last executing test programs: 1m20.444263465s ago: executing program 32 (id=119): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000180)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x82581, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000280)={0xffbfffff, 0x2, 0x4000086, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) 1m9.968976148s ago: executing program 3 (id=211): r0 = syz_usb_connect$midi(0x6, 0xd9, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x1, 0x1, 0x8, 0xc0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x80, [@midi_out_jack={0xb, 0x24, 0x3, 0x0, 0xf, 0x2, [{0xc7, 0x5}, {0xb2, 0x4}], 0x4}], [{{0x9, 0x5, 0xa, 0x2, 0x40, 0x3, 0x4, 0x5, {0x11, 0x25, 0x1, 0xd, "96c83245283316ac00ce7b2688"}}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x1, 0x7, 0x9, {0xd, 0x25, 0x1, 0x9, "2aa69619399ae6e05f"}}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xd, 0x4, 0x0, {0x10, 0x25, 0x1, 0xc, "173686171958274f5c28ab25"}}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0xc, 0x8, 0x0, {0x9, 0x25, 0x1, 0x5, "f90be7fa19"}}}, {{0x9, 0x5, 0xf6905c5e30457e97, 0x3, 0x8, 0xfd, 0x3, 0x7f, {0xf, 0x25, 0x1, 0xb, "033fbb591755348b5db2b6"}}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x8, 0x1, 0x9, {0xb, 0x25, 0x1, 0x7, "2483f53cea9167"}}}, {{0x9, 0x5, 0x3, 0x10, 0x3d7, 0x9, 0x7, 0x8, {0xd, 0x25, 0x1, 0x9, "06f6248ed0929eddcc"}}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x4, 0x3, 0x5, {0x4}}}]}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x5, 0x6, 0x2, 0x0, 0x9}, 0x4f, &(0x7f0000000140)={0x5, 0xf, 0x4f, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x90, 0xd, 0x1000}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "f28c074d97a971809fb7b6ea0eadb411"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "6135efa28eae747f5122f1868e9ddc19"}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x0, 0x0, 0x2, [0xc0ff, 0x0]}, @ptm_cap={0x3}]}, 0x1, [{0xaa, &(0x7f00000001c0)=@string={0xaa, 0x3, "6a011350c0b8a98d7b7ed2a51e5f63ee3126aae4ec7ec1b0c13199966eaa05ce3c723e4566484f147e705c32800553a16e41e7acf85440a05bd76046e428bc1ee78d15ed7543c32f2b10550b1587737d877b1e6303c6a05248bed62aa7f37858a7492b3db3041313afbb0634cbeb82bd89c1c3cc1b75edf0782f974ba24bd5003cf4c65d99124c5112ba8ed5c6469e28bfb07ca02cc7ec396b1746e2aeb7c31aa6e89db5e337f967"}}]}) openat$pmem0(0xffffffffffffff9c, &(0x7f00000002c0), 0x14000, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000300)={0x40, 0xb, 0x4e, {0x4e, 0x23, "088dc185a4fcfe0bf9667d785eca29bba7063914007f22f049bbde896cdf05d9a2f4d662d3e45ef3dcb097bb140bc74f00e8f389d56b7d1194e8d8bf82c4cd3cfc26fd0fc02a10b425da6487"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000000600)={0x34, &(0x7f0000000400)={0x40, 0x16, 0x53, "3b5d4fd11b71b9fe2022fe762036c0c1acb9c3767309aa0aac5656bcae56475c34c9f5af55a0ad4023421817fa5f4b4633b24b850f8887bcdd3dda2681c7dbc4b342c8a500e8eb414c754deea80a14216164a1"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x57}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x5d, {0x5b, "eda481534836495f6765236af0f87d188dafbe6ee73fea71eab1c6e216124ba42213b1b07c3033315761bdad346ad761f7f119c1763f1c3025976ca68f67397b743bc31530c12e9d3afc4d1be78d77a24f560f1846acc7eb23a308"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x40}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0xee}}) syz_open_dev$sndctrl(&(0x7f0000000640), 0x8e, 0x10000) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000006c0), 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000700)={0x2, 0x1a, "97c24707393fc1cbb77b295de52ee31c61c636dd46700e493bbc"}, &(0x7f0000000740)=0x22) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000780)={r3, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}, 0x1ff}}}, 0x84) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) pwritev2(r4, &(0x7f0000003ac0)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="c3695399138977e549f8d43085d104d78a567c9c70918fb16b6b9e4651e06b0478b36aa5900cb3c25a0ecd04bcaaf9f05a2428582849be2f03c3682dabec041f4f5f81bda7d34a86624bfdc775e4bcb0e62a57807d79ff88d6d6c36b3d0bb7cb65fb15976c4e59a2640b3d6bcc53bae1d9b73a63fa8df3f00e2c99c287f8b6", 0x7f}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="2cc2326ae28a9ddb32b6301fb5d3896f5ef187311608c6fcd61ccc573488d7d8aecec11de1a096b6337af9d056873db43067cbe6285ff6f0a246e76c6f09db5e77d309a75db5aabf4a508faa2acd0bf39b0356228567ea944135447cf468c860f6b5e5801e612cf574a1a5f5a8cea8b124e5b3530ae0126303a87194bdf5ef4b3a50937113b024a8494bc0117e2bafd7d669ca49f1c0c457c9cdc0a5527e3c638fffb56ed6c07f6003b7fb9e251aac4e6e03e3d0c8ef513f4b7056032bd92a420247ffded6830fe4eb9551c12497a277d90756fa5c347619732cbef3", 0xdc}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f00000039c0)="bd19afab9690d44fb5fb2541f4f5f7c98a69aac122facaee6e589b7a67d5448af348030846ff189284facf85a9ad20ef60da322db647a48c6da873bbc808ac380a35d0b5faeee40e61f8eb3b39395e01feb8bc59485ec4268f2ad0f1c9c9fd794ee997909f73c499f1696f52b286ed5828d4785d3b592fdeaae8106ff9091344665e5c2406b97623c4795d367ebb60dd0cc0febc14a25bf992ab6e1a568eb2f38b13a7e3455be67510c89693d871e34cf75af2613fd662b5babd35573f9ac1942d47cf7747d231a906730b79b6060c54cd27d4c356c41d8918a19b6643af6ab89efecb8557ed7aa9beaef400e263d76494f14c93f0464c27b3b01af9e8b5ad", 0xff}], 0x6, 0x200, 0x3a33530f, 0x1e) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000003c80)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x5130c}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x28, r6, 0x8, 0x6, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3ff, 0x66}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x100d1}, 0x4000000) r8 = dup2(0xffffffffffffffff, r2) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000003cc0)={r3, @in6={{0xa, 0x4e24, 0x5, @local, 0x79e9}}, 0x8, 0xfbff, 0x1, 0x12000000, 0x14, 0x6, 0x10}, 0x9c) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000003d80)={0x80, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}, {}, {}]}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000003e00)={r3, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x6, 0x7, 0x98, 0x11, 0xb81c, 0x3}, 0x9c) socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r8, &(0x7f0000003ec0)={0xa, 0x4e23, 0x43f1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000003f00)={0x6, 0x8, 0x7f, 0x394e, 0x1}) pipe(&(0x7f0000003f40)={0xffffffffffffffff}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000004000)={0xa, &(0x7f0000003f80)=[{0xccc5, 0xc, 0xf8, 0x2}, {0x5, 0xea, 0x9, 0x985}, {0x2, 0xf1, 0x3, 0x2}, {0xfffa, 0x40, 0x80, 0xfffffffd}, {0x2, 0x1, 0x5, 0x4}, {0x7, 0x1, 0x7, 0x1}, {0xfff, 0x6, 0x4, 0x19f79393}, {0x9, 0x10, 0x5, 0x1ff}, {0x0, 0x6, 0x1, 0x5}, {0x401, 0x3, 0x7, 0x5}]}) mremap$dontunmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r10, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x1c, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", ""]}, 0x1c}}, 0x800) 1m9.419335329s ago: executing program 3 (id=220): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x138a09f12d120b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000300)=0x12) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400dbd8202bdf2500", @ANYRES32=0x0, @ANYBLOB="42000000212000001c0012800c0001006d6163766c616e000c000280080003000200000008000500", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000002) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) io_uring_setup(0x4a86, 0x0) r4 = fsopen(&(0x7f0000000900)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000940)='secret\x00', &(0x7f0000000980)='IaA=7A/AA//+/++\xa5\xd3\x17\xf1AAAAAAAABAAAAAy\xda\xee|\xd9\x0f\aU\"\xab\x94\'d\x1f\xbcG\xf4\x14\xf2v\xf83Z\xaa\xc3)\v{\x16\xb7\x0e\a%\xb1\xf7\xe9\xc5\xa6\xfa\xd4\xd7\xa0\xaa>\xa0\xec\x9a\xc6~^\xc0T\xbdnr\xfb\xa5/B O(_\xebN\x19i\x1d}\xa3\x1f\x99%H\xf6K\xee\x9f\x18\x8d\xe7\x9a\xbd7\xb6uc\x1e\xd4xH\xc4 u\x06\xfa9wK\xc2UI\x8b\x03\x85\xfe\xfc\xf3\x88\xb8\xad\xc5\xe7\xf52\xe9\xd4s[\xa2\xce\xfdn\xb2\x9f\xdfN\xb8\xf1\xe6\xb7\x86\x00\xd4)=\xe1X\xb8\xaf', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5bc749}}, './mnt\x00'}) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000a80)=0x9) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0xd99b}, {{0x0, 0x0, &(0x7f0000000500)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x40000000, 0x0) epoll_create1(0x80000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000700)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) socket$key(0xf, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffff8}, {0x400000000000000, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r8, &(0x7f0000000680), 0x800001d, 0x1c) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000780), 0xa0201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./tracing\x00', &(0x7f0000000b40)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b80)='./tracing/uprobe_events\x00', 0x601, 0xd) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000007c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000800)={0x28, 0x2, r10, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8}) 1m9.418975914s ago: executing program 3 (id=221): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @mcast2, 0x80000001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, @in6={0xa, 0x4e24, 0x7f, @mcast1, 0x2}], 0x48) r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @mcast2, 0x80000001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, @in6={0xa, 0x4e24, 0x7f, @mcast1, 0x2}], 0x48) (async) getpgrp(0x0) (async) prctl$PR_SET_PTRACER(0x59616d61, r0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) 1m9.369720721s ago: executing program 3 (id=223): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f00000000c0)={{[0x30a6, 0x0, 0x8000]}, 0x0, 0x3, 0x6, 0x0, &(0x7f0000000000)=[{{@_ha_fsid={[0x8, 0xa]}, {0xe0, 0x8000, 0x7fff, 0x6}}, 0x9092, 0x0, '\'\'$!{\x00'}, {{@align=0x2, {0x8, 0xc18, 0xc3ec, 0x3}}, 0x7, 0x0, '{\x00'}, {{@_ha_fsid={[0x5, 0x9]}, {0x3, 0x8000, 0x9, 0x7fffffff}}, 0x9, 0x0, '\x00'}, {{@align=0x5, {0x3, 0x8, 0xb, 0x8}}, 0x9, 0x0, '#\\\x00'}]}) (async) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000c40)={0xe, {"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", 0x1000}}, 0x1006) 1m9.318434175s ago: executing program 3 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/virtual/net/bridge0/bridge/no_linklocal_learn\x00', 0x902, 0x42) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x3102000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='smaps\x00') read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f00000025c0), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000002600), 0x10) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000002640)={0x1, 0x5}, 0x8) sendmmsg(r3, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000002700)="4b5fd0e5", 0x40000}], 0x1}}], 0x1, 0x4008040) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) read$FUSE(r0, &(0x7f0000004ac0)={0x2020}, 0x2020) 1m9.250014503s ago: executing program 3 (id=226): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000a90701ae000000000000201100796ce43106867a3593af010a2dd750d3c671c83a99b0cb61216ef06d89bce8a5250cdd791edb8937fa74754c5abfc9d93111f39d65246036c99f84bdbcbfe224d25ebe0da4f04c688a8c79f01da514", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x48) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000003c0), &(0x7f0000000400)=@tcp}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f00000003c0)={0x0, 0x92, 0x4}) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) capset(&(0x7f00000005c0)={0x20080522, r3}, &(0x7f0000000600)={0xfffffffc, 0x3cd2, 0x4, 0x6, 0xfffffffe, 0xdbfd}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090000400000feffffff0a00000008000300", @ANYRES32=r6, @ANYBLOB="0c0050800400088004000600"], 0x28}}, 0x0) (async, rerun: 64) listen(r2, 0x5) (async, rerun: 64) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'ovf\x00'}, 0x2c) (async) epoll_create1(0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 1m2.584854617s ago: executing program 2 (id=252): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x26022, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x0, 0x100}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000600)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f00000006c0)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000000700), r7, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) io_uring_setup(0xb52, 0x0) syz_ublk_setup_queues(r10, r9, &(0x7f0000000740)={0x0, 0xf233, 0x10, 0x1, 0x3a9, 0x0, r3}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbf4d, 0x4000, 0x2, 0x12c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa95e, 0x80, 0x3, 0x316, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd715, 0x10, 0x3, 0x7, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x1, 0x15, 0x0, r3}}], 0x4, &(0x7f0000000a40)={0x2e, 0x4, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5ba4}, 0x0, r8, '\x00', {0x4, 0x758, 0x0, &(0x7f0000000ac0)=@buf_1k="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"}}, &(0x7f0000001ac0)) write(r1, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000000007000ffdb0008000104000000a4edfc80a698cf09f34d0419dcb014483820b0c8e599049fb5c11e22e49a263400146846d0b2cf091cb73ff38dd01a05793e1b218a2c443bd8b114eec0383f744c7768e2f8b50c112d085d864c193b6f8a1b0c8074e0d68b1a19b4c3804698bd3d7a940bb770bf92bec8ec8ecff58266946977ad0562095845e04a3b59eb", @ANYRES32=r13, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4c004) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000000)) socket(0x1d, 0x2, 0x6) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xa010}, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x1, 0x84) r15 = getpid() sched_setscheduler(r15, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) 1m2.426731861s ago: executing program 2 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) (async, rerun: 64) r1 = socket$inet(0x2, 0xa, 0xbc1) (async, rerun: 64) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x7fff, 0x1) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x1, @in6={{0xa, 0x4e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x5}, 0xb3}}, 0xf, 0x1, 0x10000, 0xb4, 0xb0, 0xffffffff, 0x9}, &(0x7f00000005c0)=0x9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000004780)={r3, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000004840)=0x84) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004ac0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000004b00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000004b40)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000004b80)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x3, 0x9, {"39943d11c76b911c20c942dac0294c2d"}, 0xfffffffffffffc01, 0x8000000100000000, 0x2}, @ib={0x1b, 0xfffe, 0x7ffffff, {"7d70f9080000001400"}, 0x80000001, 0x80000000002, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000004cc0)={0x13, 0x10, 0xfa00, {&(0x7f0000004d00), r5, 0x2}}, 0x18) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000640)={"846c84a1296586590cfd2208edecdb34", 0x0, 0x0, {0x7, 0x5}, {0x8}, 0xc3, [0x9847, 0xffffffffffff95f3, 0x200, 0xe22, 0xb, 0xfffffffffffffffa, 0xf, 0x81, 0x7, 0x807, 0x8, 0x5, 0xffffffffffffffff, 0x2, 0x1df40000000000, 0x7]}) (async) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) (async) read$FUSE(r0, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) getpid() (async, rerun: 64) syz_io_uring_setup(0x6aa7, &(0x7f0000000380)={0x0, 0x4b, 0x4000, 0x3, 0xb8, 0x0, r0}, &(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) r13 = syz_ublk_add_dev(r8, r12, r9, r10, &(0x7f0000000240)={0x2e, 0xc, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x4, 0xfc6, 0x0, 0x0, 0x1000, 0x2, r11, 0x0, 0x20}}}, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000000340), r13, 0x2) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f0000004f00)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xd, "856e93916be1f3"}) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000005f00)={{0x0, 0x3, 0x5, 0x3, 0x0, 0x0, 0x6, 0x1ff, 0xffffff80, 0x57f, 0x401, 0x4, 0x9, 0x7, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000006f00)={r15, r16, "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", "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"}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001740)={0x0, "a2cb472c95d3ef26b45559c7cbbd62a7"}) (async) setxattr$incfs_metadata(&(0x7f0000000600)='./pipefs/gssd/clntXX/gssd\x00', &(0x7f0000004a00), &(0x7f0000004a40)="ab68aebb3be3b295e6c2a080fa4183833eb6261630d6a910416fa8e14f8551bfa37f851c1227649fe5df84ae1562d272fd89e241a8e7439b996ab14c3fb61c725f63be05aef092543fe56c4981eaa1b6f38646d5aaba761f7bed310c69651a4dfbd726e09a9f788a", 0x68, 0x2) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000004880)={'8255\x00', [0x0, 0x0, 0xa1a, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]}) (async, rerun: 64) r18 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r18, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000049c0)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe0000010000000005001a"], 0xd0}}, 0x0) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000740)={{r0}, r6, 0x0, @unused=[0xfffffffffffffed0, 0x5, 0x8, 0x6], @devid=r17}) 1m2.266943762s ago: executing program 2 (id=258): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@gettaction={0x28, 0x5a, 0x1, 0x70bd2c, 0x1, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x200004c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000004a40)={0xfc, {"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", 0x1000}}, 0x1006) 1m2.170114442s ago: executing program 2 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000600)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000680), 0xe09) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000940)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x1c1341, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/stat\x00') fstat(r5, &(0x7f0000000440)) socketpair(0x10, 0x3, 0x0, &(0x7f00000019c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x6, 0x14, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{r4}, &(0x7f0000001c80), &(0x7f0000001cc0)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000001d80)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@getchain={0x4c, 0x66, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe9}, {0x0, 0xfff3}, {0x3}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xfc4}]}, 0x4c}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f00000006c0)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m1.91013083s ago: executing program 2 (id=261): r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000100)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000380)=0x7) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000440)={0x0, &(0x7f0000000400)="a1270082924441", 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="980000002600010125bd7000fcffc76d3100000008000300470000007b00db"], 0x98}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) 1m1.53938263s ago: executing program 2 (id=264): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) move_pages(0x0, 0x1efe, &(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000480)=""/127, &(0x7f0000000500)=0x7f) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='/dev/zram0,6', 0xb3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000001c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m1.489103508s ago: executing program 33 (id=264): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) move_pages(0x0, 0x1efe, &(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000480)=""/127, &(0x7f0000000500)=0x7f) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='/dev/zram0,6', 0xb3) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000001c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x4ee0, 0x0, 0x5, 0xb367}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 57.347999266s ago: executing program 0 (id=285): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d657461000000001400028008000140000000010800024000000025"], 0xdc}}, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f0000000480), &(0x7f00000004c0)=""/10}, 0x20) (async) acct(&(0x7f00000001c0)='./file0\x00') (async) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1148840, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@subsystem='freezer'}, {@release_agent={'release_agent', 0x3d, './file0/file0'}}, {@none}, {@cpuset_v2_mode}, {@cpuset_v2_mode}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x1c\xc2'}}, {@context={'context', 0x3d, 'root'}}, {@dont_appraise}]}) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x1a3c82) (async) acct(&(0x7f0000000040)='./file0\x00') 57.279389549s ago: executing program 0 (id=286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff2, 0xffff}, {0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x6c}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002218000000050116a7eb25ff0904a1f70901"], 0x0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1300000027"], 0x50}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="9a8b34000080000f20d835200000000f22d8b9ca0a00000f3265f40f009e9600000066b8f0008ed00f21a9c4e16162270f01c2643626f30fc77101", 0x3b}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 56.609300146s ago: executing program 0 (id=293): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x3, 0x6, 0x2, 0x87, 0xfffffffe, 0x2}) r0 = getpgid(0x0) prlimit64(0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffffffffffffd}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x88c, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x80600, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x4de, 0xfffffffc, {r0}, {}, 0x6, 0x6}) capget(&(0x7f0000000180)={0x19980330, r1}, &(0x7f00000001c0)={0x4, 0x5, 0x8, 0x6, 0x3df, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x7) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) 56.489750302s ago: executing program 0 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'bridge0\x00'}, 0x18) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r4) (async) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x38, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff0f000000000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'pimreg\x00', 0x3}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x8}, 0x18) (async) r6 = open(&(0x7f0000000500)='./file2\x00', 0x80400, 0x4d) fsetxattr$security_selinux(r6, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:ssh_exec_t:s0\x00', 0x20, 0x0) (async, rerun: 32) pread64(r6, 0x0, 0x0, 0x1) (rerun: 32) r7 = openat(r6, &(0x7f0000000140)='.