x7f0000000d80)=""/198, 0xc6}], 0x3, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/213, 0xd5}], 0x1}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001100)=""/138, 0x8a}], 0x1, &(0x7f0000001200)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001340)=""/164, 0xa4}, {&(0x7f0000001400)=""/73, 0x49}, {&(0x7f0000001480)=""/147, 0x93}], 0x3, &(0x7f0000001580)}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001640)=""/141, 0x8d}, {&(0x7f0000001700)=""/108, 0x6c}, {&(0x7f0000001780)=""/157, 0x9d}, {&(0x7f0000001840)=""/230, 0xe6}, {&(0x7f0000001940)=""/171, 0xab}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x6, &(0x7f0000002a80)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x0, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000002ac0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/106, 0x6a}], 0x2, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000540), 0x6e, &(0x7f00000009c0)=[{&(0x7f00000005c0)=""/102, 0x66}, {&(0x7f0000000640)=""/254, 0xfe}, {&(0x7f0000000740)=""/5, 0x5}, {&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000800)=""/15, 0xf}, {&(0x7f0000000840)=""/52, 0x34}, {&(0x7f00000008c0)=""/201, 0xc9}], 0x7, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000bc0)=""/250, 0xfa}, {&(0x7f0000000cc0)=""/154, 0x9a}, {&(0x7f0000000d80)=""/198, 0xc6}], 0x3, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/213, 0xd5}], 0x1}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001100)=""/138, 0x8a}], 0x1, &(0x7f0000001200)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001340)=""/164, 0xa4}, {&(0x7f0000001400)=""/73, 0x49}, {&(0x7f0000001480)=""/147, 0x93}], 0x3, &(0x7f0000001580)}}, {{&(0x7f00000015c0)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001640)=""/141, 0x8d}, {&(0x7f0000001700)=""/108, 0x6c}, {&(0x7f0000001780)=""/157, 0x9d}, {&(0x7f0000001840)=""/230, 0xe6}, {&(0x7f0000001940)=""/171, 0xab}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x6, &(0x7f0000002a80)=[@cred={{0x1c}}], 0x20}}], 0x7, 0x0, 0x0) 3.900410883s ago: executing program 3 (id=54): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x0, 0x6}]}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7c, 0x4df, 0x6, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x204, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0xe, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x3fe, 0x7d, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc5, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x804e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0xfffffffe, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x5, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x0, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x0, 0x3, 0x7ff, 0x12b, 0xb, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x802006, 0x80a2f0, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x9, 0x57, 0x4, 0x3, 0x2, 0x10000, 0x4, 0x5fff, 0x10002, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x0, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d613, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x10, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000740)={0x0, @tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}}}, @ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, @hci={0x1f, 0x4}, 0x9ffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x8, 0x7195}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x8, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xa}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x8, 0x0, 0x4, 0x0, 0x6, 0x4}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40841}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000040)=""/190, 0xbe}], 0x2, 0x0, 0x198) 3.310015701s ago: executing program 3 (id=66): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000003c0)={0x1}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x4000008d, 0x0, 0x0}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000002c0)={0x9f0000, 0x8, 0x7, r1, 0x0, &(0x7f0000000240)={0x990a7c, 0xff, '\x00', @value=0x6}}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x41000, 0x9000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000400)={0xfffffffffffff001, 0x13000, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x3, 0x7c4, 0x7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000e3feffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000300)={0xe, 0xfffffffd, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000000280)={r9}) 3.101620026s ago: executing program 3 (id=68): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x6fe3, 0x4, 0x3, 0xf4}, &(0x7f0000000080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8cef, 0x800, 0x2, 0x33a}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf206, 0x8000, 0x0, 0x1d5}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf49, 0x20, 0x2, 0x112}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc30f, 0x2, 0x2, 0x3b}, 0xffffffffffffffff}], 0x4, &(0x7f0000001300)={0x2e, 0x78, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x200}, 0x0, 0x0, '\x00', {0x2, 0x71f, 0x0, &(0x7f0000000300)=@buf_512="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"}}, &(0x7f0000001380)) r5 = syz_io_uring_setup(0x272, &(0x7f00000013c0)={0x0, 0x1bfc, 0x200, 0x3, 0x3af}, &(0x7f0000001440)=0x0, &(0x7f0000001480), &(0x7f00000014c0)) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x10010, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_SQES(0x0, 0x7, 0xf, 0x11, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001540)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x45ed, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001500)=@new_dev={0x4, 0xe80, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f00000015c0)) r10 = getpgrp(0x0) syz_ublk_add_dev(r2, r6, r7, r8, &(0x7f0000001640)={0x2e, 0x17, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xe082, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001600)=@new_dev={0x2, 0x9a5, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x1a2}}}, &(0x7f00000016c0)) r12 = syz_io_uring_setup(0x1abd, &(0x7f0000001700)={0x0, 0xb819, 0x2, 0x3, 0x11d, 0x0, r0}, &(0x7f0000001780), &(0x7f00000017c0), &(0x7f0000001800)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_ublk_add_dev(r12, r6, r7, r8, &(0x7f0000001880)={0x2e, 0x0, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, r13, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001840)=@new_dev={0x2, 0xbe9, 0x0, 0x0, 0x1000, 0xffffffff, r10, 0x0, 0x36e}}}, &(0x7f0000001900)) syz_ublk_setup_io_uring(0x124e, &(0x7f0000001940)={0x0, 0xf1eb, 0x404, 0x1, 0x7a, 0x0, r3}, &(0x7f00000019c0), &(0x7f0000001a00), &(0x7f0000001a40)=0x0) syz_io_uring_submit(r6, r1, r14, &(0x7f0000001e80)=@IORING_OP_WRITEV={0x2, 0x20, 0x2004, @fd=r2, 