\x00', 0x80, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x20, {[@generic={0x4, 0x2}]}}}}}}}, 0x0) (async) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x129281, 0x0) write$vga_arbiter(r9, &(0x7f0000000840), 0xf) (async) utimensat(r7, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}}, 0x0) (async, rerun: 32) socket(0x28, 0x5, 0x2) (rerun: 32) pipe2$watch_queue(&(0x7f0000000000), 0x80) 56.405168607s ago: executing program 0 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x81c0, 0x80000001) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 32) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x400) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000005c0)={0x8}) (async) r1 = open(&(0x7f0000000040)='./file2\x00', 0x8000, 0x148) (async, rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000480), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064d1, &(0x7f0000000800)={0x0, 0x0, 0x0}) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f00000184004000140002"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) (async) close(0x3) (async) chdir(&(0x7f0000000240)='./bus\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xfff, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000001) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x8042, 0x34) 55.899766161s ago: executing program 0 (id=300): clock_getres(0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x40010, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x40, 0x14) 54.227669385s ago: executing program 34 (id=226): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000a90701ae000000000000201100796ce43106867a3593af010a2dd750d3c671c83a99b0cb61216ef06d89bce8a5250cdd791edb8937fa74754c5abfc9d93111f39d65246036c99f84bdbcbfe224d25ebe0da4f04c688a8c79f01da514", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300"/28], 0x48) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r1, &(0x7f00000003c0), &(0x7f0000000400)=@tcp}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f00000003c0)={0x0, 0x92, 0x4}) r3 = getpid() sched_setaffinity(r3, 0x0, 0x0) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) capset(&(0x7f00000005c0)={0x20080522, r3}, &(0x7f0000000600)={0xfffffffc, 0x3cd2, 0x4, 0x6, 0xfffffffe, 0xdbfd}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090000400000feffffff0a00000008000300", @ANYRES32=r6, @ANYBLOB="0c0050800400088004000600"], 0x28}}, 0x0) (async, rerun: 64) listen(r2, 0x5) (async, rerun: 64) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'ovf\x00'}, 0x2c) (async) epoll_create1(0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 53.340250673s ago: executing program 4 (id=316): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000000)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) set_mempolicy(0x6005, &(0x7f0000001d80)=0xfffffffffffffffd, 0x4) r0 = syz_create_resource$futex(&(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex$unlock_wake_list64(r0, 0x28a, 0x28, &(0x7f0000000140)={r1, r2+60000000}, &(0x7f0000000180)=0x1ff, 0x7d) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='\v\x00\x00\x00u\x00'], 0xb) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001dc0)={0x22001500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 53.238139795s ago: executing program 4 (id=317): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0x3, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0xc182, 0x8001, 0x8, 0x5, 0xfffffffffffffffe, 0xfffffff8, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 53.222390238s ago: executing program 4 (id=318): syz_usb_connect(0x0, 0x4b, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040480b051000010102000109023900020100803209040000000000000009040100000000000009040101030000000007050102400000070581023200000705826d4197"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 51.989885839s ago: executing program 4 (id=326): mkdir(&(0x7f0000000040)='./file0\x00', 0x19b) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x1cb) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x40, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x1808000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd09, &(0x7f0000000240)) mount$9p_virtio(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x200040, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0xee01) 51.940057901s ago: executing program 4 (id=327): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x8, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], &(0x7f0000002980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000029c0)={@cgroup=r3, r3, 0x2e}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002a00)={0x0, 0x0}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002a40)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002a80)={r5, r3, 0x4, r3}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/144]}, 0x108) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x89f6, &(0x7f00000004c0)={'bridge0\x00', &(0x7f0000000500)=@ethtool_regs={0x12, 0x0, 0x5, "2a161d2d71"}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syslog(0x0, &(0x7f0000001740)=""/164, 0xa4) clock_gettime(0x4, &(0x7f0000000cc0)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000000c40)=[{{&(0x7f0000000540), 0x6e, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/134, 0x86}, {&(0x7f0000000800)=""/132, 0x84}, {&(0x7f00000008c0)=""/70, 0x46}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/98, 0x62}, {&(0x7f0000000b00)=""/207, 0xcf}], 0x2}}], 0x2, 0x2002, &(0x7f0000000d00)={r12, r13+60000000}) 51.339997945s ago: executing program 4 (id=329): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x79}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x8a}, 0x0) r2 = memfd_secret(0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xb8, 0x0, &(0x7f00000006c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x0, 0x2, 0x3}, @fda={0x66646185, 0x3, 0x1, 0x8}, @fd={0x66642a85, 0x0, r1, 0x0, 0x2}}, &(0x7f00000005c0)={0x0, 0x18, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0x100, 0x2, 0x2}, @fda={0x66646185, 0x2, 0x1, 0x10}, @fd={0x66642a85, 0x0, r2, 0x0, 0x2}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}}, @clear_death, @freeze_done={0x40086315, 0x3}, @register_looper, @acquire={0x40046305, 0x3}]}) (async) setns(0xc9, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000000c0)=ANY=[], 0xfdef) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r4 = socket$kcm(0xa, 0x2, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000140)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f00000001c0)={&(0x7f0000000380)=@in6={0x2, 0x4e20, 0xe0000000, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) (async) read(r0, &(0x7f00000002c0)=""/145, 0x91) (async) syz_io_uring_setup(0x2f90, &(0x7f00000004c0)={0x0, 0xc478, 0x8, 0x4, 0x200004}, &(0x7f0000000440), &(0x7f0000000480), 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 51.285492689s ago: executing program 35 (id=329): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x79}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x8a}, 0x0) r2 = memfd_secret(0x80000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0xb8, 0x0, &(0x7f00000006c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x0, 0x2, 0x3}, @fda={0x66646185, 0x3, 0x1, 0x8}, @fd={0x66642a85, 0x0, r1, 0x0, 0x2}}, &(0x7f00000005c0)={0x0, 0x18, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@flat=@handle={0x73682a85, 0x100, 0x2, 0x2}, @fda={0x66646185, 0x2, 0x1, 0x10}, @fd={0x66642a85, 0x0, r2, 0x0, 0x2}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}}, @clear_death, @freeze_done={0x40086315, 0x3}, @register_looper, @acquire={0x40046305, 0x3}]}) (async) setns(0xc9, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000000c0)=ANY=[], 0xfdef) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r4 = socket$kcm(0xa, 0x2, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000140)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r4, &(0x7f00000001c0)={&(0x7f0000000380)=@in6={0x2, 0x4e20, 0xe0000000, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) (async) read(r0, &(0x7f00000002c0)=""/145, 0x91) (async) syz_io_uring_setup(0x2f90, &(0x7f00000004c0)={0x0, 0xc478, 0x8, 0x4, 0x200004}, &(0x7f0000000440), &(0x7f0000000480), 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 45.098907096s ago: executing program 7 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) setns(0xc9, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000640)}) close_range(r3, r3, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000680)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000800)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) mount(0x0, 0x0, &(0x7f0000000380)='qnx6\x00', 0x20000a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0x2, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000540)="48cfb0d4b749377d4cbc98604f0ea8d7bdc3d79cc2217f4a9050c44c80cb90fa035d53c6c5b77a958ffc60257518c1f24f2c3d9a9b25fbd652e225f365c59b3753b07ebf298537c39c0a0dbab3a385001f91f9caa0e9c98bc016ade8080ffe99aa1db57bba43802091143b45fe8972948d1b339886e9e59d32de19ef04", 0x7d) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x19) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000008000/0x18000)=nil, 0x0, 0x32, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 44.93952217s ago: executing program 7 (id=378): r0 = syz_usb_connect(0x0, 0x4b, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) close_range(r1, 0xffffffffffffffff, 0x0) 44.408312573s ago: executing program 7 (id=379): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000440)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000004c0)={&(0x7f0000000500)={{@local, 0x4000}, {}, 0x400, "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"}, 0x418, 0x80000006}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000a80)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r3, 0x0, 0x0, 0x2406c014, &(0x7f0000000b40)={0x2, 0x4e20, @local}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r8, 0xb51beb7571f0c344, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x24}}, 0x8000) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) write$selinux_load(r9, 0x0, 0x60) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x7, 0x1f45, 0x4, 0x7ff}, 0x4, 0x1, 0x0, 0x7, 0x2ff, 0xb, 0x1a, 0x1c, 0x4, 0x7131d5f9, {0x7, 0x80000001, 0x7, 0x81, 0x3, 0xf70a}}}}]}, 0x78}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001580)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x4, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0xf, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x7}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x7fffffff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x7, 0x9}, {0x1, 0xfffffffb, 0x6, 0x6, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x2}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0xd, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x1, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x1, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0xd, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0xe628, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0x1ff, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x4, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0x7fff, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x7}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x7}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0xcc, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b8}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x4, 0x1, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x2a8b7572, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x801, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x3, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) fstat(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000080)={0x3f, &(0x7f00000000c0)=[{0xc000002, 0x92, 0x0, 0x1, 0x3}]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r12) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000300070010000800130008000300080012"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 44.27979419s ago: executing program 7 (id=380): socket(0x40000000015, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) listen(r0, 0x5) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01080000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000000800024000000001340003006400000074650545732f"], 0x104}}, 0x0) syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) fsetxattr$security_ima(r0, &(0x7f00000005c0), &(0x7f0000000600)=@sha1={0x1, "3ee4f1b170b74b89f252120203f975829b49eac5"}, 0x15, 0x0) pselect6(0x40, &(0x7f00000003c0)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000400)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, &(0x7f0000000300)='usrquota') socket$packet(0x11, 0x3, 0x300) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000640)={&(0x7f0000000680)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002680)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000026c0)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000002700)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002780)={'vlan0\x00', 0x0}) bind$xdp(r2, &(0x7f00000027c0)={0x2c, 0xa, r4, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x80000000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000002800)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000002940)=[{r2, 0x4}], 0x1, 0x0, 0x0, 0x0) 42.899877788s ago: executing program 7 (id=393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x4000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/0:0:0:0\x00', 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x40400, 0x0) shutdown(r0, 0x1) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'dt2814\x00', [0x100, 0x3, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x20000004, 0x4, 0xa, 0x2, 0x1, 0x3, 0x0, 0x9, 0xffffffff, 0x3, 0x10008, 0x10006, 0x8, 0xa, 0x9, 0xbffffff9, 0x1000, 0x7f, 0x8, 0x4, 0x0, 0xf5c0, 0x7, 0x7]}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x40001, 0x113) write(r5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = semget$private(0x0, 0x7, 0x180) semtimedop(r6, &(0x7f0000000240)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}, {0x4, 0x5a38, 0x3000}], 0x14, 0x0) ioctl$BSG_IO(r3, 0x2285, &(0x7f00000000c0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x3f38, 0x0, 0xc0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5}) 42.820192825s ago: executing program 7 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="20000000170a01030000020000000000020000040500010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="20000000170a01030000020000000000020000040500010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) 40.842513045s ago: executing program 36 (id=300): clock_getres(0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x40010, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x40, 0x14) 34.299392242s ago: executing program 6 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000a00)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000b80)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000bc0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) r4 = dup2(r2, r3) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000c40)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000300)={0x2, 0x0, {&(0x7f0000000c80)=""/34, 0x22, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000d40)=""/242, 0xf2, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000540)={0x2, 0x0, {&(0x7f00000005c0)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'veth1_to_batadv\x00', &(0x7f0000000840)=@ethtool_sfeatures={0x3b, 0x2, [{0x110000a, 0x1}, {0x5f35, 0xc}]}}) write$vhost_msg_v2(r1, &(0x7f0000000680)={0x2, 0x0, {&(0x7f0000000700)=""/58, 0x3a, 0x0, 0x1, 0x2}}, 0x48) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000cc0)) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000d00)={0xd, 0x2}) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000100)='ns/pid_for_children\x00') prlimit64(r6, 0xc, &(0x7f0000000140)={0x3ff, 0x83}, &(0x7f0000000940)) write$vhost_msg_v2(r1, &(0x7f0000000740)={0x2, 0x0, {&(0x7f00000007c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000880), 0x40c0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000980)="807bcc78adabab", &(0x7f0000000200), 0x1000, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r8, &(0x7f0000000280), 0x0}, 0x20) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000e80)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="f9ff2abd7000ffdbdf25010000120000000008410000004c00180000178c8470897be31b0e910b06f35427a70175647000000000000000000000000000001900000000000000000000006538680385d9a4e20000000000000000000000000000000000000000000000000000004000000076e4486f415004b8eb6f5cc6f7ae0684b3b69a54b0aa7390f16dfa50f1dd426be51f89b44c8460deef772d81a3c4efe6ab2cfdf96637cc7f01e7754d66d1cc2230dcfa76cc910dc1523fa5bc813e3a297e7f97a82849609e76a93e7ac1d71d57f86182"], 0x68}, 0x1, 0x0, 0x0, 0x20040010}, 0x10) 34.298831471s ago: executing program 6 (id=441): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x0, 0x0, @auto=[0x3a, 0x12, 0x23, 0x34]}, 0xc, 0xfffffffffffffff9) 34.15114328s ago: executing program 6 (id=442): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@bridge_newneigh={0x24, 0x1c, 0x401, 0x70bd28, 0x25dfdc04, {0x7, 0x0, 0x0, 0x0, 0x4, 0xe4, 0x9}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x24040040) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000580)=""/39) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000003000000080000000200000000000000", @ANYRES32, @ANYBLOB="0040000000000000000000071800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x8011}, 0x44880) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000500)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r7, 0x0, 0x0}, 0x20) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r9, &(0x7f0000001780)={0x2020}, 0x2020) 34.097986395s ago: executing program 6 (id=443): syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x30, 0x1a, {0x1a, 0xa, "e8a1548385da1600c05994eeea188b560b402cc28ca6241f"}}, &(0x7f0000000040)={0x0, 0x3, 0xea, @string={0xea, 0x3, "5a2fd69fbc626ca5bf8356487137f1d83621e527e88a27d6f64fd37579a961efa10622df330667d8d922a91afaa96195fc78c5e0cfdea1e0e0ca3b572b2226ed785d4270836d9feb20262de70d8c670f38b482cc78bc0764828b80e214745e87365c81b373cd4ed0cbca242c8a71e883f3325604b865e131b3e7479da2a7936c34207608dc2ca426bc092648e297d60bb90cb029c1495e04351f7bc9ce89e495f117ce47cec42169c5e9040cbc359ca095ddc0da99b1327ba257eab3832281bae91ad372b3e1bc2b64f5d06c288fb23a145d61b6966147eabeec98c909a748ba6892ea0d263dd5d7"}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x4c, "da7be89de08729b7d6688e0a609978d07ffaa5326f3d599ea5e7c9655ac5585cc7b45630b8275b2f956d7a3b13eb0da9777855ce1f92f82c90c97fdb525d6ce533b8c833803f6932ee6cd595"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000280)={0x20, 0x81, 0x3, "b4eca0"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "48ea"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "a334"}, &(0x7f0000000340)={0x20, 0x84, 0x1, 'r'}, &(0x7f0000000380)={0x20, 0x85, 0x3, "7f7adf"}}) (async) r0 = syz_open_dev$dmmidi(&(0x7f0000000440), 0x6, 0x1a3400) close(r0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000480)={0x0, 0x8, 0x0, 0x0, 0xffff}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000004c0)={0x1}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x94, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f00000006c0)=[@nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0x838, 0x8}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_load_code={0x12e, 0x7f, {0x0, "66baf80cb838b12980ef66bafc0cedf30f514608f36d6536660fc7b1f5ffffff36f3450fc7370fc7750f480fc72dfe000000b9800000c00f3235002000000f30c7442400eb000000c744240204000000ff2c2466baf80cb8ecef8489ef66bafc0cb810b20000ef"}}, @nested_load_code={0x12e, 0x50, {0x3, "8f0878c2c4760f01c2b8010000000f01c166410f7ca10000000066b8e1000f00d82e66430f384131440f073e0f21c1643e460f01c80f20a5"}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x8e, 0x1, 0x2}}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x7}}], 0x187}) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000008c0)={0x2, 0x0, [{}, {}]}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), r1) (async) r4 = syz_open_dev$sndpcmc(&(0x7f0000000980), 0x7fffffffffffffff, 0x410000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f00000009c0)={0x4, [[0x9, 0x9a22, 0x6, 0x4, 0x3, 0x3, 0x2334, 0x7], [0x7, 0x6, 0x3, 0x9, 0x2, 0x691d, 0x4921, 0x3], [0x2, 0xfffffff9, 0x8, 0x202, 0x3, 0x9, 0x18, 0x6]], '\x00', [{0x8, 0x7f, 0x0, 0x1}, {0x8c5, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4, 0xabaf, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x10000, 0x0, 0x0, 0x1}, {0x2, 0x5, 0x0, 0x0, 0x1}, {0x200, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x0, 0x0, 0x1}, {0xfff, 0x4, 0x0, 0x0, 0x1}, {0x6, 0x81, 0x1, 0x0, 0x1}, {0x2, 0x80000000, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xde, 0x5, 0x1, 0x1}], '\x00', 0x2d8}) (async) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000d80)={&(0x7f0000000c40)=[{0x80000000, 0x0, 0x0, {0x100, 0x9, 0x2}}, {0x1, 0x2, 0x0, {0x1, 0x1, 0x2}}, {0x2, 0x0, 0x0, {0x6, 0xe0, 0x1}}, {0x3, 0x1, 0x0, {0xfffffffffffffc00, 0x2, 0x1}}, {0x1, 0x0, 0x0, {0x0, 0x8}}, {0x4, 0x3, 0x0, {0x3, 0x7fff, 0x1}}, {0x0, 0x0, 0x0, {0xffff, 0x67a3, 0x2}}, {0x9, 0x0, 0x0, {0x7, 0x3}}, {0x7, 0x1, 0x0, {0x80000001, 0x8, 0x1}}, {0x6, 0x0, 0x0, {0x10, 0x10001, 0x1}}], 0xa, 0x20, 0x3, 0xfffffffffffffffa}) (async) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000dc0)={0x9a, 0x9, 0x2, 0x3, @lba=0x6, 0x4}) (async) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000e00)=0x6) (async) r5 = syz_usb_connect$cdc_ecm(0x3, 0x63, &(0x7f0000000e40)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x9, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x2e, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xb, 0x24, 0x6, 0x0, 0x0, "5b5f2f62e852"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0xd, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf8, 0x8, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x72, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xe, 0x40}}}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x250, 0x6, 0x4, 0x3, 0x8, 0x30}, 0x33, &(0x7f0000000f00)={0x5, 0xf, 0x33, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x8, 0x0, 0x1, [0xf, 0x3fcf, 0xc030, 0xc0f0, 0x3f0f, 0xff00c0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0xc2, 0x7}]}, 0x4, [{0x33, &(0x7f0000000f40)=@string={0x33, 0x3, "b07f92c77563230497fc7d0c31fc1a259958ab5e131a52b5745b7d9e5e57301f5809190fa9078fa9020e263393ea6ddc9e"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x1007}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000011c0)={0x14, &(0x7f00000010c0)={0x20, 0x24, 0xa8, {0xa8, 0xe, "a291471f025b6b06a505d235e257ae23e6bba95661e67a95960ee7294c7ebd3af0ea2152413b56f09ede6f5c673c166b485f8f8143921b7938454e6167dd41ffd815ca844485d0e46d0212aeab43605ca38c3f7a83335d7447481d272e04db81f10ab4531a59f0cae7189bd0e0eea294b93773722e175825f56353e77c223ce31fc3cb89b38a862d6647bf08f8f1a3bb7f66b8d3ef03a47b67767c31392021fd035cbc7ab558"}}, &(0x7f0000001180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001300)={0x1c, &(0x7f0000001200)={0x40, 0x1, 0x5a, "36ed161e9fadc5243dc2ec74e8374da417e7a1c314029d1b2246573655596ee84ba59c695ba3a1d06699fce56add3a83bf5776ec6338fe9a430a2dacb5a30353e0d7652539638244f4b0364c0431b8e6043efb09c9f0af13b2e9"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x3}}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000001380)={'sit0\x00', &(0x7f0000001340)={@private=0xa010100, 0x0, 0x0, 0x10, 0x0, [{@loopback}]}}) (async) r7 = syz_open_dev$usbfs(&(0x7f00000013c0), 0x8, 0x181402) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000001400)={0xedc, 0x11, [{0xa, 0x1}, {0x4}, {0x9, 0x1}, {0xd}, {0x7}, {0xd}, {0xf}, {0x2}, {0x1, 0x1}, {0xd, 0x1}, {0xb, 0x1}, {0x5, 0x1}, {}, {0x41}, {0x6}, {0x1}, {0x6, 0x1}]}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000001480)=0x7) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000014c0)={0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000001540)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x5}) (async) syz_kvm_setup_cpu$x86(r9, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001600)=[@textreal={0x8, &(0x7f0000001580)="66b9cd0200000f32f30f090f44ec65660ffa91577df390baf80c66b81754488f66efbafc0cb007ee66b9f808000066b80000000066ba000000800f300f01cfbaf80c66b860e2528166efbafc0c66b86dde8ac266ef66b9800000c00f326635000400000f30", 0x65}], 0x1, 0x48, &(0x7f0000001640)=[@dstype3={0x7, 0x2}], 0x1) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x78, 0x4, 0x8, 0x606, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x20000000}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xb85}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x89e0}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x80) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 32.74844654s ago: executing program 6 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x10000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1fd) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='3', 0x4e) memfd_create(&(0x7f0000000380)='%\x00', 0x3) (async) memfd_create(&(0x7f0000000380)='%\x00', 0x3) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, 0x0) syz_clone(0x4200, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000400), 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x5, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x5, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 32.217890259s ago: executing program 6 (id=451): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000380)={0xd}, 0x4) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000400)='X', 0x34000, 0x0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x800000000000009, 0x400003, 0x7, 0x0, 0x0, 0x4002004c4, 0x9, 0x76, 0x800000000c592, 0x1000, 0x10001, 0x3, 0x2000000000000000, 0x4000000000000b3, 0xfffffffeffffff04], 0xeeee0000, 0x201893}) setns(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x2000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_cancel(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000001, 0x0, 0x2}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x40000, 0x10000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 27.830507963s ago: executing program 37 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="20000000170a01030000020000000000020000040500010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="20000000170a01030000020000000000020000040500010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) 16.498569062s ago: executing program 38 (id=451): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xfffffffc, 0xea, 0x440, 0x3, 0x32, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000380)={0xd}, 0x4) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000400)='X', 0x34000, 0x0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x800000000000009, 0x400003, 0x7, 0x0, 0x0, 0x4002004c4, 0x9, 0x76, 0x800000000c592, 0x1000, 0x10001, 0x3, 0x2000000000000000, 0x4000000000000b3, 0xfffffffeffffff04], 0xeeee0000, 0x201893}) setns(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x2000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_cancel(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000001, 0x0, 0x2}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x40000, 0x10000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.499045186s ago: executing program 5 (id=615): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x109000, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1000, r1}, 0x38) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x0, 0x7e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) (async) chdir(&(0x7f0000000440)='./bus\x00') (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000340)={{0x6, @loopback, 0x15, 0x0, 'dh\x00', 0x12, 0x0, 0x76}, {@loopback, 0x15, 0x2, 0x1, 0x8}}, 0x44) setsockopt(r2, 0x0, 0x489, &(0x7f00000003c0)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000001c0)=""/92}, 0x20) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x33) 6.317750201s ago: executing program 5 (id=631): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) write(r0, &(0x7f0000000240)="651ba6daa82139988c376e7876c488796b6d8f0b12c20963772e891122cee8148592c0fcf25e1b2297a09c00eb39fbcf6a25efab02954edc0aac6ebcd1531e61d74a1fbb1b072f6d3c6f626ea42b628ceb939cffabb50ffc", 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) 6.287004119s ago: executing program 5 (id=632): r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) close_range(r1, 0xffffffffffffffff, 0x0) 4.696702036s ago: executing program 1 (id=657): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = epoll_create1(0x80000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x360, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x314, 0x3, 0x0, 0x1, [{0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xd0}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "1b9803b4ba9472c9688a3e688a4c896f1a9255b83d49e5a6a673c379236ef835d9a4b185c8324f040a4baeec1085c25e8de2f32f8341ecace9c15d50bbd71b8c52e48f923dd140c622f65cc21135b9d4ab"}, @NFTA_SET_ELEM_DATA={0x44, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_DATA={0x1a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "e44a2faa443e5799023b60c8b667827c62b787acb28df252ab38e8ee384ed3d4e04fa0e6b3c67a9c46966a37bf355ca5bd77cf9aa29083c7b255aad6f380e012af0ce9f760e1fbab17aa77f56c963b83a447fe6826d5dcecce51b664d3"}, @NFTA_DATA_VALUE={0x3d, 0x1, "4ba12b5448c0fb337963407319ab9a7131cb4390586262258cbcba7c673d747ec8c7ff806fa4b1ddf1ccefb92efb59e8d33f47156e662941a1"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xad, 0x1, "3101764c962fd331dab2ee918a154a2ba2de833accbd44842597ce46243ad6710afcdad12d7e8b0cf82060bd5a01e371ceb00d0127c330e6f564e13768034984d9d02d9e04390e66ba22e0249673e629d10356f833eb1515660c283a139adb83bac24b3671a364c1433ebc4edd9e20536df77492d123f354cfdd89a037654de054de79e19871aecceb45b837bad228111ad3003b5d6ad44ba779e50e714710e9cb1d612a663b5ff6aa"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x24040800}, 0x20040040) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008002c"], 0x270}}, 0x0) sendmmsg(r2, &(0x7f0000000940), 0x4000000000001f2, 0xfc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000240)={0x20000014}) close_range(r0, 0xffffffffffffffff, 0x0) setgid(0xee00) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='bpf\x00', 0x214dc7, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@sg0, r8, 0x0) read$FUSE(r7, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 4.608629888s ago: executing program 1 (id=658): setuid(0xee00) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) (async) fchmodat(r1, &(0x7f00000020c0)='./file0\x00', 0x14) (async) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd) 4.608298996s ago: executing program 1 (id=659): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$video(&(0x7f0000000080), 0xff, 0x100101) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000240)={0x5, 0x3f, @value=0x2}) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000380), &(0x7f0000000480)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1, 0x0, 0x0, 0x40800}, 0x0) 4.368770803s ago: executing program 1 (id=660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000ac0)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000b40)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000280)={@l2tp={0x2, 0x0, @local, 0x3}, {&(0x7f0000000140)=""/225, 0xe1}, &(0x7f0000000240), 0x74}, 0xa0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e20, 0x10000, @loopback, 0x6}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="8c", 0x1}]}, 0x8853) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000640)={{0x0, 0x2, 0xf0e}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000007c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) preadv(r4, &(0x7f0000000840)=[{&(0x7f0000000880)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000900)="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", 0x1ac) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b80)={0x14, r6, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONT(r7, 0x4b60, &(0x7f00000004c0)=""/251) 3.637289025s ago: executing program 8 (id=666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4044004) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x7c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x11}}, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x7c}}, 0x20000014) 3.578731474s ago: executing program 8 (id=667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setns(0xc9, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) (async) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) listen(r3, 0x1) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x12, 0x600, 0x0, 0x202, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x6a, 'netbios-ns\x00', 'syz1\x00', {0x100000000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) (async) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r5 = accept(r3, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x80) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) 2.693080533s ago: executing program 5 (id=670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$tun(r0, &(0x7f0000000bc0)=ANY=[], 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@local, 0x0}, &(0x7f0000000540)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0c0007000a00000000000000040001002c0006800c000c0005000000000000000c000500080000000000000008000100", @ANYRES32=r5, @ANYBLOB="0800080004000000"], 0x84}, 0x1, 0x0, 0x0, 0x4008015}, 0x60) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xdbd}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r12 = userfaultfd(0x80001) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r12, 0xc028aa03, &(0x7f0000000740)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x3, 0x6040000}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x13, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r13, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 2.692869492s ago: executing program 5 (id=671): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = io_uring_setup(0x2a8d, &(0x7f0000000140)={0x0, 0x869f, 0x2, 0x1, 0x1fb, 0x0, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/ttyUSB0\x00', 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000440), 0x318, 0x3ec0) close(0x3) write(r3, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000370429bd7000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c0400000000002c0012800b00010069703667726500001c0002800400120014000600fc0100ffff0000000000000000000000561ace433599eb288eae9a935ca18f874602555d58e61e8507347a2bcfdf7811e07fdd71c630885358b9fc2a26fa3d6add2cda8c411cb254f98b038d81c6f7d500888d498858d8e494071270f4c2c5368a4e590f75736bbfa741cf5f6a4709a0bd19744a3d3e9d436112c01ede9624cc272a15fdc611b6605f54f188b667717dc7c59aef1bcfcd8d4f8f8144a152d066c80c64f7ce57112d4f"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004044}, 0x84) 2.249397929s ago: executing program 5 (id=678): r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000200000040480b051000010102000109023900020100803209040000000000000009040100000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) close_range(r1, 0xffffffffffffffff, 0x0) 2.189270561s ago: executing program 9 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000380)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r1, @in6={{0xa, 0x4e20, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x7, 0x34, 0x1000, 0x4}, 0x9c) (rerun: 64) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000ff00000108000f"], 0x74}}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') (async, rerun: 64) r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x8003, 0x0) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc4c85512, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x91, 0x973b, 0x84, 0x2000}) (async) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)=']/]\x00', &(0x7f0000000180)='-{}:\\\\\x00', 0x0) 1.999512215s ago: executing program 9 (id=681): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3980, 0x0) (async) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x54, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) set_robust_list(0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) (async, rerun: 64) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x50, 0x1411, 0x300, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) 1.309651073s ago: executing program 8 (id=682): bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='mounts\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x1030c68, 0x4) syz_emit_ethernet(0x46, &(0x7f0000002740)=ANY=[@ANYBLOB], 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002a00)={'ip6tnl0\x00', &(0x7f0000002980)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x2, 0x8, 0x19, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8000, 0x6, 0x80000000}}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000002a40)=r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002700)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000000c0)) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r8, {0x5, 0x1}, {0x1, 0xfff2}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.209758873s ago: executing program 8 (id=683): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x121040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xf) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0xa9081, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000300)={0x0, 0xae, 0x3ff, 0x38413552, 0x0, [r6], [0x2b8, 0x800], [], [0x0, 0x0, 0x1000000, 0xfffffffffffffffe]}) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') read$FUSE(r7, &(0x7f00000003c0)={0x2020}, 0x2020) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002400)={r0}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002640)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000002480), 0x318, 0x3ec0) close(0x3) syz_emit_ethernet(0x2a, &(0x7f0000002480)=ANY=[@ANYBLOB="ffff0100aaaabb08060001080006040000000000ac1414aa"], 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f00000024c0)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r11, 0x8949, &(0x7f0000002500)) write(r9, 0x0, 0x0) r12 = openat$sr(0xffffffffffffff9c, &(0x7f0000002680), 0x220000, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000002740)='bpf_lsm_shm_shmat\x00') r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000028c0)={0x6, 0x1, &(0x7f0000002780)=@raw=[@call={0x85, 0x0, 0x0, 0x28}], &(0x7f00000027c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002800)={0x1, 0x3, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002840)=[r0, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002880)=[{0x5, 0x4, 0xd, 0x4}], 0x10, 0x2}, 0x94) r14 = open(&(0x7f0000000200)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r14, 0xc0049364, &(0x7f0000002980)) bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x1c, 0x11, &(0x7f00000029c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@ldst={0x1, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffe, 0xffffffffffffffff}, @ldst={0x1, 0x3, 0x6, 0x6, 0xb, 0xffffffffffffffc0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002580)='GPL\x00', 0x8, 0x6c, &(0x7f0000002500)=""/108, 0x40f00, 0x0, '\x00', r8, @fallback=0x2c, r12, 0x8, &(0x7f00000026c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002700)={0x2, 0x4, 0x5, 0x80}, 0x10, 0xffffffffffffffff, r13, 0x0, 0x0, &(0x7f0000002980)}, 0x94) ioctl$TCFLSH(r0, 0x400455c8, 0x1) 1.20924s ago: executing program 1 (id=684): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8004) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r2, 0x701, 0x70bd2b, 0x25dfdc02, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x4000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80028800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0xc044) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000042) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r5, 0x80045643, 0x1) 1.166146573s ago: executing program 1 (id=685): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = io_uring_setup(0xf08, &(0x7f0000000140)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000000000000001"], 0x30}], 0x1, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000240)=[r1], 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00') (rerun: 64) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0) (async) umount2(&(0x7f0000000340)='./file0/file0/..\x00', 0x4) umount2(&(0x7f0000000380)='./file0/file0/..\x00', 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0xa, 0xc4, 0x80, 0x8, 0x1, 0xf, 0x8, 0xd4e}, {0x8, 0x7ff, 0x4, 0x2, 0xc, 0x0, 0x9, 0x7, 0x4, 0x93, 0x1, 0x3, 0x9}, {0x5, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x26, 0xfb, 0x1, 0xff, 0x2}], 0x8}) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="b91b0000000f3225ff0f00000d000010000f30b878563412bb000310008903", 0xfffffcad}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.02391777s ago: executing program 9 (id=686): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='\x00') madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550001000000000000f9000007008201", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="16ab7c38e000030000010001000000000000000008"], 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000009f, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.023086502s ago: executing program 9 (id=687): r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xcf, 0x2f6, 0x5, 0x31324d59, [0xfffffff9], [0x3, 0x2a91], 0x13a}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000001c0)="1a00000002000000", 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_delrule={0x30, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'vcan0\x00'}]}, 0x30}}, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, &(0x7f0000000200)={0x9, 0x10001}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000004c0)=ANY=[], 0x6d) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000240)=0x2, 0x12) openat$nmem0(0xffffffffffffff9c, &(0x7f0000000140), 0xa0040, 0x0) (async) dup3(r0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xcf, 0x2f6, 0x5, 0x31324d59, [0xfffffff9], [0x3, 0x2a91], 0x13a}}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r4, 0x84, 0x81, &(0x7f00000001c0)="1a00000002000000", 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_delrule={0x30, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'vcan0\x00'}]}, 0x30}}, 0x0) (async) ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, &(0x7f0000000200)={0x9, 0x10001}) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000004c0)=ANY=[], 0x6d) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async) write$cgroup_int(r6, &(0x7f0000000240)=0x2, 0x12) (async) 879.583019ms ago: executing program 9 (id=688): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x101) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sec\x00', &(0x7f00000015c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000003bc0)={0x2020}, 0x2020) setxattr$incfs_id(&(0x7f0000003b40)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000003b80), 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000001680)={0x2, &(0x7f00000016c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001700), 0x4000190, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002840)={0x3, &(0x7f0000002880)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xffff700c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r5 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000028c0)='gre0\x00', 0x10) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000005c00)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000002700)='vlan1\x00', 0x10) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @local}, 0x1c) connect$inet6(r6, &(0x7f0000002780)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000027c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000001406fffe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="5701100190780000"], 0x0) getdents64(r0, &(0x7f0000001700)=""/4096, 0x1000) mount$9p_virtio(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000039c0)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) mknodat(r7, &(0x7f0000003a00)='./file1\x00', 0x4, 0x4) umount2(&(0x7f0000003a40)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000003a80)='./file0\x00', &(0x7f0000003ac0), 0x0, &(0x7f0000003b00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) read(r0, &(0x7f00000005c0)=""/4096, 0x1000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="010026bd000380000046f2284400ffe90000"], 0x18}}, 0x4000) 289.428789ms ago: executing program 8 (id=689): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) listen(r1, 0x7fff) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @multicast1}, {0x1, @remote}, 0xc, {0x2, 0x4e23, @empty}, 'wg2\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000180)={0x8, 0x3, 0x5f, 0x6, 'syz0\x00', 0x9}) fcntl$setstatus(r2, 0x4, 0x44800) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f00000001c0)=0x9, 0x8) io_setup(0x9, &(0x7f0000000200)=0x0) close_range(r2, r1, 0x2) io_destroy(r4) pselect6(0x40, &(0x7f0000000240)={0x1, 0x7, 0x0, 0x2, 0x9c, 0x2, 0x1, 0xf}, &(0x7f0000000280)={0x3, 0x8, 0x3, 0x8000000000000000, 0x9, 0x6, 0x1, 0x6}, &(0x7f00000002c0)={0x100000000, 0x5, 0x6, 0xfffffffffffffff7, 0x6, 0x2, 0x1, 0x8000000000000001}, &(0x7f0000000300), &(0x7f0000000380)={&(0x7f0000000340)={[0xd]}, 0x8}) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000003c0)={r0, 0xeb, 0x1ff, 0x9}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000004c0)='GPL\x00', 0x3, 0xb8, &(0x7f0000000500)=""/184, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xe, 0x3, 0x1}, 0x10, 0x0, r2, 0x6, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x1, 0x5, 0x4, 0x2}, {0x4, 0x5, 0xc, 0x2}, {0x5, 0x2, 0xb, 0xa}, {0x3, 0x3, 0x6, 0x1}, {0x0, 0x3, 0xb}, {0x4, 0x3, 0x5, 0xa}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000007c0)=r5, 0x4) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$cgroup_pid(r7, &(0x7f0000002880)=r8, 0x12) pipe(&(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000003900)={0x1, 0x8, 0x1000, &(0x7f0000002900)=""/4096}) r11 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_SIOCADDDLCI(r11, 0x8980, &(0x7f0000003940)={'pimreg\x00', 0x9}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000003980)={r0, 0x0, 0x20, 0x0, 0x5bd}, &(0x7f00000039c0)=0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000003a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb, 0xe}}, './file0\x00'}) ioctl$OCFS2_IOC_REFLINK(r12, 0x40186f04, &(0x7f0000003ac0)={&(0x7f0000003a40)='$\x00', &(0x7f0000003a80)='\x00', 0x7fffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000003b00)) io_submit(r4, 0x6, &(0x7f0000004080)=[&(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x100, r10, &(0x7f0000003b40)="3135e5a44fcc2665618258b2b59f1ba48cb8d13517ebfdc9e56380dc9a9c372f0368b6679814788e2e77d453af793fdea8f579ef67f4810fc868aac09881b09a504934e08dc08ba282f817cb08444c2f24364f10c076538d9c00277da670a96217cef6bef8758652e62f06a77f673b9b934dbbfb540e8877d5a8905fe6c4720ec6d2ae1904ef329ddd186d85630acaedabc02fc6cd973bc95436921f1eb00b454e73bef3a40cc19260a5eb2d6143e799a6f0abdccaed03526ab44581020c29c2cc890c667bbd", 0xc6, 0x89, 0x0, 0x3}, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000003c80)="f8d857fbdaaf377070eb0ccaf0f8decd12f4410066a2efdb5130bb86955aed503b9cb83503d215705879b242f96ffbe073cef2888c706edffa6f6dcfe1c0246821165966962604727f254cd72da2f64819023146bae64fc49c7476e1c468d12ff3fdbd50d18d3b3541fa8ae011a6515f753dc293444e27c314f8762d9c66ccf10cdb06604b211494e0027bdf56116efe1ad92f097c438df63f4bb85a498d8d5e103c72182123fc40f7f1ecfa8fefeff3acf9a602fa19aef1e002648bbc26ec2b7655d3ac5898eef74d6a31", 0xcb, 0x7, 0x0, 0x2, r9}, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000003dc0)="1f2a0523ecea657bf708bb29df8abb26c2a7f676338f", 0x16, 0xa, 0x0, 0x3, r10}, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x1ff, r7, &(0x7f0000003e40)="7d6dc23114b62f524c3e0be5f32bd7e1a7a489e24212eca6ba027bd2d24d8d81d8f6bd5e05085ef76574b86aa2b3c36f715f34c120913e1d323b83ab43a8d3dc6120ed34", 0x44, 0x8000000000000000, 0x0, 0xcc2d45d93f287a45}, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x1, 0x5, r3, &(0x7f0000003f00)="de21f3a10f572b8f404761fe4e283768b5aaf5eba3eb5f393d2782c65c8720942a839e0793dcbb7741891a93c74b8763e3067bce9b0843d28a8226939fb4b93bd605d12d6ef88c60c7a50c470756dcac3c81e63a182b53c7ef76f7cbf6b58c714638f32135afaa3d2115cb0237e95f8b37d7ce5614a22f11c8b39dbb6a69a467f2fcc66884db8075ce7ca46a67a2ab9bd677f8", 0x93, 0x3dd431c5, 0x0, 0x1, r12}, &(0x7f0000004040)={0x0, 0x0, 0x0, 0x0, 0xa0, r2, &(0x7f0000004000)="a1936031a5bfabf28a3e1841ac43e1119d0894e5c3ba61454b61c4843a2835a1a770bc5f85cb666a025655f9be1048a9", 0x30, 0x3, 0x0, 0x1, r9}]) 149.957398ms ago: executing program 8 (id=690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0x2004}) bind$unix(0xffffffffffffffff, &(0x7f0000000800)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000008c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000940)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000980)=0x44f3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) request_key(0x0, &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)='\'&!