0x100, &(0x7f0000001d40)=[{&(0x7f0000001a80)="f08f8205a8a8af415b539552a6c1bba3938534fefcdc0a6ff9f4b3b909c36a254884bcbf9c3b6abfa3a005215dba5e869049dd154e4aa8c423c1b64cea90a453c36a52cfb61b8ac10facebcc32747b04bf1410b52b45cd8151f5faa4f2440eeb11a8bee14e5732df640af044398bb31b2c5209", 0x73}, {&(0x7f0000001b00)="3d6bb27ee34c52a981d7115972db0c4b5f02dddd4bcf38036ae41f7c47c3d8b4a7740fd0a81e617f89718c086e391ec2ca25e70c099610aa236da2ab008665e5ca5f355087141e17e7f600360a18a64405d0354429dc7275f2bb3facd14fa19f64625a7c200df4337fec5c6c46b999ecd1d889a53a444b9a27be1ca040d8f18098c452cabf5b53555f0f14fdef203d178f1977741d9b2a64c6bb6a29750868160d254f812ae7e9adb995fb897ba98f944446935af0cb674949e682931535e017b7b919fb7c20258baa3506f994f0666baf0da1c5b7a73b1a1a7ae117a80cff96e320bab82d88d93b17141c30c9fc2b5c8e7c0fcefe27ad36bd", 0xf9}, {&(0x7f0000001c00)="f910d274e8d54bb508ca88911a11b96cdb597797e8a2e66f4e4ad97fa943da394d41e2da9b70ccb0e70e1c9027d475c2e71005bfa203f13e21b4fab848aa4c9105c8da4def867f99c9347e32f52fed4c8b09e37944cdf3435101715be8b2025fd3c2612cc742341d044a671771d65550584534a706aed1335a7b18aa1bf418ac4f916b439600d7600c46", 0x8a}, {&(0x7f0000001cc0)="4c7b349b112a178f503a5a32e3c0eb197cb3557ecf51e11fa2ce89e6d10ffa2816ed8ec912d035a82e7d9e5e01fb87751b4f22accb4fae6b6f78e249aa8894c688c623d4aa4f0db3a3f46f51c7ea9fd52a5d252010c5f869433ba841018020", 0x5f}], 0x4, 0xf, 0x1, {0x1, 0x0, 0xb8, '\x00', &(0x7f0000001e40)={0x8, 0x2, 0x96, &(0x7f0000001d80)="8229a31f5c0c639cbb39db7ed36dae2d09035c6d9baa1cb77c1a839894e6e985781255d240f4f8ece214f809a45a530b72531f0d2c549170dd03bf314d2182f72d7c0320e5f64cd68fa3abf332fa0c753bdf0dc02ea51f80ed3c4dd1fb90529d1430f9db1c157f7951bcfba21ba8fc87e56e5336697e0de0f71cf0f49f01f87cbb00f7f576c4a1c16f51fba8e21ab3be6d251356b154", 0x51}, 0xbab}}) r15 = open$dir(&(0x7f0000001f00)='./file0\x00', 0x20881, 0x10) fanotify_mark(0xffffffffffffffff, 0x4, 0x10, r15, &(0x7f0000001f40)='./file0\x00') r16 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r16, 0x541b, &(0x7f0000001f80)) syz_open_dev$sg(&(0x7f0000001fc0), 0xf, 0x100) r17 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002000), 0x800082, 0x0) ioctl$RTC_ALM_READ(r17, 0x80247008, &(0x7f0000002040)) mkdirat(r15, &(0x7f0000002080)='./file0\x00', 0x11) mmap$IORING_OFF_CQ_RING(0x0, 0x7f, 0x1000000, 0x4000010, r4, 0x8000000) syz_init_net_socket$nfc_llcp(0x27, 0xf957ad75f9cb057d, 0x1) ioctl$TUNSETIFF(r17, 0x400454ca, &(0x7f00000020c0)={'gretap0\x00', 0x400}) r18 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002100), 0x42140, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r18, 0x89f3, &(0x7f00000021c0)={'gre0\x00', &(0x7f0000002140)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0x5, 0x4, {{0xb, 0x4, 0x3, 0x7, 0x2c, 0x68, 0x0, 0x6, 0x4, 0x0, @local, @local, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x9, [0x7, 0x6]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0x17, 0x7, 0x10001, 0x8, 0x140, r18, 0xff, '\x00', r19, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r17, 0x10e, 0x2, &(0x7f0000002280)=0x9, 0x4) copy_file_range(r18, 0x0, r3, &(0x7f00000022c0)=0xfff, 0xffffffffffffff80, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x61424a88c6fd2b81, 0x1) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r18, 0x2) 3.020226521s ago: executing program 3 (id=69): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000b085fe7125437e93010200010902200001010080320904000002000000000705810200020007050202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x777) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb-serial/devices/ttyUSB0/vcc_mode\x00', 0x1, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, 0x0) write(r0, &(0x7f0000005880)='7', 0x1) 1.609660921s ago: executing program 0 (id=74): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x100000001) readv(r3, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000020605"], 0x2c}}, 0x20004890) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c018050}, 0x44014) setns(0xc9, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000002060108000034e40000000000000000050001000600000005000400030000000900020073797a300000000011000300686173683a69702c706f7274000000000c000780050014000d0000000500050002"], 0x58}}, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.392397719s ago: executing program 0 (id=76): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREAD(r0, &(0x7f00000003c0)={0xe8, 0x75, 0x2, {0xdd, "7045c3cddc9b7fa620f0286b2c228b81a9a4f5b9dd9c4d64c87fcc2ab7e898d368f4ea568f261ee31a98913d5c65527c5c606eb41a0facda4d275d8b17bd7b08b775aed57436fe3c32492491b8bc19501aee8130205b294afa6ef3747fcb8eb147500b0f12de7f8b2d48f0b2453cd2ac8843396f39d36e07644eb90d006850a8cf414476b02fccc5284992b92de15f6a77dfa586d5f95234d2fc86be882677413c4d752b4d49f928bd71c0ea018432d3bc324f20ceb1c6d2f46dd0a135febb2007b9f3c374d545740dfdea07d537501d1306716baa9411e6842920ce4f"}}, 0xe8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000180)={r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x1ff}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r7, 0x3ba0, &(0x7f00000002c0)={0x48, 0xb, r8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x7c4, 0x7}) syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x7) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000200)={0xe9db, 0x59, 0x5}) close_range(r1, 0xffffffffffffffff, 0x0) 919.24198ms ago: executing program 1 (id=81): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210326bd7000fddbdf2501"], 0x1c}}, 0x50) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4140aecd, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00?\x00'}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='fuseblk\x00', 0x200013, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000001c0)) 856.016658ms ago: executing program 1 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount$fuse(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x200002, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0xfd}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x201, 0x4, {}, {}, {}, 0x1, @can={{}, 0x3, 0x4, 0x0, 0x0, "140400"}}, 0x48}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/cpu_dma_latency\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) close_range(r1, 0xffffffffffffffff, 0x0) utime(&(0x7f00000000c0)='./dev/cpu_dma_latency\x00', &(0x7f0000000140)={0x7f, 0x5}) 850.896049ms ago: executing program 1 (id=85): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x0, &(0x7f0000000340)) (async) write(r1, &(0x7f0000000100)='slave-24c02 0x1022', 0x12) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) (async) landlock_restrict_self(r1, 0x8) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r4, 0x4000, r3}, 0x18) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x50301, 0x0) write(r5, &(0x7f0000000180)='tcpci 0x2', 0x9) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000000) (async) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) write$P9_RFSYNC(r7, 0x0, 0x0) 677.943782ms ago: executing program 1 (id=88): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000440), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x7a, &(0x7f00000025c0)={@random="0500fe3d91b5", @random="0010060800", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @dev, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x860}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x8001}}}}}}}}}, 0x0) 619.938167ms ago: executing program 1 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7, 0x2, 0x3, 0x1, 0x2}, &(0x7f00000000c0)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7, 0x2, 0x3, 0x1, 0x2}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r2, 0x5}, 0x8) 619.023105ms ago: executing program 1 (id=90): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x9, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0xc1, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000001f01410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 450.085401ms ago: executing program 2 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.metacopy\x00', &(0x7f00000000c0)=""/74, 0x4a) 449.49984ms ago: executing program 2 (id=93): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40a400, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000000c0)={{r0}, "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"}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, &(0x7f0000001180)={0x7, 0x0, [{0x40000001, 0x2a, 0x4, 0x8, 0x9976, 0x7, 0x401}, {0xb, 0x3, 0x6, 0x19, 0x4, 0x8, 0x5}, {0xb, 0x80000001, 0x5, 0x7, 0x4, 0x4, 0x54f}, {0x1, 0x0, 0x0, 0x3, 0x15d70d84, 0x1000, 0x1}, {0x4, 0x3, 0x7, 0x4, 0x3, 0x7, 0x80000}, {0x80000000, 0xc89, 0x0, 0x0, 0x400, 0x22, 0x2}, {0xb, 0x3, 0x2, 0x7, 0x80000000, 0x3, 0x2}]}) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000001640)={0x0, 0x0, 0xda37045}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = fcntl$getown(r1, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x64, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 379.507216ms ago: executing program 2 (id=94): fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000000c0)) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xb}, {0xc, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40e5}, 0x24044814) 279.849405ms ago: executing program 2 (id=95): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r1, 0x6f2a) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[@dstopts={0x0, 0x2, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x76cc5ae9}, @padn, @padn]}]}}}}}, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a600000000b0a0102000000000000000001000001080003400000008008000f400000000008000340000000200900010073797a310000000027000d40b1efbc487adad81450cddbfaf6308ad9e3276657792377af9437373eb042da2e7f07a400240000000b0a010200000000000000000500000a0800074000000003080004400000000270010000160a01040000000000000000020000050900010073797a3000000000240103809000038014000100687372300000000000000000000000001400010076657468315f766972745f77696669001400010076657468305f766c616e00000000000014000100697036746e6c300000000000000000001400010068737230000000000000000000000000140001006d6163767461703000000000000000001400010064756d6d7930000000000000001b00009000038014000100766972745f776966693000000000000014000100626f6e645f736c6176655f310000000014000100766574683100000000000000000000001400010069703665727370616e300000000000001400010076657468305f6d616376746170000000140001006272696467655f736c6176655f3100001400010076657468305f746f5f7465616d00000008000740000000010c00054000000000000000040900020073797a30"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r4, 0x0, 0x3, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000040cc03001c0012800b00010067656e65766500000c00028005000c0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 279.443732ms ago: executing program 2 (id=96): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffdeb, &(0x7f00000005c0)=[{&(0x7f0000000000)="64000000100001060000000600000000000000007fff0000000000000000000010003f00f8ff07002b000000000000002400120008000100766574681800020014000100000000007fff000002000000000066279b182300001000030076657468590000", 0x64}], 0x1}, 0x400400c) 149.819963ms ago: executing program 2 (id=97): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='devices.list\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/scsi_disk/0:0:0:0/manage_system_start_stop\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xd, 0x7fff, 0xfffffff9}, {0x0, 0x2, 0x5, 0x3, 0x6}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0xffe0, 0xfff0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x5, 0x80000001, 0xdcf, 0x9, 0x5, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x452f, 0x4, 0x5, 0x1, 0x80000001}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 0s ago: executing program 3 (id=98): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = gettid() (async) wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) waitid(0x2, 0x0, 0x0, 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x1005) r3 = socket$unix(0x1, 0x1, 0x0) accept$unix(r2, 0x0, 0x0) (async, rerun: 64) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f00000000c0)=0x6, 0x4) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 32) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): [ 38.041400][ T43] audit: type=1400 audit(1789629437.102:137): avc: denied { siginh } for pid=5711 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:12619' (ED25519) to the list of known hosts. [ 39.993182][ T43] audit: type=1400 audit(1789629439.052:138): avc: denied { name_bind } for pid=5718 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 40.025601][ T43] audit: type=1400 audit(1789629439.082:139): avc: denied { execute } for pid=5719 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 40.025909][ T43] audit: type=1400 audit(1789629439.082:140): avc: denied { execute_no_trans } for pid=5719 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 42.188217][ T43] audit: type=1400 audit(1789629441.242:141): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.189902][ T43] audit: type=1400 audit(1789629441.252:142): avc: denied { mount } for pid=5719 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.191795][ T5719] cgroup: Unknown subsys name 'net' [ 42.293295][ T5719] cgroup: Unknown subsys name 'cpuset' [ 42.295628][ T5719] cgroup: Unknown subsys name 'rlimit' [ 42.504665][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.279907][ T5719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.353009][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 46.353025][ T43] audit: type=1400 audit(1789629445.412:158): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.549783][ T43] audit: type=1400 audit(1789629445.612:159): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.550146][ T43] audit: type=1400 audit(1789629445.612:160): avc: denied { read write } for pid=5730 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.550465][ T43] audit: type=1400 audit(1789629445.612:161): avc: denied { open } for pid=5730 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.555899][ T43] audit: type=1400 audit(1789629445.612:162): avc: denied { ioctl } for pid=5730 comm="syz-executor" path="socket:[6842]" dev="sockfs" ino=6842 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.566717][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.568305][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.568771][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.568897][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.594515][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.594669][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.596601][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.597676][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.600449][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.601149][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.602500][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.603162][ T5736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.603411][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.604146][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.604602][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.607627][ T43] audit: type=1400 audit(1789629445.662:163): avc: denied { read } for pid=5738 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.607667][ T43] audit: type=1400 audit(1789629445.662:164): avc: denied { read } for pid=5732 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.610115][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.612353][ T43] audit: type=1400 audit(1789629445.672:165): avc: denied { open } for pid=5732 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.613096][ T43] audit: type=1400 audit(1789629445.672:166): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.616586][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.616601][ T43] audit: type=1400 audit(1789629445.672:167): avc: denied { module_request } for pid=5732 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.616675][ T5736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.617641][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.619973][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.151327][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.151432][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.151529][ T5738] bridge_slave_0: entered allmulticast mode [ 47.153006][ T5738] bridge_slave_0: entered promiscuous mode [ 47.156471][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.156542][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.156632][ T5738] bridge_slave_1: entered allmulticast mode [ 47.158496][ T5738] bridge_slave_1: entered promiscuous mode [ 47.205387][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.205467][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.205772][ T5732] bridge_slave_0: entered allmulticast mode [ 47.206963][ T5732] bridge_slave_0: entered promiscuous mode [ 47.221214][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.221257][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.221402][ T5732] bridge_slave_1: entered allmulticast mode [ 47.222154][ T5732] bridge_slave_1: entered promiscuous mode [ 47.235940][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.272697][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.285670][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.289081][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.335270][ T5738] team0: Port device team_slave_0 added [ 47.353155][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.353243][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.353342][ T5737] bridge_slave_0: entered allmulticast mode [ 47.354200][ T5737] bridge_slave_0: entered promiscuous mode [ 47.356463][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.356572][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.356877][ T5737] bridge_slave_1: entered allmulticast mode [ 47.358637][ T5737] bridge_slave_1: entered promiscuous mode [ 47.371792][ T5738] team0: Port device team_slave_1 added [ 47.402364][ T5732] team0: Port device team_slave_0 added [ 47.423940][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.423952][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.423965][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.426392][ T5732] team0: Port device team_slave_1 added [ 47.426940][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.426952][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.426972][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.428865][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.442179][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.442241][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.442489][ T5730] bridge_slave_0: entered allmulticast mode [ 47.443405][ T5730] bridge_slave_0: entered promiscuous mode [ 47.452256][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.459525][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.459568][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.459630][ T5730] bridge_slave_1: entered allmulticast mode [ 47.460434][ T5730] bridge_slave_1: entered promiscuous mode [ 47.487280][ T5737] team0: Port device team_slave_0 added [ 47.502017][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.502029][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.502041][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.503042][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.503049][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.503061][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.509016][ T5737] team0: Port device team_slave_1 added [ 47.520559][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.538727][ T5738] hsr_slave_0: entered promiscuous mode [ 47.539209][ T5738] hsr_slave_1: entered promiscuous mode [ 47.541200][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.555653][ T5732] hsr_slave_0: entered promiscuous mode [ 47.556176][ T5732] hsr_slave_1: entered promiscuous mode [ 47.556478][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 47.556537][ T5732] Cannot create hsr debugfs directory [ 47.572598][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.572609][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.572621][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.592105][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.592115][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.592128][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.611210][ T5730] team0: Port device team_slave_0 added [ 47.622906][ T5730] team0: Port device team_slave_1 added [ 47.645312][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.645323][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.645335][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.666875][ T5737] hsr_slave_0: entered promiscuous mode [ 47.667328][ T5737] hsr_slave_1: entered promiscuous mode [ 47.667619][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 47.667630][ T5737] Cannot create hsr debugfs directory [ 47.674761][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.674771][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.674784][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.767099][ T5730] hsr_slave_0: entered promiscuous mode [ 47.767514][ T5730] hsr_slave_1: entered promiscuous mode [ 47.767830][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 47.767845][ T5730] Cannot create hsr debugfs directory [ 47.850818][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.855361][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.855942][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.858886][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.882100][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.887552][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.913638][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.915963][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.996295][ T5732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.001369][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.002426][ T5732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.004895][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.005554][ T5732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.008658][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.011483][ T5732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.017277][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.088736][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.091309][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.092020][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.094116][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.095354][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.097245][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.099239][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.103107][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.165180][ T5730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.167027][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.167492][ T5730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.169270][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.175712][ T5730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.179525][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.179898][ T5730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.182272][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.184894][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.215786][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.234535][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.234649][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.242812][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.242894][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.266392][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.281592][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.301943][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.315395][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.315445][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.325825][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.335776][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.335865][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.342178][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.342228][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.359293][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.359345][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.387642][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.417312][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.428903][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.429394][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.436725][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.436769][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.576459][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.614579][ T5738] veth0_vlan: entered promiscuous mode [ 48.625908][ T5738] veth1_vlan: entered promiscuous mode [ 48.645928][ T5738] veth0_macvtap: entered promiscuous mode [ 48.650530][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.652520][ T5738] veth1_macvtap: entered promiscuous mode [ 48.667984][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.671622][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.678586][ T5747] Bluetooth: hci2: command tx timeout [ 48.678718][ T5747] Bluetooth: hci0: command tx timeout [ 48.678764][ T5747] Bluetooth: hci1: command tx timeout [ 48.689598][ T5734] Bluetooth: hci3: command tx timeout [ 48.733469][ T5732] veth0_vlan: entered promiscuous mode [ 48.739671][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.739805][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.739837][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.739867][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.750807][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.751959][ T5732] veth1_vlan: entered promiscuous mode [ 48.756280][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.800821][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.800842][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.840544][ T457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.840563][ T457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.840731][ T5732] veth0_macvtap: entered promiscuous mode [ 48.851395][ T5737] veth0_vlan: entered promiscuous mode [ 48.858729][ T5732] veth1_macvtap: entered promiscuous mode [ 48.873555][ T5730] veth0_vlan: entered promiscuous mode [ 48.877897][ T5737] veth1_vlan: entered promiscuous mode [ 48.883036][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.892900][ T5738] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.894131][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.894450][ T5730] veth1_vlan: entered promiscuous mode [ 48.932075][ T5737] veth0_macvtap: entered promiscuous mode [ 48.943205][ T5737] veth1_macvtap: entered promiscuous mode [ 48.951467][ T5730] veth0_macvtap: entered promiscuous mode [ 48.961392][ T5730] veth1_macvtap: entered promiscuous mode [ 