\x00', 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0xf, 0x1) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000002c0)=@filename='./sys\x00', r6, &(0x7f00000003c0)={0x4, 0x0, 0x1}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000240)={0x0, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000280)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='1\x00', 0x1) 0s ago: executing program 9 (id=691): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='252:0 1', 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x183600, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@in_dx={0x69, 0x20, {0xbb4b, 0x2}}, @nested_amd_stgi={0x17e, 0x10}], 0x30}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x3, 0x1000000fb9, 0x1000b, 0x600000000, 0x20000cea, 0x4, 0x9, 0x10, 0x73, 0x8000008000000000, 0x79, 0x1, 0x4, 0x8000000000000b, 0xffffffffffffffff, 0x6], 0x0, 0x2002}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) kernel console output (not intermixed with test programs): anufacturer: syz [ 87.495400][ T6645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.495413][ T6645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.519583][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.520569][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.520604][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.532274][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.532287][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.683079][ T42] dvb_ttusb_budget: ttusb_init_controller: error [ 87.683090][ T42] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 87.730718][ T42] DVB: Unable to find symbol cx22700_attach() [ 87.753272][ T42] DVB: Unable to find symbol tda10046_attach() [ 87.753281][ T42] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 87.765224][ T42] usb 9-1: USB disconnect, device number 8 [ 87.833034][ T7382] jffs2: notice: (7382) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 87.835134][ T7383] erspan0: entered promiscuous mode [ 87.835449][ T44] kauditd_printk_skb: 28 callbacks suppressed [ 87.835462][ T44] audit: type=1400 audit(1792221552.363:751): avc: denied { read write } for pid=7380 comm="syz.5.322" name="uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.835810][ T44] audit: type=1400 audit(1792221552.363:752): avc: denied { open } for pid=7380 comm="syz.5.322" path="/dev/uinput" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.836513][ T44] audit: type=1400 audit(1792221552.363:753): avc: denied { ioctl } for pid=7380 comm="syz.5.322" path="/dev/uinput" dev="devtmpfs" ino=941 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.844944][ T44] audit: type=1400 audit(1792221552.373:754): avc: denied { ioctl } for pid=7380 comm="syz.5.322" path="/dev/vbi2" dev="devtmpfs" ino=987 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.885072][ T44] audit: type=1400 audit(1792221552.413:755): avc: denied { bind } for pid=7387 comm="syz.6.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.886608][ T44] audit: type=1400 audit(1792221552.413:756): avc: denied { write } for pid=7387 comm="syz.6.323" path="socket:[20742]" dev="sockfs" ino=20742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.887574][ T7388] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 87.945658][ T44] audit: type=1400 audit(1792221552.473:757): avc: denied { mount } for pid=7390 comm="syz.5.324" name="/" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 87.946299][ T44] audit: type=1400 audit(1792221552.473:758): avc: denied { search } for pid=7390 comm="syz.5.324" name="/" dev="configfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.946477][ T44] audit: type=1400 audit(1792221552.473:759): avc: denied { search } for pid=7390 comm="syz.5.324" name="nullb" dev="configfs" ino=6392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.953780][ T44] audit: type=1400 audit(1792221552.473:760): avc: denied { write search } for pid=7390 comm="syz.5.324" name="nullb" dev="configfs" ino=6392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 88.131505][ T5096] Bluetooth: hci4: command tx timeout [ 88.253772][ T7393] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1768304430.3237228.0), cmd(9) [ 88.254010][ T7393] 9pnet_virtio: no channels available for device syz [ 88.270449][ T6269] ovl_lookup_single: 89 callbacks suppressed [ 88.270466][ T6269] overlayfs: failed lookup in lower (newroot/45, name='bus', err=-40): overlapping layers [ 88.270603][ T6269] overlayfs: failed lookup in lower (newroot/45, name='bus', err=-40): overlapping layers [ 89.051928][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.052538][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.053484][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.054151][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.054579][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.311787][ T7414] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.319400][ T12] bridge_slave_1: left allmulticast mode [ 89.319576][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.323405][ T12] bridge_slave_0: left allmulticast mode [ 89.323851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.393650][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 89.415732][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.416984][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.417587][ T12] bond0 (unregistering): Released all slaves [ 89.463095][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 89.494833][ C3] vcan0: j1939_tp_rxtimer: 0xffff888034ef5000: rx timeout, send abort [ 89.496597][ C3] vcan0: j1939_tp_rxtimer: 0xffff888034ef4000: rx timeout, send abort [ 89.497906][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888034ef5000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.505364][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff888034ef4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.516082][ T12] : left promiscuous mode [ 89.666733][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 89.702793][ T7414] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.702859][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.702920][ T7414] bridge_slave_0: entered allmulticast mode [ 89.703700][ T7414] bridge_slave_0: entered promiscuous mode [ 89.705533][ T7414] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.705573][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.705628][ T7414] bridge_slave_1: entered allmulticast mode [ 89.706463][ T7414] bridge_slave_1: entered promiscuous mode [ 89.724412][ T7453] ip_tables: iptables: counters copy to user failed while replacing table [ 89.725684][ T7414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.755504][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.755854][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.810456][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.815761][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.818196][ T7459] misc userio: Begin command sent, but we're already running [ 89.881755][ T7414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.903219][ T7455] __nla_validate_parse: 129 callbacks suppressed [ 89.903232][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.340'. [ 89.914117][ T5808] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.914650][ T5808] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.914679][ T5808] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.914707][ T5808] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.934708][ T7414] team0: Port device team_slave_0 added [ 89.942667][ T7414] team0: Port device team_slave_1 added [ 89.995942][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.995959][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.995979][ T7414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.000955][ T7414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.000964][ T7414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.000977][ T7414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.087832][ T7414] hsr_slave_0: entered promiscuous mode [ 90.088232][ T7414] hsr_slave_1: entered promiscuous mode [ 90.088514][ T7414] debugfs: 'hsr0' already exists in 'hsr' [ 90.088530][ T7414] Cannot create hsr debugfs directory [ 90.108938][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.117956][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.192874][ T12] team0 (unregistering): Port device team_slave_1 removed [ 90.203493][ T12] team0 (unregistering): Port device team_slave_0 removed [ 90.208870][ T5096] Bluetooth: hci4: command tx timeout [ 90.291456][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 90.352431][ T7495] netlink: 'syz.5.342': attribute type 21 has an invalid length. [ 90.352446][ T7495] netlink: 156 bytes leftover after parsing attributes in process `syz.5.342'. [ 90.500487][ T7414] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 90.502226][ T7414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.502690][ T7414] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 90.504184][ T7414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.504537][ T7414] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 90.506189][ T7414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.514329][ T7414] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 90.517583][ T7414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.521201][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 90.591108][ T7414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.608517][ T7414] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.617173][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.617218][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.620325][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.620368][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.631177][ T7531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=7531 comm=syz.6.346 [ 90.800548][ T7552] overlay: Unknown parameter 'uid' [ 90.831932][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.350'. [ 90.849506][ T7414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.986978][ T7414] veth0_vlan: entered promiscuous mode [ 90.997007][ T7414] veth1_vlan: entered promiscuous mode [ 91.010416][ T7414] veth0_macvtap: entered promiscuous mode [ 91.012396][ T7414] veth1_macvtap: entered promiscuous mode [ 91.019234][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.024425][ T7414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.030420][ T7567] netlink: 'syz.5.351': attribute type 2 has an invalid length. [ 91.051760][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.052459][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.072695][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.072960][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.089916][ T5096] Bluetooth: hci0: command tx timeout [ 91.118013][ T6646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.118033][ T6646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.153483][ T6646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.153497][ T6646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.314826][ T7574] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20265 [ 91.314883][ T7577] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20265 [ 91.344044][ T7576] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 91.970274][ T7581] bond0: (slave bond_slave_0): Releasing backup interface [ 92.201518][ T7581] bond0: (slave bond_slave_1): Releasing backup interface [ 92.207741][ T7581] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 92.289408][ T5096] Bluetooth: hci4: command tx timeout [ 92.631051][ T7248] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 92.779787][ T7248] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 92.784042][ T7248] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 92.784065][ T7248] usb 10-1: Product: syz [ 92.784076][ T7248] usb 10-1: SerialNumber: syz [ 92.786030][ T7248] usb 10-1: config 0 descriptor?? [ 92.992850][ T44] kauditd_printk_skb: 45 callbacks suppressed [ 92.992907][ T44] audit: type=1400 audit(1792221557.523:806): avc: denied { connect } for pid=7595 comm="syz.5.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.997673][ T7248] usb 10-1: USB disconnect, device number 3 [ 93.083746][ T7596] zswap: compressor Èx not available [ 93.163054][ T44] audit: type=1400 audit(1792221557.693:807): avc: denied { write } for pid=7629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.178942][ T5096] Bluetooth: hci0: command tx timeout [ 93.183579][ T7636] netlink: 'syz.7.363': attribute type 1 has an invalid length. [ 93.184281][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.363'. [ 93.231028][ T44] audit: type=1400 audit(1792221557.763:808): avc: denied { write } for pid=7637 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.472546][ T44] audit: type=1400 audit(1792221558.003:809): avc: denied { mount } for pid=7645 comm="syz.7.366" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 93.472971][ T44] audit: type=1400 audit(1792221558.003:810): avc: denied { search } for pid=7645 comm="syz.7.366" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.473099][ T44] audit: type=1400 audit(1792221558.003:811): avc: denied { write } for pid=7645 comm="syz.7.366" name="tracing_on" dev="tracefs" ino=2620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 93.473248][ T44] audit: type=1400 audit(1792221558.003:812): avc: denied { open } for pid=7645 comm="syz.7.366" path="/11/dir0/tracing_on" dev="tracefs" ino=2620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 93.478706][ T7645] uprobe: syz.7.366:7645 failed to unregister, leaking uprobe [ 93.531875][ T44] audit: type=1400 audit(1792221558.063:813): avc: denied { unmount } for pid=7414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 93.858859][ T7248] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 94.022947][ T7248] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 94.024109][ T7248] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 94.024148][ T7248] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.024165][ T7248] usb 10-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 94.024184][ T7248] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 94.025039][ T7248] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 94.025074][ T7248] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.025091][ T7248] usb 10-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 94.025110][ T7248] usb 10-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 94.026953][ T7248] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.026971][ T7248] usb 10-1: Product: syz [ 94.026983][ T7248] usb 10-1: Manufacturer: syz [ 94.026995][ T7248] usb 10-1: SerialNumber: syz [ 94.032621][ T7248] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 94.038728][ T7248] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 94.041799][ T7248] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 94.233834][ T7650] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 94.241672][ T35] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 94.251288][ T44] audit: type=1400 audit(1792221558.783:814): avc: denied { ioctl } for pid=7657 comm="syz.7.372" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.265733][ T7248] usb 10-1: USB disconnect, device number 4 [ 94.277285][ T7248] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 94.277447][ T7658] xt_hashlimit: max too large, truncated to 1048576 [ 94.277486][ T7658] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 94.278260][ T44] audit: type=1400 audit(1792221558.803:815): avc: denied { read write } for pid=7657 comm="syz.7.372" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 94.279920][ T7248] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 94.280573][ T7248] ti_usb_3410_5052 10-1:2.0: device disconnected [ 94.378872][ T5096] Bluetooth: hci4: command tx timeout [ 94.398836][ T35] usb 11-1: Using ep0 maxpacket: 8 [ 94.399337][ T35] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.400153][ T35] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 94.400176][ T35] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.400187][ T35] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.400199][ T35] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.400210][ T35] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.400229][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.603568][ T35] usb 11-1: usb_control_msg returned -32 [ 94.603594][ T35] usbtmc 11-1:16.0: can't read capabilities [ 94.807267][ T7662] syzkaller0: entered promiscuous mode [ 94.807282][ T7662] syzkaller0: entered allmulticast mode [ 94.814814][ T7662] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 95.147176][ T7253] libceph: connect (1)[c::]:6789 error -101 [ 95.147608][ T7253] libceph: mon0 (1)[c::]:6789 connect error [ 95.162377][ T7253] libceph: connect (1)[c::]:6789 error -101 [ 95.162546][ T7253] libceph: mon0 (1)[c::]:6789 connect error [ 95.183295][ T7677] ceph: No mds server is up or the cluster is laggy [ 95.258833][ T5096] Bluetooth: hci0: command tx timeout [ 95.365918][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.369'. [ 95.373476][ T7683] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 95.511259][ T35] usb 11-1: USB disconnect, device number 2 [ 95.825505][ T7686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7686 comm=syz.7.379 [ 96.921837][ T7713] xt_IDLETIMER: timeout value is zero [ 97.339092][ T5096] Bluetooth: hci0: command tx timeout [ 97.620188][ T35] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 97.750009][ T35] usb 10-1: device descriptor read/64, error -71 [ 97.800002][ T7730] tipc: Started in network mode [ 97.800019][ T7730] tipc: Node identity ee8c6bdf5c57, cluster identity 4711 [ 97.800130][ T7730] tipc: Enabled bearer , priority 0 [ 97.800499][ T7730] syzkaller0: entered promiscuous mode [ 97.800509][ T7730] syzkaller0: entered allmulticast mode [ 97.802000][ T7730] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 97.811661][ T7730] tipc: Resetting bearer [ 97.816564][ T7730] tipc: Resetting bearer [ 97.832811][ T7730] tipc: Disabling bearer [ 97.988847][ T35] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 98.118940][ T35] usb 10-1: device descriptor read/64, error -71 [ 98.225352][ T44] kauditd_printk_skb: 13 callbacks suppressed [ 98.225365][ T44] audit: type=1400 audit(1792221562.753:829): avc: denied { read } for pid=7733 comm="syz.6.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.231264][ T35] usb usb10-port1: attempt power cycle [ 98.286058][ T44] audit: type=1400 audit(1792221562.813:830): avc: denied { getopt } for pid=7733 comm="syz.6.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.287680][ T44] audit: type=1400 audit(1792221562.813:831): avc: denied { setattr } for pid=7733 comm="syz.6.398" name="RAW" dev="sockfs" ino=23580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.578986][ T35] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 98.599474][ T35] usb 10-1: device descriptor read/8, error -71 [ 98.848918][ T35] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 98.869715][ T35] usb 10-1: device descriptor read/8, error -71 [ 98.981774][ T35] usb usb10-port1: unable to enumerate USB device [ 99.110480][ T7741] comedi comedi1: multiq3: I/O port conflict (0xc0,16) [ 99.153521][ T7744] 9pnet_virtio: no channels available for device syz [ 99.203958][ T44] audit: type=1400 audit(1792221563.733:832): avc: denied { listen } for pid=7745 comm="syz.6.401" laddr=172.20.0.1 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.499543][ T66] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.513431][ T66] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.514600][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.528017][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.532482][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.762483][ T7753] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.129268][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.129312][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.129373][ T7753] bridge_slave_0: entered allmulticast mode [ 100.130196][ T7753] bridge_slave_0: entered promiscuous mode [ 100.132736][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.132805][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.132862][ T7753] bridge_slave_1: entered allmulticast mode [ 100.133617][ T7753] bridge_slave_1: entered promiscuous mode [ 100.149469][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.151896][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.192598][ T7753] team0: Port device team_slave_0 added [ 100.193985][ T7753] team0: Port device team_slave_1 added [ 100.232537][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.232547][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.232561][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.233949][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.233958][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.233971][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.275258][ T7466] bridge_slave_1: left allmulticast mode [ 100.275303][ T7466] bridge_slave_1: left promiscuous mode [ 100.275488][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.280586][ T7466] bridge_slave_0: left allmulticast mode [ 100.280606][ T7466] bridge_slave_0: left promiscuous mode [ 100.280767][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.361150][ T7466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.362819][ T7466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.363429][ T7466] bond0 (unregistering): Released all slaves [ 100.366230][ T7466] bond1 (unregistering): Released all slaves [ 100.416856][ T7466] tipc: Left network mode [ 100.434531][ T7753] hsr_slave_0: entered promiscuous mode [ 100.435064][ T7753] hsr_slave_1: entered promiscuous mode [ 100.435460][ T7753] debugfs: 'hsr0' already exists in 'hsr' [ 100.435477][ T7753] Cannot create hsr debugfs directory [ 100.435874][ T44] audit: type=1400 audit(1792221564.963:833): avc: denied { read } for pid=7771 comm="syz.6.404" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.436053][ T44] audit: type=1400 audit(1792221564.963:834): avc: denied { open } for pid=7771 comm="syz.6.404" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.436380][ T44] audit: type=1400 audit(1792221564.963:835): avc: denied { ioctl } for pid=7771 comm="syz.6.404" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 100.542473][ T44] audit: type=1400 audit(1792221565.073:836): avc: denied { write } for pid=7780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.607682][ T44] audit: type=1400 audit(1792221565.133:837): avc: denied { write } for pid=7786 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.654551][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.406'. [ 100.670984][ T7466] hsr_slave_0: left promiscuous mode [ 100.672193][ T7466] hsr_slave_1: left promiscuous mode [ 100.672572][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.673003][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.782823][ T7466] team0 (unregistering): Port device team_slave_1 removed [ 100.807083][ T7466] team0 (unregistering): Port device team_slave_0 removed [ 100.886732][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.406'. [ 100.887889][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 100.947224][ T7753] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 100.955128][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.955861][ T7753] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 100.957342][ T44] audit: type=1400 audit(1792221565.483:838): avc: denied { write } for pid=7789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.957476][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.957952][ T7753] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 100.963145][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.964726][ T7753] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 100.977957][ T7753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.998421][ T7798] CUSE: info not properly terminated [ 101.058463][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.071646][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.077033][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.077081][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.089307][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.089357][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.357287][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 101.434573][ T7753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.568929][ T5096] Bluetooth: hci2: command tx timeout [ 101.594729][ T7823] gfs2: not a GFS2 filesystem [ 101.655104][ T7753] veth0_vlan: entered promiscuous mode [ 101.659984][ T7753] veth1_vlan: entered promiscuous mode [ 101.675397][ T7753] veth0_macvtap: entered promiscuous mode [ 101.677479][ T7753] veth1_macvtap: entered promiscuous mode [ 