48.964507][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.984553][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.994628][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.995504][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.995515][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.008224][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.008358][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.008384][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.008402][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.008421][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.021172][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.021185][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.097330][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.097344][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.108979][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109065][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109083][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109100][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109117][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109134][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109151][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109168][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.143749][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.143761][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.162803][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.162816][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.176837][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.176857][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.191912][ T5885] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 49.192588][ T5885] batman_adv: batadv0: Adding interface: gretap1 [ 49.192595][ T5885] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.192610][ T5885] batman_adv: batadv0: Interface activated: gretap1 [ 49.203902][ T5885] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 49.336141][ T5899] Bluetooth: MGMT ver 1.23 [ 49.575736][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 49.628363][ T5838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 49.787800][ T5924] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 49.788393][ T5838] usb 7-1: Using ep0 maxpacket: 8 [ 49.790713][ T5838] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 49.791425][ T5924] batman_adv: batadv0: Adding interface: gretap1 [ 49.791438][ T5924] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.791686][ T5924] batman_adv: batadv0: Interface activated: gretap1 [ 49.792115][ T5838] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 49.792135][ T5838] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 49.792151][ T5838] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 49.792168][ T5838] usb 7-1: config 250 has no interface number 0 [ 49.792202][ T5838] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 49.792223][ T5838] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 49.792243][ T5838] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 49.792261][ T5838] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 49.792287][ T5838] usb 7-1: config 250 interface 228 has no altsetting 0 [ 49.794840][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 49.794858][ T5838] usb 7-1: Product: syz [ 49.794870][ T5838] usb 7-1: SerialNumber: syz [ 49.806811][ T5924] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 49.815028][ T5838] hub 7-1:250.228: bad descriptor, ignoring hub [ 49.815050][ T5838] hub 7-1:250.228: probe with driver hub failed with error -5 [ 50.009439][ T5838] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 50.236866][ T5935] netlink: 436 bytes leftover after parsing attributes in process `syz.3.21'. [ 50.263322][ T5940] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12'. [ 50.301645][ C1] usblp0: nonzero read bulk status received: -71 [ 50.323443][ T30] usb 7-1: USB disconnect, device number 2 [ 50.328637][ T30] usblp0: removed [ 50.508191][ T5825] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.658611][ T5825] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 50.659025][ T5825] usb 8-1: config 0 has no interfaces? [ 50.660617][ T5825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.660628][ T5825] usb 8-1: Product: syz [ 50.660636][ T5825] usb 8-1: Manufacturer: syz [ 50.660643][ T5825] usb 8-1: SerialNumber: syz [ 50.663413][ T5825] usb 8-1: config 0 descriptor?? [ 50.759079][ T5734] Bluetooth: hci3: command tx timeout [ 50.768688][ T5734] Bluetooth: hci1: command tx timeout [ 50.768719][ T5734] Bluetooth: hci2: command tx timeout [ 50.871792][ T5825] usb 8-1: USB disconnect, device number 2 [ 50.967012][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.037448][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.174802][ T5956] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 51.344461][ T5959] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 51.415978][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.31'. [ 51.460846][ T43] kauditd_printk_skb: 114 callbacks suppressed [ 51.460864][ T43] audit: type=1400 audit(1789629450.522:282): avc: denied { relabelfrom } for pid=5963 comm="syz.1.32" name="NETLINK" dev="sockfs" ino=10630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 51.461082][ T5964] SELinux: Context system_u:object_r:syslogd_initrc_exec_t:s0 is not valid (left unmapped). [ 51.461392][ T43] audit: type=1400 audit(1789629450.522:283): avc: denied { relabelto } for pid=5963 comm="syz.1.32" name="NETLINK" dev="sockfs" ino=10630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:syslogd_initrc_exec_t:s0" [ 51.462790][ T43] audit: type=1400 audit(1789629450.522:284): avc: denied { getopt } for pid=5963 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.513605][ T43] audit: type=1400 audit(1789629450.572:285): avc: denied { listen } for pid=5965 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.514590][ T43] audit: type=1400 audit(1789629450.572:286): avc: denied { connect } for pid=5965 comm="syz.1.33" lport=38281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.514626][ T43] audit: type=1400 audit(1789629450.572:287): avc: denied { name_connect } for pid=5965 comm="syz.1.33" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 51.558342][ T5973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 51.558473][ T5962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 51.558779][ T5962] futex_wake_op: syz.3.31 tries to shift op by -1; fix this program [ 51.558816][ T5973] futex_wake_op: syz.3.31 tries to shift op by -1; fix this program [ 51.596030][ T43] audit: type=1400 audit(1789629450.652:288): avc: denied { create } for pid=5975 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.610643][ T43] audit: type=1400 audit(1789629450.672:289): avc: denied { open } for pid=5975 comm="syz.1.34" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 51.611638][ T43] audit: type=1400 audit(1789629450.672:290): avc: denied { ioctl } for pid=5975 comm="syz.1.34" path="/dev/ptyq7" dev="devtmpfs" ino=134 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 51.612629][ T5978] warning: `syz.0.