101.684542][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.696028][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.749041][ T5808] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.749081][ T5808] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.749106][ T5808] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.749133][ T5808] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.780097][ T6649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.780110][ T6649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.786442][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 101.797036][ T6649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.797048][ T6649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.809118][ T35] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 101.908872][ T77] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 101.939544][ T35] usb 10-1: device descriptor read/64, error -71 [ 101.954533][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 102.015310][ T7876] tipc: Started in network mode [ 102.015327][ T7876] tipc: Node identity 7f000001, cluster identity 4711 [ 102.016422][ T7876] tipc: New replicast peer: 127.0.0.1 [ 102.016698][ T7876] tipc: Enabled bearer , priority 10 [ 102.016802][ T7876] tipc: Disabling bearer [ 102.061975][ T77] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.062921][ T77] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.062943][ T77] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.062956][ T77] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.062985][ T77] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.067124][ T77] usb 11-1: config 0 descriptor?? [ 102.115444][ T7888] netlink: 'syz.8.416': attribute type 39 has an invalid length. [ 102.189328][ T35] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 102.318851][ T35] usb 10-1: device descriptor read/64, error -71 [ 102.428983][ T35] usb usb10-port1: attempt power cycle [ 102.493225][ T77] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 102.768920][ T35] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 102.790255][ T35] usb 10-1: device descriptor read/8, error -71 [ 102.930228][ T5848] usb 11-1: USB disconnect, device number 3 [ 103.050146][ T35] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 103.079306][ T35] usb 10-1: device descriptor read/8, error -71 [ 103.189049][ T35] usb usb10-port1: unable to enumerate USB device [ 103.411298][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 103.471060][ T7914] xt_IDLETIMER: label is empty or not nul-terminated [ 103.557630][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 103.557647][ T44] audit: type=1400 audit(1792221568.083:861): avc: denied { read } for pid=7917 comm="syz.8.419" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.557988][ T44] audit: type=1400 audit(1792221568.083:862): avc: denied { open } for pid=7917 comm="syz.8.419" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.558474][ T44] audit: type=1400 audit(1792221568.083:863): avc: denied { ioctl } for pid=7917 comm="syz.8.419" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 103.561039][ T7920] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 103.648970][ T66] Bluetooth: hci2: command tx timeout [ 103.685995][ T7928] IPVS: length: 32 != 8 [ 103.692305][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.8.421'. [ 103.699256][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.8.421'. [ 103.824633][ T7935] fuse: Bad value for 'fd' [ 103.856521][ T7937] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 104.439489][ T44] audit: type=1400 audit(1792221568.973:864): avc: denied { read write } for pid=7943 comm="syz.6.426" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.439642][ T44] audit: type=1400 audit(1792221568.973:865): avc: denied { open } for pid=7943 comm="syz.6.426" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.442161][ T44] audit: type=1400 audit(1792221568.973:866): avc: denied { map } for pid=7943 comm="syz.6.426" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 104.517280][ T6652] IPVS: starting estimator thread 0... [ 104.598486][ T44] audit: type=1400 audit(1792221569.123:867): avc: denied { watch watch_reads } for pid=7947 comm="syz.5.427" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 104.609930][ T7946] IPVS: using max 43 ests per chain, 103200 per kthread [ 104.654409][ T44] audit: type=1400 audit(1792221569.183:868): avc: denied { write } for pid=7949 comm="syz.6.428" name="dev" dev="proc" ino=4026532798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 104.660404][ T44] audit: type=1400 audit(1792221569.193:869): avc: denied { create } for pid=7954 comm="syz.5.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.664268][ T44] audit: type=1400 audit(1792221569.193:870): avc: denied { shutdown } for pid=7954 comm="syz.5.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.664860][ T7955] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 104.699455][ T7957] mtrr: base(0x636f72702f2e000) is not aligned on a size(0x0000) boundary [ 104.759858][ T7951] xt_l2tp: v2 doesn't support IP mode [ 104.986184][ T7975] CUSE: info not properly terminated [ 105.026344][ T6648] nvmet: connect request for invalid subsystem testsubsys! [ 105.030253][ T7975] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 105.118873][ T7253] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 105.197250][ T7979] netlink: 'syz.6.437': attribute type 11 has an invalid length. [ 105.262602][ T7253] usb 10-1: device descriptor read/64, error -71 [ 105.375127][ T7986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=7986 comm=syz.6.439 [ 105.498881][ T7253] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 105.628922][ T7253] usb 10-1: device descriptor read/64, error -71 [ 105.729515][ T66] Bluetooth: hci2: command tx timeout [ 105.741137][ T7253] usb usb10-port1: attempt power cycle [ 106.089578][ T7253] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 106.109906][ T7253] usb 10-1: device descriptor read/8, error -71 [ 106.358970][ T7253] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 106.378884][ T35] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 106.379555][ T7253] usb 10-1: device descriptor read/8, error -71 [ 106.489081][ T7253] usb usb10-port1: unable to enumerate USB device [ 106.531217][ T35] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.532184][ T35] usb 11-1: config 1 interface 0 altsetting 46 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 106.532202][ T35] usb 11-1: config 1 interface 0 altsetting 46 bulk endpoint 0x82 has invalid maxpacket 1024 [ 106.532214][ T35] usb 11-1: config 1 interface 0 has no altsetting 0 [ 106.533768][ T35] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.533781][ T35] usb 11-1: Product: ÑŽ [ 106.533788][ T35] usb 11-1: Manufacturer: Ó¿ [ 106.533795][ T35] usb 11-1: SerialNumber: ဇ [ 106.535596][ T7995] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 106.891050][ T8001] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 106.946230][ T35] cdc_ether 11-1:1.0: probe with driver cdc_ether failed with error -71 [ 106.948945][ T35] usb 11-1: USB disconnect, device number 4 [ 107.267532][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888056f87800: rx timeout, send abort [ 107.339657][ T66] Bluetooth: hci4: command 0x2016 tx timeout [ 107.484280][ T8009] FAULT_INJECTION: forcing a failure. [ 107.484280][ T8009] name failslab, interval 1, probability 0, space 0, times 0 [ 107.484302][ T8009] CPU: 2 UID: 0 PID: 8009 Comm: syz.6.447 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.484317][ T8009] Tainted: [L]=SOFTLOCKUP [ 107.484321][ T8009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 107.484327][ T8009] Call Trace: [ 107.484333][ T8009] [ 107.484340][ T8009] dump_stack_lvl+0x100/0x190 [ 107.484375][ T8009] should_fail_ex.cold+0x5/0xa [ 107.484392][ T8009] should_failslab+0xc2/0x120 [ 107.484421][ T8009] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 107.484438][ T8009] ? shmem_alloc_inode+0x25/0x50 [ 107.484454][ T8009] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 107.484469][ T8009] shmem_alloc_inode+0x25/0x50 [ 107.484482][ T8009] alloc_inode+0x68/0x250 [ 107.484496][ T8009] new_inode+0x22/0x1c0 [ 107.484510][ T8009] shmem_get_inode+0x1e3/0xf70 [ 107.484525][ T8009] ? __lock_acquire+0x5c0/0x1f40 [ 107.484539][ T8009] ? __pfx_shmem_get_inode+0x10/0x10 [ 107.484558][ T8009] __shmem_file_setup+0x168/0x460 [ 107.484578][ T8009] ? lock_acquire+0x1d1/0x380 [ 107.484596][ T8009] ? __pfx___shmem_file_setup+0x10/0x10 [ 107.484616][ T8009] ? do_raw_spin_lock+0x128/0x260 [ 107.484630][ T8009] ? find_held_lock+0x2b/0x80 [ 107.484646][ T8009] ? alloc_fd+0x471/0x7a0 [ 107.484661][ T8009] ? alloc_fd+0x471/0x7a0 [ 107.484678][ T8009] memfd_alloc_file+0x247/0x610 [ 107.484693][ T8009] ? _raw_spin_unlock+0x28/0x50 [ 107.484720][ T8009] ? __pfx_memfd_alloc_file+0x10/0x10 [ 107.484738][ T8009] __do_sys_memfd_create+0x236/0x3d0 [ 107.484751][ T8009] do_syscall_64+0x123/0x790 [ 107.484768][ T8009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.484779][ T8009] RIP: 0033:0x7f1da6f9e559 [ 107.484789][ T8009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.484801][ T8009] RSP: 002b:00007f1da7e1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 107.484818][ T8009] RAX: ffffffffffffffda RBX: 00007f1da7226090 RCX: 00007f1da6f9e559 [ 107.484829][ T8009] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000380 [ 107.484839][ T8009] RBP: 00007f1da7035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 107.484868][ T8009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.484875][ T8009] R13: 00007f1da7226128 R14: 00007f1da7226090 R15: 00007ffee9656728 [ 107.484890][ T8009] [ 107.767641][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888056f87800: abort rx timeout. Force session deactivation [ 107.769412][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888056f86800: rx timeout, send abort [ 107.808841][ T66] Bluetooth: hci2: command tx timeout [ 108.258849][ T7253] usb 10-1: new low-speed USB device number 17 using dummy_hcd [ 108.269462][ C3] vxcan0: j1939_tp_rxtimer: 0xffff888056f86800: abort rx timeout. Force session deactivation [ 108.411338][ T7253] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 108.412446][ T7253] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 108.412480][ T7253] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.412502][ T7253] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.412522][ T7253] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.412541][ T7253] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.413568][ T7253] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 108.413600][ T7253] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.413621][ T7253] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.413639][ T7253] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.413660][ T7253] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.414677][ T7253] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 108.414707][ T7253] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 108.414728][ T7253] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.414746][ T7253] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 108.414766][ T7253] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 108.417664][ T7253] usb 10-1: string descriptor 0 read error: -22 [ 108.417759][ T7253] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.446847][ T7253] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 108.635768][ T44] kauditd_printk_skb: 14 callbacks suppressed [ 108.635785][ T44] audit: type=1400 audit(1792221573.163:885): avc: denied { create } for pid=8023 comm="syz.5.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 108.675400][ T66] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:11 sid 0x01 [ 108.675981][ T44] audit: type=1400 audit(1792221573.203:886): avc: denied { ioctl } for pid=8023 comm="syz.5.450" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.677676][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.5.450'. [ 108.677804][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.5.450'. [ 108.703916][ T44] audit: type=1400 audit(1792221573.233:887): avc: denied { watch } for pid=8026 comm="syz.8.452" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 108.704126][ T44] audit: type=1400 audit(1792221573.233:888): avc: denied { watch_sb watch_reads } for pid=8026 comm="syz.8.452" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 108.725485][ T44] audit: type=1400 audit(1792221573.253:889): avc: denied { map } for pid=8026 comm="syz.8.452" path="/14/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 108.967096][ T44] audit: type=1400 audit(1792221573.493:890): avc: denied { mounton } for pid=8030 comm="syz.8.453" path="/15/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 109.072754][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.455'. [ 109.408995][ T66] Bluetooth: hci4: command 0x2016 tx timeout [ 109.468896][ T35] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 109.598921][ T35] usb 13-1: device descriptor read/64, error -71 [ 109.838901][ T35] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 109.968908][ T35] usb 13-1: device descriptor read/64, error -71 [ 110.081423][ T35] usb usb13-port1: attempt power cycle [ 110.418839][ T35] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 110.441242][ T35] usb 13-1: device descriptor read/8, error -71 [ 110.678866][ T35] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 110.702140][ T35] usb 13-1: device descriptor read/8, error -71 [ 110.703841][ T7901] usb 10-1: USB disconnect, device number 17 [ 110.809173][ T35] usb usb13-port1: unable to enumerate USB device [ 111.869330][ T8055] overlayfs: statfs failed on './file0' [ 111.932228][ T8060] netlink: 64 bytes leftover after parsing attributes in process `syz.5.459'. [ 111.932252][ T8060] netlink: 64 bytes leftover after parsing attributes in process `syz.5.459'. [ 111.932263][ T8060] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 112.294249][ T8068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8068 comm=syz.8.463 [ 112.429272][ T44] audit: type=1400 audit(1792221576.963:891): avc: denied { create } for pid=8076 comm="syz.8.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 112.431559][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.431728][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.431878][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.432066][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.432222][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.432375][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.432531][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.432681][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.432834][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.432987][ T8077] netlink: 'syz.8.467': attribute type 1 has an invalid length. [ 112.473000][ T66] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.475989][ T66] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.478512][ T66] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.482320][ T66] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.482769][ T66] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.566063][ T44] audit: type=1400 audit(1792221577.093:892): avc: denied { bind } for pid=8088 comm="syz.5.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.568539][ T44] audit: type=1400 audit(1792221577.093:893): avc: denied { listen } for pid=8088 comm="syz.5.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.575683][ T44] audit: type=1400 audit(1792221577.103:894): avc: denied { write } for pid=8088 comm="syz.5.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.695214][ T8095] bond1: option arp_missed_max: invalid value (0) [ 112.695260][ T8095] bond1: option arp_missed_max: allowed values 1 - 255 [ 112.696447][ T8095] bond1 (unregistering): Released all slaves [ 112.731850][ T8101] FAULT_INJECTION: forcing a failure. [ 112.731850][ T8101] name failslab, interval 1, probability 0, space 0, times 0 [ 112.731872][ T8101] CPU: 1 UID: 0 PID: 8101 Comm: syz.5.471 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.731887][ T8101] Tainted: [L]=SOFTLOCKUP [ 112.731891][ T8101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.731898][ T8101] Call Trace: [ 112.731902][ T8101] [ 112.731907][ T8101] dump_stack_lvl+0x100/0x190 [ 112.731928][ T8101] should_fail_ex.cold+0x5/0xa [ 112.731946][ T8101] should_failslab+0xc2/0x120 [ 112.731964][ T8101] __kmalloc_noprof+0xfc/0x840 [ 112.731980][ T8101] ? __reuseport_alloc+0x1d/0x90 [ 112.732005][ T8101] __reuseport_alloc+0x1d/0x90 [ 112.732018][ T8101] reuseport_alloc+0x1ed/0x420 [ 112.732033][ T8101] udp_lib_get_port+0xbd5/0x1b50 [ 112.732054][ T8101] ? __pfx_udp_lib_get_port+0x10/0x10 [ 112.732069][ T8101] ? do_raw_spin_lock+0x128/0x260 [ 112.732089][ T8101] ? __local_bh_enable_ip+0xa5/0x120 [ 112.732104][ T8101] inet_autobind+0xba/0x1a0 [ 112.732119][ T8101] inet_send_prepare+0x244/0x470 [ 112.732137][ T8101] inet_sendmsg+0x43/0x140 [ 112.732154][ T8101] sock_write_iter+0x4ea/0x5b0 [ 112.732168][ T8101] ? __pfx_inet_sendmsg+0x10/0x10 [ 112.732184][ T8101] ? __pfx_sock_write_iter+0x10/0x10 [ 112.732203][ T8101] ? bpf_lsm_file_permission+0x9/0x10 [ 112.732219][ T8101] ? security_file_permission+0x76/0x210 [ 112.732238][ T8101] ? rw_verify_area+0xce/0x6d0 [ 112.732252][ T8101] vfs_write+0x6af/0x1050 [ 112.732266][ T8101] ? __pfx_sock_write_iter+0x10/0x10 [ 112.732281][ T8101] ? __pfx_vfs_write+0x10/0x10 [ 112.732294][ T8101] ? find_held_lock+0x2b/0x80 [ 112.732326][ T8101] ksys_write+0x1f8/0x250 [ 112.732341][ T8101] ? __pfx_ksys_write+0x10/0x10 [ 112.732361][ T8101] do_syscall_64+0x123/0x790 [ 112.732380][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.732392][ T8101] RIP: 0033:0x7fdf2819e559 [ 112.732403][ T8101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.732416][ T8101] RSP: 002b:00007fdf263d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 112.732427][ T8101] RAX: ffffffffffffffda RBX: 00007fdf28426090 RCX: 00007fdf2819e559 [ 112.732434][ T8101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 112.732441][ T8101] RBP: 00007fdf28235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 112.732448][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.732454][ T8101] R13: 00007fdf28426128 R14: 00007fdf28426090 R15: 00007ffd931861f8 [ 112.732469][ T8101] [ 112.775467][ T8080] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.899763][ T5837] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 112.947587][ T5808] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.038834][ T5837] usb 13-1: device descriptor read/64, error -71 [ 113.095371][ T5808] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.136704][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.474'. [ 113.174653][ T8120] bond1: (slave bond_slave_0): Device is not bonding slave [ 113.174672][ T8120] bond1: option active_slave: invalid value (bond_slave_0) [ 113.175509][ T8120] bond1 (unregistering): Released all slaves [ 113.189572][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.189662][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.189748][ T8080] bridge_slave_0: entered allmulticast mode [ 113.190511][ T8080] bridge_slave_0: entered promiscuous mode [ 113.191702][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.191741][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.191811][ T8080] bridge_slave_1: entered allmulticast mode [ 113.195714][ T8080] bridge_slave_1: entered promiscuous mode [ 113.233189][ T5808] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.252397][ T8080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.253910][ T8080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.267408][ T8080] team0: Port device team_slave_0 added [ 113.268678][ T8080] team0: Port device team_slave_1 added [ 113.282793][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.282805][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.282817][ T8080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.295388][ T5837] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 113.310878][ T5808] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.316096][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.316106][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.316120][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.358463][ T8080] hsr_slave_0: entered promiscuous mode [ 113.361100][ T8080] hsr_slave_1: entered promiscuous mode [ 113.361415][ T8080] debugfs: 'hsr0' already exists in 'hsr' [ 113.361430][ T8080] Cannot create hsr debugfs directory [ 113.438820][ T5837] usb 13-1: device descriptor read/64, error -71 [ 113.504371][ T5808] bridge_slave_1: left allmulticast mode [ 113.504388][ T5808] bridge_slave_1: left promiscuous mode [ 113.504490][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.508101][ T5808] bridge_slave_0: left allmulticast mode [ 113.508121][ T5808] bridge_slave_0: left promiscuous mode [ 113.508296][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.549029][ T5837] usb usb13-port1: attempt power cycle [ 113.642049][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.644495][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.645815][ T5808] bond0 (unregistering): Released all slaves [ 113.788330][ T8080] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 113.793199][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.793738][ T8080] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 113.795306][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.795839][ T8080] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 113.797407][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.799500][ T8080] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 113.806783][ T8080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.843453][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 113.843471][ T44] audit: type=1400 audit(1792221578.373:899): avc: denied { write } for pid=8137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.885522][ T8080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.907203][ T8080] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.909844][ T5837] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 113.924227][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.924272][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.929542][ T44] audit: type=1400 audit(1792221578.453:900): avc: denied { write } for pid=8146 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.939296][ T5837] usb 13-1: device descriptor read/8, error -71 [ 113.963278][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.963366][ T6652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.993597][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 114.070679][ T44] audit: type=1400 audit(1792221578.603:901): avc: denied { write } for pid=8148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.124622][ T5808] hsr_slave_0: left promiscuous mode [ 114.125261][ T5808] hsr_slave_1: left promiscuous mode [ 114.125902][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.125956][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.126679][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.126693][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.138341][ T44] audit: type=1400 audit(1792221578.663:902): avc: denied { write } for pid=8153 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.139663][ T5808] veth1_macvtap: left promiscuous mode [ 114.139708][ T5808] veth0_macvtap: left promiscuous mode [ 114.139789][ T5808] veth1_vlan: left promiscuous mode [ 114.139843][ T5808] veth0_vlan: left promiscuous mode [ 114.188825][ T5837] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 114.221051][ T5837] usb 13-1: device descriptor read/8, error -71 [ 114.339733][ T5837] usb usb13-port1: unable to enumerate USB device [ 114.342068][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 114.350566][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 114.441109][ T8157] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02 [ 114.483817][ T44] audit: type=1400 audit(1792221579.013:903): avc: denied { write } for pid=8159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.540163][ T66] Bluetooth: hci3: command tx timeout [ 114.588009][ T44] audit: type=1400 audit(1792221579.113:904): avc: denied { write } for pid=8169 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.632929][ T8080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.678415][ T44] audit: type=1400 audit(1792221579.203:905): avc: denied { write } for pid=8178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.728306][ T44] audit: type=1400 audit(1792221579.253:906): avc: denied { write } for pid=8184 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.814047][ T8080] veth0_vlan: entered promiscuous mode [ 114.823415][ T8080] veth1_vlan: entered promiscuous mode [ 114.836419][ T8080] veth0_macvtap: entered promiscuous mode [ 114.839504][ T8080] veth1_macvtap: entered promiscuous mode [ 114.845541][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.848712][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.866618][ T44] audit: type=1400 audit(1792221579.393:907): avc: denied { write } for pid=8190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.915442][ T6648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.915455][ T6648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.955645][ T6645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.955665][ T6645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.974281][ T44] audit: type=1400 audit(1792221579.503:908): avc: denied { write } for pid=8195 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.981304][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.981401][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.981422][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.981439][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.075825][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.481'. [ 115.084566][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.481'. [ 115.101579][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.101617][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.101644][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.101671][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.132390][ T8215] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 115.174707][ T8219] overlay: ./file0 is not a directory [ 115.216581][ T8224] Unknown options in mask 6 [ 115.223822][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 115.298006][ T8243] bond0: option arp_interval: invalid value (Ir) [ 115.298021][ T8243] bond0: option arp_interval: allowed values 0 - 2147483647 [ 115.363587][ T8249] SELinux: policydb string does not match my string SE Linux [ 115.363732][ T8249] SELinux: failed to load policy [ 115.405854][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 115.462988][ T8252] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.465193][ T8252] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.477181][ T8252] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.486821][ T8252] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.487818][ T8252] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.494048][ T8252] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 115.504070][ T8252] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.504184][ T8252] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.508370][ T8252] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.512619][ T8252] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.512677][ T8252] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.523762][ T8252] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.535409][ T66] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 115.535824][ T66] Bluetooth: hci1: unexpected event for opcode 0x203e [ 115.558970][ T25] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 115.595003][ T5448] 8021q: adding VLAN 0 to HW filter on device eth21 [ 115.697029][ T8265] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 115.697051][ T8265] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.730476][ T25] usb 14-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 115.733213][ T25] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.733238][ T25] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.748623][ T25] as10x_usb: device has been detected [ 115.749025][ T25] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 115.756526][ T25] usb 14-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 115.790298][ T25] as10x_usb: error during firmware upload part1 [ 115.790547][ T25] Registered device Abilis Systems DVB-Titan [ 116.218012][ T8288] kernel read not supported for file /file1 (pid: 8288 comm: syz.5.498) [ 116.650740][ T25] usb 14-1: USB disconnect, device number 2 [ 116.652141][ T8273] snd_dummy snd_dummy.0: control 2:0:0:syz0:0 is already present [ 116.672493][ T25] Unregistered device Abilis Systems DVB-Titan [ 116.674435][ T25] as10x_usb: device has been disconnected [ 117.401021][ T3385] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 117.444646][ T8308] validate_nla: 24 callbacks suppressed [ 117.444659][ T8308] netlink: 'syz.9.504': attribute type 19 has an invalid length. [ 117.488899][ T66] Bluetooth: hci4: command 0x2016 tx timeout [ 117.538930][ T3385] usb 10-1: device descriptor read/64, error -71 [ 117.568991][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.581103][ T66] Bluetooth: hci3: command 0x040f tx timeout [ 117.635283][ T8313] netlink: 48 bytes leftover after parsing attributes in process `syz.9.506'. [ 117.798900][ T3385] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 117.928879][ T3385] usb 10-1: device descriptor read/64, error -71 [ 118.039216][ T3385] usb usb10-port1: attempt power cycle [ 118.398959][ T3385] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 118.419489][ T3385] usb 10-1: device descriptor read/8, error -71 [ 118.536575][ T8328] netlink: 36 bytes leftover after parsing attributes in process `syz.9.511'. [ 118.616603][ T8334] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 118.616809][ T8334] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 118.616827][ T8334] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 118.616838][ T8334] UDF-fs: Scanning with blocksize 512 failed [ 118.618636][ T8334] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 118.618699][ T8334] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 118.618709][ T8334] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 118.618716][ T8334] UDF-fs: Scanning with blocksize 1024 failed [ 118.619748][ T8334] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 118.619814][ T8334] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 118.619824][ T8334] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 118.619831][ T8334] UDF-fs: Scanning with blocksize 2048 failed [ 118.620042][ T8334] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 118.620084][ T8334] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 118.620094][ T8334] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 118.620101][ T8334] UDF-fs: Scanning with blocksize 4096 failed [ 118.620105][ T8334] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 118.658923][ T3385] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 118.679529][ T3385] usb 10-1: device descriptor read/8, error -71 [ 118.711316][ T8337] netlink: 'syz.8.515': attribute type 21 has an invalid length. [ 118.711332][ T8337] netlink: 128 bytes leftover after parsing attributes in process `syz.8.515'. [ 118.711429][ T8337] netlink: 3 bytes leftover after parsing attributes in process `syz.8.515'. [ 118.799330][ T3385] usb usb10-port1: unable to enumerate USB device [ 118.811610][ T5837] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 118.969387][ T5837] usb 14-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 118.970244][ T5837] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.970258][ T5837] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 118.970277][ T5837] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.974966][ T5837] usb-storage 14-1:1.0: USB Mass Storage device detected [ 119.004434][ T5837] usb-storage 14-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 119.004949][ T5837] scsi host6: usb-storage 14-1:1.0 [ 119.357226][ T3385] usb 14-1: USB disconnect, device number 3 [ 119.579512][ T66] Bluetooth: hci4: command 0x2016 tx timeout [ 119.579640][ T5096] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 119.579676][ T5096] Bluetooth: hci1: Injecting HCI hardware error event [ 119.581058][ T5096] Bluetooth: hci1: hardware error 0x00 [ 119.590368][ T8346] xt_hashlimit: size too large, truncated to 1048576 [ 119.649246][ T66] Bluetooth: hci3: command 0x040f tx timeout [ 119.649281][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.752019][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 119.752031][ T44] audit: type=1400 audit(1792221584.283:931): avc: denied { getopt } for pid=8352 comm="syz.8.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.043416][ T8358] syzkaller0: entered promiscuous mode [ 120.043431][ T8358] syzkaller0: entered allmulticast mode [ 120.174396][ T8367] 9pnet_virtio: no channels available for device syz [ 120.175364][ T44] audit: type=1400 audit(1792221584.703:932): avc: denied { write } for pid=8366 comm="syz.5.522" path="socket:[27691]" dev="sockfs" ino=27691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 120.386648][ T8377] comedi comedi0: comedi_config --init_data is deprecated [ 121.018823][ T77] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 121.179276][ T77] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 121.180025][ T77] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.180038][ T77] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.181139][ T77] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 121.181152][ T77] usb 10-1: Product: syz [ 121.181160][ T77] usb 10-1: Manufacturer: syz [ 121.276441][ T8401] ADFS-fs (nbd9): error: unable to read block 3, try 0 [ 121.281740][ T44] audit: type=1400 audit(1792221585.813:933): avc: denied { read write } for pid=8400 comm="syz.9.532" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.282059][ T44] audit: type=1400 audit(1792221585.813:934): avc: denied { open } for pid=8400 comm="syz.9.532" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.331411][ T6210] hid-generic 0003:0001:0001.0003: hidraw1: USB HID v0.01 Mouse [syz1] on syz0 [ 121.446861][ T8403] ADFS-fs (nbd9): error: unable to read block 3, try 0 [ 121.648971][ T66] Bluetooth: hci4: command 0x2016 tx timeout [ 121.658990][ T5096] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 121.728978][ T5096] Bluetooth: hci3: command 0x040f tx timeout [ 121.729744][ T5096] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.788663][ T8422] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.801045][ T8428] xt_TPROXY: Can be used only with -p tcp or -p udp [ 121.808515][ T44] audit: type=1400 audit(1792221586.333:935): avc: denied { append } for pid=8419 comm="syz.8.536" name="ptp1" dev="devtmpfs" ino=1287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.895656][ T8430] tipc: New replicast peer: 127.0.0.1 [ 121.895916][ T8430] tipc: Enabled bearer , priority 20 [ 121.896068][ T8430] tipc: Disabling bearer [ 121.898539][ T8430] jffs2: notice: (8430) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 121.906449][ T8433] tipc: New replicast peer: 127.0.0.1 [ 121.906811][ T8433] tipc: Enabled bearer , priority 20 [ 121.907050][ T8432] tipc: Disabling bearer [ 121.909425][ T44] audit: type=1400 audit(1792221586.433:936): avc: denied { mounton } for pid=8429 comm="syz.8.538" path="/46/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.961772][ T44] audit: type=1400 audit(1792221586.493:937): avc: denied { write } for pid=8437 comm="syz.8.539" path="socket:[26478]" dev="sockfs" ino=26478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.971555][ T8440] netlink: 17 bytes leftover after parsing attributes in process `syz.9.540'. [ 122.033515][ T44] audit: type=1400 audit(1792221586.563:938): avc: denied { unmount } for pid=8443 comm="syz.8.542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.074214][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.543'. [ 122.229552][ T77] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 122.379693][ T77] usb 14-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.379731][ T77] usb 14-1: too many configurations: 13, using maximum allowed: 8 [ 122.383127][ T77] usb 14-1: config 0 has no interfaces? [ 122.383677][ T77] usb 14-1: config 0 has no interfaces? [ 122.384115][ T77] usb 14-1: config 0 has no interfaces? [ 122.385495][ T77] usb 14-1: config 0 has no interfaces? [ 122.385969][ T77] usb 14-1: config 0 has no interfaces? [ 122.386669][ T77] usb 14-1: config 0 has no interfaces? [ 122.387330][ T77] usb 14-1: config 0 has no interfaces? [ 122.388043][ T77] usb 14-1: config 0 has no interfaces? [ 122.390980][ T77] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.390997][ T77] usb 14-1: Product: syz [ 122.391008][ T77] usb 14-1: Manufacturer: syz [ 122.391020][ T77] usb 14-1: SerialNumber: syz [ 122.395217][ T77] usb 14-1: config 0 descriptor?? [ 122.476926][ T44] audit: type=1400 audit(1792221587.003:939): avc: denied { ioctl } for pid=8472 comm="syz.8.548" path="socket:[27315]" dev="sockfs" ino=27315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.512994][ T8474] tmpfs: Bad value for 'mpol' [ 122.513183][ T8474] tmpfs: Bad value for 'mpol' [ 122.513361][ T8474] tmpfs: Bad value for 'mpol' [ 122.513533][ T8474] tmpfs: Bad value for 'mpol' [ 122.513706][ T8474] tmpfs: Bad value for 'mpol' [ 122.513876][ T8474] tmpfs: Bad value for 'mpol' [ 122.514056][ T8474] tmpfs: Bad value for 'mpol' [ 122.514226][ T8474] tmpfs: Bad value for 'mpol' [ 122.514405][ T8474] tmpfs: Bad value for 'mpol' [ 122.514586][ T8474] tmpfs: Bad value for 'mpol' [ 122.514801][ T8474] tmpfs: Bad value for 'mpol' [ 122.515036][ T8474] tmpfs: Bad value for 'mpol' [ 122.515234][ T8474] tmpfs: Bad value for 'mpol' [ 122.515419][ T8474] tmpfs: Bad value for 'mpol' [ 122.515834][ T8474] tmpfs: Bad value for 'mpol' [ 122.516034][ T8474] tmpfs: Bad value for 'mpol' [ 122.516206][ T8474] tmpfs: Bad value for 'mpol' [ 122.516389][ T8474] tmpfs: Bad value for 'mpol' [ 122.516562][ T8474] tmpfs: Bad value for 'mpol' [ 122.516732][ T8474] tmpfs: Bad value for 'mpol' [ 122.516907][ T8474] tmpfs: Bad value for 'mpol' [ 122.517082][ T8474] tmpfs: Bad value for 'mpol' [ 122.517257][ T8474] tmpfs: Bad value for 'mpol' [ 122.517435][ T8474] tmpfs: Bad value for 'mpol' [ 122.517610][ T8474] tmpfs: Bad value for 'mpol' [ 122.517781][ T8474] tmpfs: Bad value for 'mpol' [ 122.517956][ T8474] tmpfs: Bad value for 'mpol' [ 122.518128][ T8474] tmpfs: Bad value for 'mpol' [ 122.518373][ T8474] tmpfs: Bad value for 'mpol' [ 122.518548][ T8474] tmpfs: Bad value for 'mpol' [ 122.518721][ T8474] tmpfs: Bad value for 'mpol' [ 122.519629][ T8474] tmpfs: Bad value for 'mpol' [ 122.519821][ T8474] tmpfs: Bad value for 'mpol' [ 122.519995][ T8474] tmpfs: Bad value for 'mpol' [ 122.520168][ T8474] tmpfs: Bad value for 'mpol' [ 122.520344][ T8474] tmpfs: Bad value for 'mpol' [ 122.520519][ T8474] tmpfs: Bad value for 'mpol' [ 122.520690][ T8474] tmpfs: Bad value for 'mpol' [ 122.520865][ T8474] tmpfs: Bad value for 'mpol' [ 122.521088][ T8474] tmpfs: Bad value for 'mpol' [ 122.521266][ T8474] tmpfs: Bad value for 'mpol' [ 122.521442][ T8474] tmpfs: Bad value for 'mpol' [ 122.521613][ T8474] tmpfs: Bad value for 'mpol' [ 122.521846][ T8474] tmpfs: Bad value for 'mpol' [ 122.522022][ T8474] tmpfs: Bad value for 'mpol' [ 122.522199][ T8474] tmpfs: Bad value for 'mpol' [ 122.522377][ T8474] tmpfs: Bad value for 'mpol' [ 122.522548][ T8474] tmpfs: Bad value for 'mpol' [ 122.522818][ T8474] tmpfs: Bad value for 'mpol' [ 122.523002][ T8474] tmpfs: Bad value for 'mpol' [ 122.523173][ T8474] tmpfs: Bad value for 'mpol' [ 122.523387][ T8474] tmpfs: Bad value for 'mpol' [ 122.523561][ T8474] tmpfs: Bad value for 'mpol' [ 122.523729][ T8474] tmpfs: Bad value for 'mpol' [ 122.523901][ T8474] tmpfs: Bad value for 'mpol' [ 122.524074][ T8474] tmpfs: Bad value for 'mpol' [ 122.524246][ T8474] tmpfs: Bad value for 'mpol' [ 122.524422][ T8474] tmpfs: Bad value for 'mpol' [ 122.524595][ T8474] tmpfs: Bad value for 'mpol' [ 122.524764][ T8474] tmpfs: Bad value for 'mpol' [ 122.525002][ T8474] tmpfs: Bad value for 'mpol' [ 122.525176][ T8474] tmpfs: Bad value for 'mpol' [ 122.525356][ T8474] tmpfs: Bad value for 'mpol' [ 122.525526][ T8474] tmpfs: Bad value for 'mpol' [ 122.525698][ T8474] tmpfs: Bad value for 'mpol' [ 122.530091][ T8473] vhci_hcd: pdev 268435455 [ 122.598186][ T8440] netlink: 104 bytes leftover after parsing attributes in process `syz.9.540'. [ 122.599004][ T77] usb 14-1: USB disconnect, device number 4 [ 122.669905][ T8482] 9pnet_virtio: no channels available for device syz [ 122.698380][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz.8.551'. [ 122.786724][ T6639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.786747][ T6639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.847563][ T3385] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 122.889495][ T3385] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 123.101514][ T63] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 123.159257][ T63] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 123.239064][ T3385] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 123.389613][ T3385] usb 14-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 123.390790][ T3385] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 123.390815][ T3385] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.390834][ T3385] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 123.390855][ T3385] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 123.392992][ T3385] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.393011][ T3385] usb 14-1: Product: syz [ 123.393024][ T3385] usb 14-1: Manufacturer: syz [ 123.393036][ T3385] usb 14-1: SerialNumber: syz [ 123.395355][ T3385] usb 14-1: config 0 descriptor?? [ 123.603037][ T3385] adutux 14-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 123.609578][ T63] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 123.662570][ T8493] ceph: No mds server is up or the cluster is laggy [ 123.664043][ T8490] ceph: No mds server is up or the cluster is laggy [ 123.670169][ T3385] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 123.790569][ T3385] usb 10-1: USB disconnect, device number 22 [ 123.810500][ T5096] Bluetooth: hci3: command 0x040f tx timeout [ 123.822122][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.824760][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.826841][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.827695][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.828225][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.965719][ T44] audit: type=1400 audit(1792221588.493:940): avc: denied { open } for pid=8519 comm="syz.8.557" path="/dev/ptyr5" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 123.976008][ T8520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8520 comm=syz.8.557 [ 124.054161][ T8506] rxe_eth0 speed is unknown, defaulting to 1000 [ 124.215680][ T3385] usb 14-1: USB disconnect, device number 5 [ 124.332942][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.5.564'. [ 124.332969][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz.5.564'. [ 124.332983][ T8544] netlink: 'syz.5.564': attribute type 2 has an invalid length. [ 124.333428][ T8544] Bluetooth: MGMT ver 1.23 [ 124.358891][ T7253] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 124.473354][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.473398][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.473459][ T8506] bridge_slave_0: entered allmulticast mode [ 124.474215][ T8506] bridge_slave_0: entered promiscuous mode [ 124.483592][ T5808] bridge_slave_1: left allmulticast mode [ 124.483610][ T5808] bridge_slave_1: left promiscuous mode [ 124.483792][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.485616][ T5808] bridge_slave_0: left allmulticast mode [ 124.485635][ T5808] bridge_slave_0: left promiscuous mode [ 124.485789][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.509873][ T7253] usb 13-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 124.510829][ T7253] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.510848][ T7253] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.512399][ T7253] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 124.512418][ T7253] usb 13-1: Product: syz [ 124.512430][ T7253] usb 13-1: Manufacturer: syz [ 124.608207][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.615671][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.616422][ T5808] bond0 (unregistering): Released all slaves [ 124.628510][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.628636][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.629729][ T8506] bridge_slave_1: entered allmulticast mode [ 124.631209][ T8506] bridge_slave_1: entered promiscuous mode [ 124.655533][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.658229][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.682739][ T8506] team0: Port device team_slave_0 added [ 124.683964][ T8506] team0: Port device team_slave_1 added [ 124.695745][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.695755][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.695768][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.696591][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.696598][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.696611][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.712872][ T5808] tipc: Left network mode [ 124.721533][ T8506] hsr_slave_0: entered promiscuous mode [ 124.721960][ T8506] hsr_slave_1: entered promiscuous mode [ 124.722278][ T8506] debugfs: 'hsr0' already exists in 'hsr' [ 124.722289][ T8506] Cannot create hsr debugfs directory [ 124.781159][ T8555] ip_tables: iptables: counters copy to user failed while replacing table [ 124.782886][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 124.782899][ T44] audit: type=1400 audit(1792221589.313:949): avc: denied { create } for pid=8554 comm="syz.9.