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.660934][ T5988] netlink: 72 bytes leftover after parsing attributes in process `syz.1.36'. [ 51.665604][ T43] audit: type=1400 audit(1789629450.722:291): avc: denied { getopt } for pid=5987 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.666006][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 51.666017][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36'. [ 51.681999][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.37'. [ 51.723385][ T5992] sctp: [Deprecated]: syz.0.38 (pid 5992) Use of int in maxseg socket option. [ 51.723385][ T5992] Use struct sctp_assoc_value instead [ 51.735485][ T5992] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 51.735498][ T5992] netlink: 'syz.0.38': attribute type 2 has an invalid length. [ 51.735594][ T5992] Zero length message leads to an empty skb [ 51.979876][ T5999] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 51.980330][ T5999] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 51.980623][ T5999] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 51.980764][ T5999] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 51.980904][ T5999] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 51.981044][ T5999] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 51.981267][ T5999] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 51.981413][ T5999] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 52.029910][ T6002] gretap2: entered promiscuous mode [ 52.054525][ T6001] bond1 (unregistering): Released all slaves [ 52.102431][ T6002] bond1 (unregistering): Released all slaves [ 52.130643][ T6008] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.148017][ T6011] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 52.202211][ T6002] bond1 (unregistering): Released all slaves [ 52.273265][ T6019] fuse: Bad value for 'fd' [ 52.280859][ T5747] Bluetooth: hci0: command tx timeout [ 52.301656][ T6002] bond1 (unregistering): Released all slaves [ 52.355888][ T6002] bond1 (unregistering): Released all slaves [ 52.445417][ T6002] bond1 (unregistering): Released all slaves [ 52.515575][ T6002] bond1 (unregistering): Released all slaves [ 52.614791][ T6002] bond1 (unregistering): Released all slaves [ 52.637323][ T6045] syzkaller0: entered promiscuous mode [ 52.637342][ T6045] syzkaller0: entered allmulticast mode [ 52.656487][ T6050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.701990][ T6002] bond1 (unregistering): Released all slaves [ 52.821714][ T6002] bond1 (unregistering): Released all slaves [ 52.838244][ T5747] Bluetooth: hci2: command tx timeout [ 52.839613][ T5734] Bluetooth: hci1: command tx timeout [ 52.839642][ T5734] Bluetooth: hci3: command tx timeout [ 53.569831][ T6070] nvmet_rdma: binding CM ID to 172.20.20.23:4420 failed (-99) [ 53.602301][ T6072] nftables ruleset with unbound chain [ 54.165011][ T6110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.359764][ T5747] Bluetooth: hci0: command tx timeout [ 54.648231][ T5825] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 54.798125][ T5825] usb 8-1: device descriptor read/64, error -71 [ 54.897270][ T6121] __nla_validate_parse: 2 callbacks suppressed [ 54.897284][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'. [ 54.918137][ T5747] Bluetooth: hci2: command tx timeout [ 54.928467][ T5092] Bluetooth: hci1: command tx timeout [ 54.928495][ T5747] Bluetooth: hci3: command tx timeout [ 55.058184][ T5825] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 55.198393][ T5825] usb 8-1: device descriptor read/64, error -71 [ 55.269102][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.272932][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.277991][ T6125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.278273][ T6125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.309491][ T5825] usb usb8-port1: attempt power cycle [ 55.518138][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.607077][ T6129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'. [ 55.668324][ T5825] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 55.678148][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 55.684477][ T10] usb 6-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 55.685761][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 55.685782][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 55.687506][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.687520][ T10] usb 6-1: Product: syz [ 55.687527][ T10] usb 6-1: Manufacturer: Ѝ [ 55.687534][ T10] usb 6-1: SerialNumber: syz [ 55.688507][ T5825] usb 8-1: device descriptor read/8, error -71 [ 55.917855][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 55.919524][ T10] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 55.921058][ T10] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 55.922486][ T10] usb 6-1: USB disconnect, device number 2 [ 55.948323][ T5825] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 55.960989][ T6138] syz.2.75 uses obsolete (PF_INET,SOCK_PACKET) [ 55.978700][ T5825] usb 8-1: device descriptor read/8, error -71 [ 56.088432][ T5825] usb usb8-port1: unable to enumerate USB device qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 56.338903][ T2326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.402692][ T6153] ======================================================= [ 56.402692][ T6153] WARNING: The mand mount option has been deprecated and [ 56.402692][ T6153] and is ignored by this kernel. Remove the mand [ 56.402692][ T6153] option from the mount to silence this warning. [ 56.402692][ T6153] ======================================================= [ 56.457096][ T6155] input: syz0 as /devices/virtual/input/input5 [ 56.491907][ T2326] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 56.493576][ T2326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.493603][ T2326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.500307][ T2326] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 56.500965][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 56.501015][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 56.502605][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 56.503653][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 56.503694][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 56.507563][ T43] kauditd_printk_skb: 35967 callbacks suppressed [ 56.507575][ T43] audit: type=1400 audit(1789629455.562:36259): avc: denied { bind } for pid=6160 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.513222][ T2326] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 56.516759][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 56.516794][ T2326] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 56.520165][ T2326] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 56.562111][ T43] audit: type=1400 audit(1789629455.612:36260): avc: denied { mounton } for pid=6164 comm="syz.1.83" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 56.562143][ T43] audit: type=1400 audit(1789629455.622:36261): avc: denied { connect } for pid=6164 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.562164][ T43] audit: type=1400 audit(1789629455.622:36262): avc: denied { write } for pid=6164 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.562183][ T43] audit: type=1400 audit(1789629455.622:36263): avc: denied { read } for pid=6164 comm="syz.1.83" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 56.562203][ T43] audit: type=1400 audit(1789629455.622:36264): avc: denied { open } for pid=6164 comm="syz.1.83" path="/26/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 56.562278][ T43] audit: type=1400 audit(1789629455.622:36265): avc: denied { unmount } for pid=6164 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.570001][ T43] audit: type=1400 audit(1789629455.632:36266): avc: denied { setattr } for pid=6164 comm="syz.1.83" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 56.590905][ T6167] mmap: syz.2.84 (6167) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.592941][ T43] audit: type=1400 audit(1789629455.652:36267): avc: denied { create } for pid=6166 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.593922][ T43] audit: type=1400 audit(1789629455.652:36268): avc: denied { getopt } for pid=6166 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.643397][ T6170] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 56.643740][ T6170] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 56.647607][ T6170] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 56.662817][ T6174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.86'. [ 56.757930][ T2326] usb 5-1: USB disconnect, device number 2 [ 56.871889][ T2326] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 56.874072][ T2326] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 56.874335][ T2326] keyspan 5-1:1.0: device disconnected [ 56.932122][ T6189] xt_hashlimit: size too large, truncated to 1048576 [ 56.932189][ T6189] xt_hashlimit: max too large, truncated to 1048576 [ 56.932214][ T6189] xt_hashlimit: Unknown mode mask 52C95688, kernel too old? [ 56.981085][ T6195] bond1: Removing last arp target with arp_interval on [ 57.088399][ T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 57.141040][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 57.173631][ T6204] validate_nla: 27 callbacks suppressed [ 57.173674][ T6204] netlink: 'syz.2.96': attribute type 63 has an invalid length. [ 57.173687][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 57.249792][ T10] usb 6-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 57.250585][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 57.250603][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.251833][ T10] usb 6-1: config 0 descriptor?? [ 57.479560][ T6145] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] SMP KASAN NOPTI [ 57.484316][ T6145] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 57.487274][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(full) [ 57.490118][ T6145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.493260][ T6145] RIP: 0010:keyspan_break_ctl+0x8e/0xe0 [ 57.495019][ T6145] Code: ff ff ff e8 74 8a 41 fa 83 fb ff 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 9c 00 00 00 0f 94 c3 48 89 fa 0f b6 db 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 41 [ 57.501169][ T6145] RSP: 0018:ffffc9000565fcb0 EFLAGS: 00010203 [ 57.503108][ T6145] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87ca8f4c [ 57.505554][ T6145] RDX: 0000000000000013 RSI: 00000000ffffffff RDI: 000000000000009c [ 57.508023][ T6145] RBP: ffff88805fe32000 R08: 0000000000000005 R09: 00000000ffffffff [ 57.510500][ T6145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 57.513018][ T6145] R13: ffff8880278c6020 R14: ffff8880278c60c8 R15: 0000000000000007 [ 57.515511][ T6145] FS: 00007ff7749d76c0(0000) GS:ffff8880d5c59000(0000) knlGS:0000000000000000 [ 57.518296][ T6145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.520367][ T6145] CR2: 0000001b32f23ffc CR3: 0000000058d9f000 CR4: 0000000000352ef0 [ 57.522875][ T6145] Call Trace: [ 57.523944][ T6145] [ 57.524890][ T6145] ? __pfx_keyspan_break_ctl+0x10/0x10 [ 57.526617][ T6145] serial_break+0xcb/0x160 [ 57.528025][ T6145] send_break+0x2ec/0x370 [ 57.529392][ T6145] tty_ioctl+0xa2c/0x1640 [ 57.530792][ T6145] ? __pfx_tty_ioctl+0x10/0x10 [ 57.532304][ T6145] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 57.534588][ T6145] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 57.536754][ T6145] ? __fget_files+0x34/0x3d0 [ 57.538547][ T6145] ? selinux_file_ioctl+0x13b/0x290 [ 57.540421][ T6145] ? selinux_file_ioctl+0xb6/0x290 [ 57.542276][ T6145] ? __pfx_tty_ioctl+0x10/0x10 [ 57.543822][ T6145] __x64_sys_ioctl+0x18e/0x210 [ 57.545380][ T6145] do_syscall_64+0x123/0x790 [ 57.546867][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.548760][ T6145] RIP: 0033:0x7ff773b9e159 [ 57.550157][ T6145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.556280][ T6145] RSP: 002b:00007ff7749d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.559528][ T6145] RAX: ffffffffffffffda RBX: 00007ff773e25fa0 RCX: 00007ff773b9e159 [ 57.562860][ T6145] RDX: 0000000000000007 RSI: 0000000000005425 RDI: 000000000000000b [ 57.566029][ T6145] RBP: 00007ff773c3506b R08: 0000000000000000 R09: 0000000000000000 [ 57.569179][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.572481][ T6145] R13: 00007ff773e26038 R14: 00007ff773e25fa0 R15: 00007ffd32630858 [ 57.575697][ T6145] [ 57.576934][ T6145] Modules linked in: [ 57.579002][ T6145] ---[ end trace 0000000000000000 ]--- [ 57.581757][ T6145] RIP: 0010:keyspan_break_ctl+0x8e/0xe0 [ 57.582011][ T6145] Code: ff ff ff e8 74 8a 41 fa 83 fb ff 48 b8 00 00 00 00 00 fc ff df 49 8d bc 24 9c 00 00 00 0f 94 c3 48 89 fa 0f b6 db 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 1d 41 [ 57.582025][ T6145] RSP: 0018:ffffc9000565fcb0 EFLAGS: 00010203 [ 57.582035][ T6145] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87ca8f4c [ 57.582042][ T6145] RDX: 0000000000000013 RSI: 00000000ffffffff RDI: 000000000000009c [ 57.582049][ T6145] RBP: ffff88805fe32000 R08: 0000000000000005 R09: 00000000ffffffff [ 57.582056][ T6145] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 57.582063][ T6145] R13: ffff8880278c6020 R14: ffff8880278c60c8 R15: 0000000000000007 [ 57.582070][ T6145] FS: 00007ff7749d76c0(0000) GS:ffff8880d5c59000(0000) knlGS:0000000000000000 [ 57.582094][ T6145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.582103][ T6145] CR2: 0000001b32f23ffc CR3: 0000000058d9f000 CR4: 0000000000352ef0 [ 57.582111][ T6145] Kernel panic - not syncing: Fatal exception [ 57.618852][ T6145] Kernel Offset: disabled [ 57.620261][ T6145] Rebooting in 86400 seconds..