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.785035][ T8560] netlink: 36 bytes leftover after parsing attributes in process `syz.9.565'. [ 124.785726][ T44] audit: type=1400 audit(1792221589.313:950): avc: denied { write } for pid=8553 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.831282][ T5448] 8021q: adding VLAN 0 to HW filter on device eth22 [ 124.872357][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.9.566'. [ 125.025275][ T44] audit: type=1400 audit(1792221589.553:951): avc: denied { write } for pid=8570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.053502][ T5808] hsr_slave_0: left promiscuous mode [ 125.054059][ T5808] hsr_slave_1: left promiscuous mode [ 125.054754][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.055441][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.064695][ T44] audit: type=1400 audit(1792221589.593:952): avc: denied { write } for pid=8573 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.114643][ T8577] 9pnet_fd: p9_fd_create_tcp (8577): problem connecting socket to 127.0.0.1 [ 125.153106][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 125.162032][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 125.191420][ T8585] netlink: 'syz.5.572': attribute type 16 has an invalid length. [ 125.191434][ T8585] netlink: 'syz.5.572': attribute type 17 has an invalid length. [ 125.253192][ T5448] 8021q: adding VLAN 0 to HW filter on device eth23 [ 125.264171][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.265302][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.371745][ T44] audit: type=1400 audit(1792221589.903:953): avc: denied { write } for pid=8594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.415381][ T44] audit: type=1400 audit(1792221589.943:954): avc: denied { write } for pid=8600 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.466420][ T5448] 8021q: adding VLAN 0 to HW filter on device eth24 [ 125.530877][ T44] audit: type=1400 audit(1792221590.063:955): avc: denied { write } for pid=8607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.590175][ T44] audit: type=1400 audit(1792221590.123:956): avc: denied { write } for pid=8612 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.626790][ T5448] 8021q: adding VLAN 0 to HW filter on device eth25 [ 125.637439][ T5808] IPVS: stop unused estimator thread 0... [ 125.747858][ T44] audit: type=1400 audit(1792221590.273:957): avc: denied { write } for pid=8619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.835859][ T44] audit: type=1400 audit(1792221590.363:958): avc: denied { write } for pid=8626 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.889189][ T5096] Bluetooth: hci3: command 0x040f tx timeout [ 125.898926][ T5096] Bluetooth: hci0: command tx timeout [ 126.522653][ T8661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.524706][ T8506] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.528924][ T8506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.531772][ T8506] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.546625][ T8506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.547024][ T8506] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.547689][ T8660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.559374][ T8506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.560089][ T8506] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.567543][ T8506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.675902][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.696372][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.700656][ T6652] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.700701][ T6652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.712914][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.712960][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.036947][ T8585] netlink: 'syz.5.572': attribute type 6 has an invalid length. [ 127.134591][ T43] usb 13-1: USB disconnect, device number 10 [ 127.154497][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.198202][ T8506] veth0_vlan: entered promiscuous mode [ 127.206763][ T8506] veth1_vlan: entered promiscuous mode [ 127.231344][ T8506] veth0_macvtap: entered promiscuous mode [ 127.233946][ T8506] veth1_macvtap: entered promiscuous mode [ 127.247583][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.254939][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.269942][ T8551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.269970][ T8551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.269988][ T8551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.270006][ T8551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.355376][ T6652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.355391][ T6652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.378420][ T6652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.378434][ T6652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.436450][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 127.806368][ T8752] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 127.806384][ T8752] overlayfs: missing 'lowerdir' [ 127.969757][ T5096] Bluetooth: hci0: command tx timeout [ 127.970530][ T8762] CIFS: Attempting to mount //127.0.0.1/share [ 127.988828][ T7247] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 127.993690][ T8765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.586'. [ 128.151832][ T7247] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 128.152328][ T8733] libceph: connect (1)[c::]:6789 error -101 [ 128.152424][ T8733] libceph: mon0 (1)[c::]:6789 connect error [ 128.152936][ T7247] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.152950][ T7247] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 128.154194][ T7247] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 128.154208][ T7247] usb 10-1: Product: syz [ 128.154216][ T7247] usb 10-1: Manufacturer: syz [ 128.423762][ T8733] libceph: connect (1)[c::]:6789 error -101 [ 128.424894][ T8733] libceph: mon0 (1)[c::]:6789 connect error [ 128.728907][ T8733] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 128.792196][ T8762] CIFS: VFS: cifs_mount failed w/return code = -512 [ 128.887833][ T8823] fuse: Unknown parameter 'fû«0xffffffffffffffff' [ 128.900745][ T8733] usb 13-1: Using ep0 maxpacket: 8 [ 128.903668][ T8733] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.904633][ T8733] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.904668][ T8733] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.906946][ T8733] usb 13-1: config 0 descriptor?? [ 128.940807][ T7254] libceph: connect (1)[c::]:6789 error -101 [ 128.941036][ T7254] libceph: mon0 (1)[c::]:6789 connect error [ 128.974711][ T8775] ceph: No mds server is up or the cluster is laggy [ 129.069267][ T8825] dvmrp6: entered allmulticast mode [ 129.071755][ T8825] dvmrp6: left allmulticast mode [ 129.116270][ T8733] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 129.419469][ T7248] usb 14-1: new full-speed USB device number 6 using dummy_hcd [ 129.558874][ T7248] usb 14-1: device descriptor read/64, error -71 [ 129.808845][ T7248] usb 14-1: new full-speed USB device number 7 using dummy_hcd [ 129.958949][ T7248] usb 14-1: device descriptor read/64, error -71 [ 130.058951][ T5096] Bluetooth: hci0: command tx timeout [ 130.080617][ T7248] usb usb14-port1: attempt power cycle [ 130.111069][ T44] kauditd_printk_skb: 35 callbacks suppressed [ 130.111105][ T44] audit: type=1400 audit(1792221594.643:994): avc: denied { read write } for pid=8834 comm="syz.1.595" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 130.111384][ T44] audit: type=1400 audit(1792221594.643:995): avc: denied { open } for pid=8834 comm="syz.1.595" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 130.114576][ T44] audit: type=1400 audit(1792221594.643:996): avc: denied { ioctl } for pid=8834 comm="syz.1.595" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 130.114630][ T8835] 0x000000000003-0x000000010001 : "" [ 130.119209][ T8835] ftl_cs: FTL header corrupt! [ 130.173276][ T8838] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.173678][ T8838] gre0: entered promiscuous mode [ 130.173688][ T8838] gre0: entered allmulticast mode [ 130.200706][ T8838] syzkaller1: entered promiscuous mode [ 130.200721][ T8838] syzkaller1: entered allmulticast mode [ 130.318391][ T8843] xt_hashlimit: size too large, truncated to 1048576 [ 130.431780][ T8850] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 130.431791][ T8850] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 130.431953][ T8850] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 130.432325][ T8849] overlayfs: missing 'workdir' [ 130.442973][ T7248] usb 14-1: new full-speed USB device number 8 using dummy_hcd [ 130.479585][ T7248] usb 14-1: device descriptor read/8, error -71 [ 130.738939][ T7248] usb 14-1: new full-speed USB device number 9 using dummy_hcd [ 130.760478][ T7248] usb 14-1: device descriptor read/8, error -71 [ 130.773479][ T8858] 9pnet_virtio: no channels available for device syz [ 130.774439][ T35] usb 10-1: USB disconnect, device number 23 [ 130.798889][ T44] audit: type=1400 audit(1792221595.323:997): avc: denied { map } for pid=8859 comm="syz.5.604" path="socket:[29172]" dev="sockfs" ino=29172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 130.802182][ T8862] 9pnet_virtio: no channels available for device syz [ 130.805334][ T44] audit: type=1400 audit(1792221595.333:998): avc: denied { cmd } for pid=8859 comm="iou-wrk-8860" path="socket:[29172]" dev="sockfs" ino=29172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 130.870227][ T7248] usb usb14-port1: unable to enumerate USB device [ 130.914460][ T8866] netlink: 'syz.1.605': attribute type 1 has an invalid length. [ 130.965304][ T8869] mmap: syz.1.605 (8869) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 131.231121][ T8876] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 131.476239][ T7254] usb 13-1: USB disconnect, device number 11 [ 131.503040][ T44] audit: type=1400 audit(1792221596.033:999): avc: denied { mount } for pid=8881 comm="syz.1.611" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 131.520831][ T44] audit: type=1400 audit(1792221596.053:1000): avc: denied { watch watch_reads } for pid=8881 comm="syz.1.611" path="/syzcgroup/net/syz1/devices.allow" dev="cgroup" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 131.651892][ T8888] cgroup: Need name or subsystem set [ 131.727930][ T6645] IPVS: starting estimator thread 0... [ 131.728434][ T8893] veth0_vlan: entered allmulticast mode [ 131.730575][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'. [ 131.783701][ T8893] veth0_vlan (unregistering): left allmulticast mode [ 131.810022][ T8897] IPVS: using max 43 ests per chain, 103200 per kthread [ 131.840837][ T7254] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 131.947444][ T8900] netlink: 48 bytes leftover after parsing attributes in process `syz.1.617'. [ 131.949804][ T44] audit: type=1400 audit(1792221596.483:1001): avc: denied { setopt } for pid=8899 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 131.952318][ T8900] ip_tables: iptables: counters copy to user failed while replacing table [ 131.996047][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 131.997102][ T8904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 132.009344][ T7254] usb 13-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 132.010283][ T7254] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.010310][ T7254] usb 13-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 132.010324][ T7254] usb 13-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.011604][ T7254] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 132.011617][ T7254] usb 13-1: Product: syz [ 132.011624][ T7254] usb 13-1: Manufacturer: syz [ 132.128996][ T66] Bluetooth: hci0: command tx timeout [ 132.197898][ T8911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.208999][ T8913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 132.223624][ T7254] dvb_ttusb_budget: ttusb_init_controller: error [ 132.223633][ T7254] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 132.271878][ T7254] DVB: Unable to find symbol cx22700_attach() [ 132.311035][ T7254] DVB: Unable to find symbol tda10046_attach() [ 132.311045][ T7254] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 132.428926][ T8884] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 132.430044][ T5838] usb 13-1: USB disconnect, device number 12 [ 132.612566][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.612606][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.658906][ T7254] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 132.818918][ T7254] usb 14-1: Using ep0 maxpacket: 8 [ 132.820130][ T7254] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.821366][ T7254] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 132.821390][ T7254] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.821401][ T7254] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.821413][ T7254] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.821424][ T7254] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.821444][ T7254] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.025535][ T7254] usb 14-1: usb_control_msg returned -32 [ 133.025564][ T7254] usbtmc 14-1:16.0: can't read capabilities [ 133.026527][ T8925] bridge_slave_0: left allmulticast mode [ 133.026550][ T8925] bridge_slave_0: left promiscuous mode [ 133.026725][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.030607][ T8925] bridge_slave_1: left allmulticast mode [ 133.030628][ T8925] bridge_slave_1: left promiscuous mode [ 133.030875][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.050535][ T8925] bond0: (slave bond_slave_0): Releasing backup interface [ 133.055270][ T8925] bond0: (slave bond_slave_1): Releasing backup interface [ 133.074555][ T8925] team0: Port device team_slave_0 removed [ 133.075316][ T8926] xt_REDIRECT: bad MAP_IPS. [ 133.080601][ T8925] team0: Port device team_slave_1 removed [ 133.081284][ T8925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.081301][ T8925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.083532][ T8925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.083548][ T8925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.091753][ T8925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.100323][ T44] audit: type=1400 audit(1792221597.623:1002): avc: denied { recv } for pid=8923 comm="syz.8.624" saddr=fe80::430a:19e:b993:c8ea src=48452 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 133.145629][ T8928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.625'. [ 133.184080][ T8931] netlink: 36 bytes leftover after parsing attributes in process `syz.1.626'. [ 133.228411][ T44] audit: type=1400 audit(1792221597.753:1003): avc: denied { ioctl } for pid=8930 comm="syz.1.626" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 133.799501][ T8935] usbtmc 14-1:16.0: usb_control_msg returned -32 [ 133.811742][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 133.812796][ T5096] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.851724][ T8944] xt_socket: unknown flags 0x4c [ 133.910136][ T8948] FAULT_INJECTION: forcing a failure. [ 133.910136][ T8948] name fail_futex, interval 1, probability 0, space 0, times 0 [ 133.910178][ T8948] CPU: 2 UID: 0 PID: 8948 Comm: syz.5.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.910206][ T8948] Tainted: [L]=SOFTLOCKUP [ 133.910213][ T8948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 133.910223][ T8948] Call Trace: [ 133.910230][ T8948] [ 133.910238][ T8948] dump_stack_lvl+0x100/0x190 [ 133.910284][ T8948] should_fail_ex.cold+0x5/0xa [ 133.910310][ T8948] get_futex_key+0x1d0/0x14f0 [ 133.910359][ T8948] ? __pfx_get_futex_key+0x10/0x10 [ 133.910388][ T8948] ? __pfx___schedule+0x10/0x10 [ 133.910428][ T8948] futex_wait_setup+0x91/0x540 [ 133.910460][ T8948] __futex_wait+0x19f/0x300 [ 133.910485][ T8948] ? __pfx___futex_wait+0x10/0x10 [ 133.910503][ T8948] ? __pfx_try_to_wake_up+0x10/0x10 [ 133.910525][ T8948] ? futex_hash+0x311/0x400 [ 133.910552][ T8948] ? __pfx_futex_wake_mark+0x10/0x10 [ 133.910578][ T8948] ? find_held_lock+0x2b/0x80 [ 133.910604][ T8948] ? futex_wake+0x4ea/0x5e0 [ 133.910628][ T8948] futex_wait+0xe6/0x370 [ 133.910664][ T8948] ? __pfx_futex_wait+0x10/0x10 [ 133.910691][ T8948] ? putname+0xb1/0x110 [ 133.910715][ T8948] ? kmem_cache_free+0x127/0x6c0 [ 133.910742][ T8948] do_futex+0x265/0x440 [ 133.910770][ T8948] ? __pfx_do_futex+0x10/0x10 [ 133.910796][ T8948] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.910821][ T8948] __x64_sys_futex+0x34f/0x4d0 [ 133.910851][ T8948] ? __x64_sys_openat+0x12d/0x210 [ 133.910870][ T8948] ? __pfx___x64_sys_futex+0x10/0x10 [ 133.910907][ T8948] do_syscall_64+0x123/0x790 [ 133.910957][ T8948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.910977][ T8948] RIP: 0033:0x7fdf2819e559 [ 133.910992][ T8948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.911010][ T8948] RSP: 002b:00007fdf263f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.911030][ T8948] RAX: ffffffffffffffda RBX: 00007fdf28425fa8 RCX: 00007fdf2819e559 [ 133.911044][ T8948] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf28425fa8 [ 133.911056][ T8948] RBP: 00007fdf28425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 133.911068][ T8948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.911080][ T8948] R13: 00007fdf28426038 R14: 00007ffd93186110 R15: 00007ffd931861f8 [ 133.911104][ T8948] [ 133.935230][ T5838] usb 14-1: USB disconnect, device number 10 [ 134.062714][ T8958] SELinux: DCCP has been removed, pid=8958 comm=syz.1.633 [ 134.063218][ T8958] netlink: 'syz.1.633': attribute type 12 has an invalid length. [ 134.063230][ T8958] netlink: 'syz.1.633': attribute type 29 has an invalid length. [ 134.063237][ T8958] netlink: 148 bytes leftover after parsing attributes in process `syz.1.633'. [ 134.063247][ T8958] netlink: 59 bytes leftover after parsing attributes in process `syz.1.633'. [ 134.106468][ T8961] netlink: 488 bytes leftover after parsing attributes in process `syz.1.634'. [ 134.112023][ T8967] netlink: 488 bytes leftover after parsing attributes in process `syz.1.634'. [ 134.199395][ T6210] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 134.359530][ T6210] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 134.360424][ T6210] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.360459][ T6210] usb 10-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 134.361776][ T6210] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 134.361796][ T6210] usb 10-1: Product: syz [ 134.361809][ T6210] usb 10-1: Manufacturer: syz [ 134.369008][ T6210] usb 10-1: selecting invalid altsetting 1 [ 134.369076][ T6210] dvb_ttusb_budget: ttusb_init_controller: error [ 134.369083][ T6210] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 134.390727][ T6210] DVB: Unable to find symbol cx22700_attach() [ 134.407405][ T6210] DVB: Unable to find symbol tda10046_attach() [ 134.407419][ T6210] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 134.675296][ T8988] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 134.681252][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.638'. [ 134.758639][ T8995] openvswitch: netlink: VLAN attribute unexpected. [ 134.838866][ T5838] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 134.863492][ T9000] sctp: [Deprecated]: syz.8.643 (pid 9000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.863492][ T9000] Use struct sctp_sack_info instead [ 134.931314][ T9005] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 134.982389][ T9009] netlink: 'syz.8.646': attribute type 25 has an invalid length. [ 134.994735][ T5838] usb 14-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 134.995891][ T5838] usb 14-1: config 1 has an invalid interface number: 3 but max is 0 [ 134.995911][ T5838] usb 14-1: config 1 has no interface number 0 [ 134.997970][ T5838] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.997990][ T5838] usb 14-1: Product: syz [ 134.998002][ T5838] usb 14-1: Manufacturer: syz [ 134.998015][ T5838] usb 14-1: SerialNumber: syz [ 135.040131][ T5838] usb 14-1: 3:1 : does not exist [ 135.040156][ T5838] usb 14-1: 3:2 : does not exist [ 135.153225][ T44] kauditd_printk_skb: 13 callbacks suppressed [ 135.153242][ T44] audit: type=1400 audit(1792221599.683:1017): avc: denied { ioctl } for pid=9019 comm="syz.1.650" path="socket:[30383]" dev="sockfs" ino=30383 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 135.195470][ T44] audit: type=1400 audit(1792221599.723:1018): avc: denied { read } for pid=9021 comm="syz.8.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 135.207957][ T44] audit: type=1400 audit(1792221599.733:1019): avc: denied { create } for pid=9024 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 135.208317][ T44] audit: type=1400 audit(1792221599.733:1020): avc: denied { ioctl } for pid=9024 comm="syz.1.652" path="socket:[28634]" dev="sockfs" ino=28634 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 135.210169][ T44] audit: type=1400 audit(1792221599.743:1021): avc: denied { setopt } for pid=9024 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 135.210321][ T44] audit: type=1400 audit(1792221599.743:1022): avc: denied { write } for pid=9024 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 135.210791][ T9025] netlink: 'syz.1.652': attribute type 4 has an invalid length. [ 135.210801][ T9025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.652'. [ 135.216926][ T9025] .`: renamed from bond0 (while UP) [ 135.346738][ T44] audit: type=1400 audit(1792221599.873:1023): avc: denied { bind } for pid=9036 comm="syz.1.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.351559][ T44] audit: type=1400 audit(1792221599.883:1024): avc: denied { ioctl } for pid=9036 comm="syz.1.655" path="socket:[30403]" dev="sockfs" ino=30403 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.351805][ T44] audit: type=1400 audit(1792221599.883:1025): avc: denied { write } for pid=9036 comm="syz.1.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.393937][ T44] audit: type=1400 audit(1792221599.923:1026): avc: denied { write } for pid=9037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.429355][ T9038] ip_tables: iptables: counters copy to user failed while replacing table [ 135.791903][ T10] usb 14-1: USB disconnect, device number 11 [ 136.178858][ T35] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 136.340291][ T35] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 136.341157][ T35] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.341927][ T35] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.343440][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.343453][ T35] usb 6-1: Product: syz [ 136.343460][ T35] usb 6-1: Manufacturer: syz [ 136.343469][ T35] usb 6-1: SerialNumber: syz [ 136.347317][ T35] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 136.350471][ T35] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 136.352502][ T35] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 136.544246][ T9075] lo: entered allmulticast mode [ 136.546739][ T9075] bond0: entered allmulticast mode [ 136.547178][ T9075] dummy0: entered allmulticast mode [ 136.548201][ T9075] eql: entered allmulticast mode [ 136.548471][ T9075] ifb0: entered allmulticast mode [ 136.549061][ T9075] ifb1: entered allmulticast mode [ 136.552228][ T9075] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 136.559739][ T9075] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 136.562537][ T9075] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 136.562654][ T9075] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 136.562972][ T9075] hwsim0: entered allmulticast mode [ 136.563056][ T9075] ieee802154 phy0 wpan0: entered allmulticast mode [ 136.563221][ T9075] ieee802154 phy1 wpan1: entered allmulticast mode [ 136.563316][ T9075] teql0: entered allmulticast mode [ 136.563387][ T9075] tunl0: entered allmulticast mode [ 136.563450][ T9075] gre0: entered allmulticast mode [ 136.563506][ T9075] gretap0: entered allmulticast mode [ 136.563566][ T9075] erspan0: entered allmulticast mode [ 136.563619][ T9075] ip_vti0: entered allmulticast mode [ 136.563674][ T9075] ip6_vti0: entered allmulticast mode [ 136.563717][ T9075] sit0: entered allmulticast mode [ 136.563760][ T9075] ip6tnl0: entered allmulticast mode [ 136.563817][ T9075] ip6gre0: entered allmulticast mode [ 136.563881][ T9075] lapb0: entered allmulticast mode [ 136.564093][ T9075] lapb1: entered allmulticast mode [ 136.564429][ T9075] lapb2: entered allmulticast mode [ 136.564609][ T9075] lapb3: entered allmulticast mode [ 136.564879][ T9075] lapb4: entered allmulticast mode [ 136.565178][ T9075] lapb5: entered allmulticast mode [ 136.565240][ T9075] lapb6: entered allmulticast mode [ 136.565500][ T9075] lowpan0: entered allmulticast mode [ 136.565623][ T9075] rxe_eth0: entered allmulticast mode [ 136.565874][ T9075] wg2: entered allmulticast mode [ 136.566048][ T9075] bridge0: entered allmulticast mode [ 136.566119][ T9075] netdevsim netdevsim2 eth6: entered allmulticast mode [ 136.566644][ T9075] netdevsim netdevsim2 eth7: entered allmulticast mode [ 136.571629][ T9075] netdevsim netdevsim2 eth8: entered allmulticast mode [ 136.572127][ T9075] netdevsim netdevsim2 eth9: entered allmulticast mode [ 136.572458][ T9075] netdevsim netdevsim4 eth10: entered allmulticast mode [ 136.572832][ T9075] netdevsim netdevsim4 eth11: entered allmulticast mode [ 136.573240][ T9075] netdevsim netdevsim4 eth12: entered allmulticast mode [ 136.573572][ T9075] netdevsim netdevsim4 eth13: entered allmulticast mode [ 136.573910][ T9075] netdevsim netdevsim0 eth14: entered allmulticast mode [ 136.574326][ T9075] netdevsim netdevsim0 eth15: entered allmulticast mode [ 136.574681][ T9075] netdevsim netdevsim0 eth16: entered allmulticast mode [ 136.574990][ T9075] netdevsim netdevsim0 eth17: entered allmulticast mode [ 136.575548][ T9075] netdevsim netdevsim7 eth18: entered allmulticast mode [ 136.575941][ T9075] netdevsim netdevsim7 eth19: entered allmulticast mode [ 136.576237][ T9075] netdevsim netdevsim7 eth20: entered allmulticast mode [ 136.576476][ T9075] netdevsim netdevsim7 eth21: entered allmulticast mode [ 136.576734][ T9075] netdevsim netdevsim6 eth22: entered allmulticast mode [ 136.576980][ T9075] netdevsim netdevsim6 eth23: entered allmulticast mode [ 136.577236][ T9075] netdevsim netdevsim6 eth24: entered allmulticast mode [ 136.577482][ T9075] netdevsim netdevsim6 eth25: entered allmulticast mode [ 136.577719][ T9075] wireguard0: entered allmulticast mode [ 136.738616][ T9080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.806944][ T6645] Bluetooth: hci4: Frame reassembly failed (-84) [ 136.974286][ T7248] usb 10-1: USB disconnect, device number 24 [ 137.428869][ T7248] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 137.580824][ T7248] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 137.581852][ T7248] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.581892][ T7248] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 137.581926][ T7248] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.583521][ T7248] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 137.583541][ T7248] usb 10-1: Product: syz [ 137.583554][ T7248] usb 10-1: Manufacturer: syz [ 137.588311][ T9097] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 137.619476][ T7248] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 137.628255][ T7248] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB2 [ 137.842348][ T77] usb 10-1: USB disconnect, device number 25 [ 137.859792][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.9.677'. [ 137.859812][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.9.677'. [ 137.863269][ T9122] FAULT_INJECTION: forcing a failure. [ 137.863269][ T9122] name failslab, interval 1, probability 0, space 0, times 0 [ 137.863303][ T9122] CPU: 3 UID: 0 PID: 9122 Comm: syz.9.677 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.863327][ T9122] Tainted: [L]=SOFTLOCKUP [ 137.863333][ T9122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.863343][ T9122] Call Trace: [ 137.863348][ T9122] [ 137.863370][ T9122] dump_stack_lvl+0x100/0x190 [ 137.863412][ T9122] should_fail_ex.cold+0x5/0xa [ 137.863435][ T9122] should_failslab+0xc2/0x120 [ 137.863464][ T9122] kmem_cache_alloc_noprof+0x92/0x6a0 [ 137.863487][ T9122] ? __kernfs_new_node+0xd2/0xa10 [ 137.863511][ T9122] __kernfs_new_node+0xd2/0xa10 [ 137.863534][ T9122] ? __pfx___kernfs_new_node+0x10/0x10 [ 137.863554][ T9122] ? lock_acquire+0x1d1/0x380 [ 137.863572][ T9122] ? kernfs_root+0x23/0x2a0 [ 137.863588][ T9122] ? find_held_lock+0x2b/0x80 [ 137.863611][ T9122] ? kernfs_root+0xee/0x2a0 [ 137.863632][ T9122] ? kernfs_root+0xee/0x2a0 [ 137.863653][ T9122] kernfs_new_node+0x117/0x150 [ 137.863676][ T9122] __kernfs_create_file+0x53/0x350 [ 137.863700][ T9122] sysfs_add_file_mode_ns+0x207/0x3c0 [ 137.863731][ T9122] internal_create_group+0x593/0xfb0 [ 137.863755][ T9122] ? __pfx_internal_create_group+0x10/0x10 [ 137.863776][ T9122] ? kernfs_create_link+0x1bd/0x240 [ 137.863802][ T9122] internal_create_groups+0x9d/0x150 [ 137.863822][ T9122] device_add+0xf60/0x1970 [ 137.863846][ T9122] ? __pfx_device_add+0x10/0x10 [ 137.863865][ T9122] ? lockdep_init_map_type+0x5c/0x250 [ 137.863888][ T9122] ? __init_waitqueue_head+0xca/0x150 [ 137.863917][ T9122] netdev_register_kobject+0x1df/0x410 [ 137.863953][ T9122] register_netdevice+0x15b6/0x25a0 [ 137.863977][ T9122] ? __pfx_register_netdevice+0x10/0x10 [ 137.864000][ T9122] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 137.864032][ T9122] batadv_meshif_newlink+0x8f/0xc0 [ 137.864056][ T9122] rtnl_newlink+0x1697/0x2620 [ 137.864083][ T9122] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.864100][ T9122] ? avc_has_perm_noaudit+0x56/0x470 [ 137.864119][ T9122] ? find_held_lock+0x2b/0x80 [ 137.864144][ T9122] ? avc_has_perm_noaudit+0x11e/0x470 [ 137.864162][ T9122] ? avc_has_perm_noaudit+0x11e/0x470 [ 137.864203][ T9122] ? lock_acquire+0x1d1/0x380 [ 137.864221][ T9122] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 137.864240][ T9122] ? find_held_lock+0x2b/0x80 [ 137.864263][ T9122] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 137.864281][ T9122] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 137.864303][ T9122] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.864322][ T9122] rtnetlink_rcv_msg+0x95e/0xe90 [ 137.864342][ T9122] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.864369][ T9122] ? ref_tracker_free+0x37e/0x6c0 [ 137.864392][ T9122] netlink_rcv_skb+0x159/0x420 [ 137.864410][ T9122] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.864432][ T9122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.864460][ T9122] ? netlink_deliver_tap+0x1ae/0xcc0 [ 137.864488][ T9122] netlink_unicast+0x65f/0x950 [ 137.864518][ T9122] ? __pfx_netlink_unicast+0x10/0x10 [ 137.864551][ T9122] netlink_sendmsg+0x8b0/0xda0 [ 137.864572][ T9122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.864593][ T9122] ? selinux_socket_sendmsg+0x198/0x2f0 [ 137.864620][ T9122] ____sys_sendmsg+0xa4d/0xbe0 [ 137.864648][ T9122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.864667][ T9122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.864701][ T9122] ___sys_sendmsg+0x190/0x1e0 [ 137.864725][ T9122] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.864748][ T9122] ? futex_wait+0x11e/0x370 [ 137.864775][ T9122] ? find_held_lock+0x2b/0x80 [ 137.864814][ T9122] __sys_sendmsg+0x160/0x210 [ 137.864832][ T9122] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.864862][ T9122] do_syscall_64+0x123/0x790 [ 137.864889][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.864907][ T9122] RIP: 0033:0x7f3a2659e559 [ 137.864922][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.864940][ T9122] RSP: 002b:00007f3a2740e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.864957][ T9122] RAX: ffffffffffffffda RBX: 00007f3a26825fa0 RCX: 00007f3a2659e559 [ 137.864969][ T9122] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 137.864979][ T9122] RBP: 00007f3a26635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 137.864990][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.865000][ T9122] R13: 00007f3a26826038 R14: 00007f3a26825fa0 R15: 00007ffd0038b6a8 [ 137.865025][ T9122] [ 137.874493][ T77] garmin_gps ttyUSB2: Garmin GPS usb/tty converter now disconnected from ttyUSB2 [ 137.874998][ T77] garmin_gps 10-1:1.0: device disconnected [ 138.069927][ T9130] geneve2: entered promiscuous mode [ 138.069941][ T9130] geneve2: entered allmulticast mode [ 138.288935][ T77] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 138.439624][ T77] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 138.440898][ T77] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.442735][ T77] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.442756][ T77] usb 10-1: Product: syz [ 138.442769][ T77] usb 10-1: Manufacturer: syz [ 138.449852][ T9058] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 138.452966][ T7248] usb 6-1: USB disconnect, device number 3 [ 138.473856][ T77] usb 10-1: selecting invalid altsetting 1 [ 138.473924][ T77] dvb_ttusb_budget: ttusb_init_controller: error [ 138.473930][ T77] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 138.476235][ T7248] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 138.480601][ T7248] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 138.481332][ T7248] ti_usb_3410_5052 6-1:2.0: device disconnected [ 138.504001][ T77] DVB: Unable to find symbol cx22700_attach() [ 138.522642][ T77] DVB: Unable to find symbol tda10046_attach() [ 138.522651][ T77] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 138.848917][ T5096] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 138.848963][ T66] Bluetooth: hci4: command 0xfc11 tx timeout [ 138.907363][ T9144] ip_tables: iptables: counters copy to user failed while replacing table [ 138.910693][ T9144] __nla_validate_parse: 2 callbacks suppressed [ 138.910708][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.682'. [ 139.004673][ T9146] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 139.046941][ T9150] capability: warning: `syz.1.684' uses deprecated v2 capabilities in a way that may be insecure [ 139.375550][ T9168] raw_sendmsg: syz.9.688 forgot to set AF_INET. Fix it! [ 139.431067][ T9169] 9pnet_virtio: no channels available for device syz [ 139.432086][ T9169] overlayfs: overlapping lowerdir path [ 140.101825][ T9191] Console: switching to colour dummy device 80x25 [ 140.276656][ T44] kauditd_printk_skb: 30 callbacks suppressed [ 140.276670][ T44] audit: type=1400 audit(1792221604.803:1057): avc: denied { append } for pid=9196 comm="syz.9.691" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system ** replaying previous printk message ** [ 140.276670][ T44] audit: type=1400 audit(1792221604.803:1057): avc: denied { append } for pid=9196 comm="syz.9.691" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.286230][ T9197] [ 140.295218][ T9197] ====================================================== [ 140.297419][ T9197] WARNING: possible circular locking dependency detected [ 140.299577][ T9197] syzkaller #0 Tainted: G L [ 140.301250][ T9197] ------------------------------------------------------ [ 140.303177][ T9197] syz.9.691/9197 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.305146][ T9197] ffffffff8ffcb1c0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x63/0x6a0 [ 140.308200][ T9197] [ 140.308200][ T9197] but task is already holding lock: [ 140.310515][ T9197] ffff88802a650d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 140.313363][ T9197] [ 140.313363][ T9197] which lock already depends on the new lock. [ 140.313363][ T9197] [ 140.316773][ T9197] [ 140.316773][ T9197] the existing dependency chain (in reverse order) is: [ 140.319599][ T9197] [ 140.319599][ T9197] -> #2 (&q->blkcg_mutex){+.+.}-{4:4}: [ 140.321983][ T9197] lock_acquire+0x1d1/0x380 [ 140.323580][ T9197] __mutex_lock+0x1a4/0x1bd0 [ 140.325226][ T9197] blkcg_activate_policy+0x34f/0xbf0 [ 140.327078][ T9197] blk_throtl_init+0x39a/0x5b0 [ 140.328761][ T9197] tg_set_conf.isra.0+0x252/0x500 [ 140.330542][ T9197] cgroup_file_write+0x1e6/0x8a0 [ 140.332294][ T9197] kernfs_fop_write_iter+0x3e0/0x5f0 [ 140.334157][ T9197] vfs_write+0x6af/0x1050 [ 140.335717][ T9197] ksys_write+0x12a/0x250 [ 140.337272][ T9197] do_syscall_64+0x123/0x790 [ 140.339072][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.341120][ T9197] [ 140.341120][ T9197] -> #1 (&q->q_usage_counter(io)#65){++++}-{0:0}: [ 140.343808][ T9197] lock_acquire+0x1d1/0x380 [ 140.345395][ T9197] blk_alloc_queue+0x610/0x790 [ 140.347077][ T9197] __blk_alloc_disk+0xa0/0x170 [ 140.348771][ T9197] zram_add+0x1bf/0x5d0 [ 140.350297][ T9197] zram_init+0x11c/0x160 [ 140.351855][ T9197] do_one_initcall+0x11c/0x6f0 [ 140.353516][ T9197] kernel_init_freeable+0x6ea/0x7b0 [ 140.355314][ T9197] kernel_init+0x21/0x1e0 [ 140.356849][ T9197] ret_from_fork+0x730/0xd60 [ 140.358469][ T9197] ret_from_fork_asm+0x1a/0x30 [ 140.360149][ T9197] [ 140.360149][ T9197] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 140.362390][ T9197] check_prev_add+0xeb/0xe60 [ 140.364005][ T9197] __lock_acquire+0x1528/0x1f40 [ 140.365688][ T9197] lock_acquire+0x1d1/0x380 [ 140.367309][ T9197] fs_reclaim_acquire+0xc4/0x100 [ 140.369025][ T9197] kmem_cache_alloc_noprof+0x63/0x6a0 [ 140.370920][ T9197] __radix_tree_preload+0x333/0x820 [ 140.372710][ T9197] blkg_conf_prep+0x489/0xf10 [ 140.374350][ T9197] tg_set_conf.isra.0+0x1ed/0x500 [ 140.376080][ T9197] cgroup_file_write+0x1e6/0x8a0 [ 140.377802][ T9197] kernfs_fop_write_iter+0x3e0/0x5f0 [ 140.379644][ T9197] vfs_write+0x6af/0x1050 [ 140.381177][ T9197] ksys_write+0x12a/0x250 [ 140.382709][ T9197] do_syscall_64+0x123/0x790 [ 140.384346][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.386312][ T9197] [ 140.386312][ T9197] other info that might help us debug this: [ 140.386312][ T9197] [ 140.389312][ T9197] Chain exists of: [ 140.389312][ T9197] fs_reclaim --> &q->q_usage_counter(io)#65 --> &q->blkcg_mutex [ 140.389312][ T9197] [ 140.393371][ T9197] Possible unsafe locking scenario: [ 140.393371][ T9197] [ 140.395584][ T9197] CPU0 CPU1 [ 140.397225][ T9197] ---- ---- [ 140.398909][ T9197] lock(&q->blkcg_mutex); [ 140.400369][ T9197] lock(&q->q_usage_counter(io)#65); [ 140.402824][ T9197] lock(&q->blkcg_mutex); [ 140.404960][ T9197] lock(fs_reclaim); [ 140.406188][ T9197] [ 140.406188][ T9197] *** DEADLOCK *** [ 140.406188][ T9197] [ 140.408603][ T9197] locks held by syz.9.691/9197: 6, last CPU#2: [ 140.408860][ T44] audit: type=1400 audit(1792221604.833:1058): avc: denied { write } for pid=5721 comm="syz-executor" path="pipe:[5672]" dev="pipefs" ino=5672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 140.417828][ T9197] #0: ffff88803876eb70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 140.420678][ T9197] #1: ffff888033172460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 140.423510][ T9197] #2: ffff8880571d9080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 140.426588][ T9197] #3: ffff888036dc5d28 (kn->active#106){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 140.429766][ T9197] #4: ffff88802a650bb0 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x253/0x410 [ 140.432944][ T9197] #5: ffff88802a650d30 (&q->blkcg_mutex){+.+.}-{4:4}, at: blkg_conf_prep+0xbc/0xf10 [ 140.435929][ T9197] [ 140.435929][ T9197] stack backtrace: [ 140.437784][ T9197] CPU: 2 UID: 0 PID: 9197 Comm: syz.9.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.441150][ T9197] Tainted: [L]=SOFTLOCKUP [ 140.442519][ T9197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.445708][ T9197] Call Trace: [ 140.446777][ T9197] [ 140.447736][ T9197] dump_stack_lvl+0x100/0x190 [ 140.449245][ T9197] print_circular_bug.cold+0x178/0x1be [ 140.451011][ T9197] check_noncircular+0x146/0x160 [ 140.452592][ T9197] check_prev_add+0xeb/0xe60 [ 140.454071][ T9197] ? check_noncircular+0x97/0x160 [ 140.455672][ T9197] __lock_acquire+0x1528/0x1f40 [ 140.457216][ T9197] lock_acquire+0x1d1/0x380 [ 140.458681][ T9197] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 140.460446][ T9197] fs_reclaim_acquire+0xc4/0x100 [ 140.462022][ T9197] ? kmem_cache_alloc_noprof+0x63/0x6a0 [ 140.463779][ T9197] kmem_cache_alloc_noprof+0x63/0x6a0 [ 140.465429][ T9197] ? __radix_tree_preload+0x2f4/0x820 [ 140.467062][ T9197] ? __radix_tree_preload+0x333/0x820 [ 140.468769][ T9197] __radix_tree_preload+0x333/0x820 [ 140.470485][ T9197] blkg_conf_prep+0x489/0xf10 [ 140.472009][ T9197] tg_set_conf.isra.0+0x1ed/0x500 [ 140.473616][ T9197] ? __pfx_tg_set_conf.isra.0+0x10/0x10 [ 140.475379][ T9197] ? kernfs_root+0xf8/0x2a0 [ 140.476756][ T9197] cgroup_file_write+0x1e6/0x8a0 [ 140.478338][ T9197] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 140.480067][ T9197] ? __pfx_cgroup_file_write+0x10/0x10 [ 140.481785][ T9197] ? __kmalloc_noprof+0x350/0x840 [ 140.483399][ T9197] kernfs_fop_write_iter+0x3e0/0x5f0 [ 140.485056][ T9197] ? __pfx_cgroup_file_write+0x10/0x10 [ 140.486679][ T9197] vfs_write+0x6af/0x1050 [ 140.488031][ T9197] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 140.489782][ T9197] ? __pfx_vfs_write+0x10/0x10 [ 140.491239][ T9197] ? find_held_lock+0x2b/0x80 [ 140.492675][ T9197] ksys_write+0x12a/0x250 [ 140.493961][ T9197] ? __pfx_ksys_write+0x10/0x10 [ 140.495511][ T9197] ? kcov_ioctl+0x17a/0x760 [ 140.496978][ T9197] do_syscall_64+0x123/0x790 [ 140.498454][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.500333][ T9197] RIP: 0033:0x7f3a2659e559 [ 140.501744][ T9197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.507716][ T9197] RSP: 002b:00007f3a2740e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.510332][ T9197] RAX: ffffffffffffffda RBX: 00007f3a26825fa0 RCX: 00007f3a2659e559 [ 140.512820][ T9197] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 140.515317][ T9197] RBP: 00007f3a26635ab8 R08: 0000000000000000 R09: 0000000000000000 [ 140.517785][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.520281][ T9197] R13: 00007f3a26826038 R14: 00007f3a26825fa0 R15: 00007ffd0038b6a8 [ 140.522769][ T9197] [ 140.667901][ T8551] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.667923][ T8551] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.674870][ T42] usb 10-1: USB disconnect, device number 26 [ 140.796349][ T8551] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.796378][ T8551] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.952037][ T8551] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.952065][ T8551] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.052954][ T8551] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.052986][ T8551] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.177303][ T8551] bridge_slave_1: left allmulticast mode [ 141.177324][ T8551] bridge_slave_1: left promiscuous mode [ 141.177425][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.178318][ T8551] bridge_slave_0: left allmulticast mode [ 141.178332][ T8551] bridge_slave_0: left promiscuous mode [ 141.178427][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.207280][ T8551] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 141.207868][ T8551] bond0 (unregistering): Released all slaves [ 141.255195][ T44] audit: type=1400 audit(1792221605.783:1059): avc: denied { write } for pid=9201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.293007][ T44] audit: type=1400 audit(1792221605.823:1060): avc: denied { write } for pid=9204 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.323330][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 141.388109][ T44] audit: type=1400 audit(1792221605.913:1061): avc: denied { write } for pid=9207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.421278][ T44] audit: type=1400 audit(1792221605.953:1062): avc: denied { write } for pid=9210 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.441708][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 141.492844][ T44] audit: type=1400 audit(1792221606.023:1063): avc: denied { write } for pid=9213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.528280][ T44] audit: type=1400 audit(1792221606.053:1064): avc: denied { write } for pid=9216 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.541902][ T8551] hsr_slave_0: left promiscuous mode [ 141.542377][ T8551] hsr_slave_1: left promiscuous mode [ 141.542860][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.542874][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.543363][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.543376][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.546767][ T8551] veth1_macvtap: left promiscuous mode [ 141.546790][ T8551] veth0_macvtap: left promiscuous mode [ 141.546843][ T8551] veth1_vlan: left promiscuous mode [ 141.546876][ T8551] veth0_vlan: left promiscuous mode [ 141.605668][ T8551] team0 (unregistering): Port device team_slave_1 removed [ 141.616545][ T8551] team0 (unregistering): Port device team_slave_0 removed [ 141.643243][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 141.704826][ T44] audit: type=1400 audit(1792221606.233:1065): avc: denied { write } for pid=9220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.742844][ T44] audit: type=1400 audit(1792221606.273:1066): avc: denied { write } for pid=9223 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.769641][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 141.991588][ T8551] IPVS: stop unused estimator thread 0... [ 142.092744][ T8551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.182607][ T8551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.272095][ T8551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.314363][ T8551] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.435034][ T8551] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.503553][ T8551] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.544871][ T5448] 8021q: adding VLAN 0 to HW filter on device eth26 [ 142.612980][ T8551] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.658009][ T5448] 8021q: adding VLAN 0 to HW filter on device eth27 [ 142.674043][ T8551] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.794099][ T5448] 8021q: adding VLAN 0 to HW filter on device eth28 [ 142.832293][ T8551] bridge_slave_1: left allmulticast mode [ 142.832308][ T8551] bridge_slave_1: left promiscuous mode [ 142.832377][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.833151][ T8551] bridge_slave_0: left allmulticast mode [ 142.833162][ T8551] bridge_slave_0: left promiscuous mode [ 142.833242][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.905871][ T8551] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.907252][ T8551] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.908045][ T8551] .` (unregistering): Released all slaves [ 142.940950][ T8551] bond0 (unregistering): Released all slaves [ 142.946673][ T5448] 8021q: adding VLAN 0 to HW filter on device eth29 [ 143.056563][ T8551] tipc: Left network mode [ 143.119742][ T5448] 8021q: adding VLAN 0 to HW filter on device eth30 [ 143.243743][ T5448] 8021q: adding VLAN 0 to HW filter on device eth31 [ 143.419927][ T5448] 8021q: adding VLAN 0 to HW filter on device eth32 [ 143.564792][ T8551] hsr_slave_0: left promiscuous mode [ 143.566912][ T8551] hsr_slave_1: left promiscuous mode [ 143.567408][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.567423][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.573497][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.573513][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.589985][ T8551] hsr_slave_0: left promiscuous mode [ 143.590437][ T8551] hsr_slave_1: left promiscuous mode [ 143.595241][ T8551] veth1_macvtap: left promiscuous mode [ 143.595264][ T8551] veth0_macvtap: left promiscuous mode [ 143.596164][ T8551] veth1_macvtap: left promiscuous mode [ 143.596185][ T8551] veth0_macvtap: left promiscuous mode [ 143.596237][ T8551] veth1_vlan: left promiscuous mode [ 143.596273][ T8551] veth0_vlan: left promiscuous mode [ 143.679541][ T8551] team0 (unregistering): Port device team_slave_1 removed [ 143.681826][ T8551] team0 (unregistering): Port device team_slave_0 removed [ 143.763131][ T5448] 8021q: adding VLAN 0 to HW filter on device eth33 [ 144.423778][ T8551] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.471901][ T8551] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.495207][ T8551] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.542295][ T8551] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.643325][ T8551] bridge_slave_1: left allmulticast mode [ 144.643347][ T8551] bridge_slave_1: left promiscuous mode [ 144.643476][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.644621][ T8551] bridge_slave_0: left allmulticast mode [ 144.644637][ T8551] bridge_slave_0: left promiscuous mode [ 144.644737][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.694037][ T8551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.695284][ T8551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.696043][ T8551] bond0 (unregistering): Released all slaves [ 144.814573][ T5448] 8021q: adding VLAN 0 to HW filter on device eth34 [ 144.856638][ T8551] hsr_slave_0: left promiscuous mode [ 144.856970][ T8551] hsr_slave_1: left promiscuous mode [ 144.857180][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.857190][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.857487][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.857496][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.868651][ T8551] veth1_macvtap: left promiscuous mode [ 144.868678][ T8551] veth0_macvtap: left promiscuous mode [ 144.869484][ T8551] veth1_vlan: left promiscuous mode [ 144.870191][ T8551] veth0_vlan: left promiscuous mode [ 144.963300][ T8551] team0 (unregistering): Port device team_slave_1 removed [ 144.965083][ T8551] team0 (unregistering): Port device team_slave_0 removed [ 144.992473][ T5448] 8021q: adding VLAN 0 to HW filter on device eth35 [ 145.127113][ T5448] 8021q: adding VLAN 0 to HW filter on device eth36 [ 145.253980][ T5448] 8021q: adding VLAN 0 to HW filter on device eth37