last executing test programs: 3m58.861279792s ago: executing program 32 (id=371): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0xb8, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x6}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x84, 0x3, 0xfffffffa, 0xffffffff}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb8}}, 0x20004080) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@any, 0x5}}}, 0xa) syz_emit_ethernet(0xc8, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x92, 0x2f, 0x0, @remote, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "9e5baea5ad52d1397788dba04e32041b1e8273a579a2ebdecdef1a109c3f8cb9198256a88c6bac9d9e16a64c3718dbeb9b97950caa97b35cefc6faf8ffffff9796968a6dfad6cc749f46a5cd5281"}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x3f000000, {{0x0, 0x2, 0x3}}}}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x4000800) 3m7.951105599s ago: executing program 33 (id=1550): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x76, 0x101301) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0xe}, 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x40402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0xe, 0x2200, 0x0, 0x0}, {0x0, 0x1, 0x0, 0x0}], 0x2}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0xabaa, 0x0}) 2m45.790206851s ago: executing program 5 (id=2105): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) write$sndseq(r5, &(0x7f0000000780)=[{0xe, 0x1, 0x0, 0xfd, @tick, {}, {0xe}, @result={0xffffffff, 0x20000}}], 0x1c) socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000900)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r8, r10, 0x25, 0x0, @void}, 0x10) 2m26.134837002s ago: executing program 34 (id=2093): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002b00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x2000, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000001440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001540)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f0000001580)={'bridge0\x00', @random="1d0000000988"}) fcntl$getownex(r1, 0x10, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0xffffffffffffff97, 0x5, &(0x7f0000001180), 0xffffffffffffffc2}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000001500)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) r6 = socket(0x11, 0x3, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000011c0)={0x2, 0x7}, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000002b80)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)=ANY=[@ANYBLOB="b800000003010300000002ff0000000001000008080015400000000224000f8008000240000000000800014000000007080003400000000b0800024000000000140018800800034000000005080003400000000608000740000005d20c001700000000040000000006001240000400000c000f80080002400000000634000f800800034000000974080001400000045e0800034000000fff0800014000000009080001400000005208000240000000020600124000010000"], 0xb8}, 0x1, 0x0, 0x0, 0x2000800}, 0x20000000) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001380), 0x208141, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r7, 0x40044160, &(0x7f00000013c0)=0x7) 1m56.726801877s ago: executing program 35 (id=2104): r0 = epoll_create(0x10e) epoll_wait(r0, &(0x7f0000000140)=[{}], 0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x48005) ptrace(0x11, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = accept$inet6(r1, &(0x7f0000000880)={0xa, 0x0, 0x0, @empty}, &(0x7f00000008c0)=0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000900)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, &(0x7f0000000940)) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYRESOCT=r4, @ANYRES16, @ANYRESOCT=r4], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40000002) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000a00)=0x6, 0x8) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000009c0)={'syzkaller0\x00', &(0x7f0000000980)=@ethtool_eee={0x45, 0x20, 0x2, 0x5f, 0xfff, 0x4, 0x0, 0x2, [0x1, 0xfffffffb]}}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000700)={&(0x7f0000000340), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000e10000226bdff07fcdbdf25080000f8375524ef6c2e850000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0xc0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) 1m11.761013011s ago: executing program 36 (id=2103): r0 = syz_open_dev$radio(&(0x7f0000000980), 0xffffffffffffffff, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) mkdir(&(0x7f0000000380)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./my_configfs\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget\x00', 0xb3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x6, 0x204031, 0xffffffffffffffff, 0xec772000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x2, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0xd, 0x2, 0x7, 0x100, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x7, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xbc}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mkdir(&(0x7f0000000540)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='proc_dir\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='proc_dir/scsi/scsi\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000640)=""/267, 0x10b, 0x304) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="215d9500", @ANYRES16=r2, @ANYBLOB="578d2dbd7000fbdbdf250200000014000180080003007f00000106000100020000009eab6a3fd27620"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000009c0)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x98f909, 0x0, '\x00', @value64=0x400003}}) 1m10.852432422s ago: executing program 37 (id=2105): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) write$sndseq(r5, &(0x7f0000000780)=[{0xe, 0x1, 0x0, 0xfd, @tick, {}, {0xe}, @result={0xffffffff, 0x20000}}], 0x1c) socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000900)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r8, r10, 0x25, 0x0, @void}, 0x10) 38.826809836s ago: executing program 38 (id=2397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mount$tmpfs(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=prefer=static:\v']) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_adjtime(0x17, &(0x7f0000000340)={0x37db, 0x80000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x0, 0x2000000000000, 0x3, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x42d, 0x0, 0x10000000000f48, 0x8, 0x25}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) chroot(&(0x7f00000002c0)='./file0\x00') pivot_root(&(0x7f0000000300)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r5, 0x0, 0x50, 0x0, &(0x7f0000000200)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22.433142067s ago: executing program 7 (id=2970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000a40)="0000000001000000", 0x8) connect(r0, &(0x7f0000000a80)=@in={0x2, 0x4e20, @loopback}, 0x80) 21.57471482s ago: executing program 7 (id=2982): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode']) 21.54014408s ago: executing program 7 (id=2984): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000a00)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000a40)={&(0x7f0000000a80)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="00c962", 0xffe0}], 0x1, 0x0, 0x0, 0x4040}, 0xc851) 21.43515861s ago: executing program 7 (id=2987): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='transersion=9p2000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '9p\x00'}, {0x20, '#[]'}, {0x20, ':+'}], 0xa, "47896fb8d397a8f956"}, 0x24) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) fchdir(r1) open(&(0x7f0000000280)='./bus\x00', 0x42b42, 0x1c0) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x8000, &(0x7f0000000300)={0x7}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000b00)=@v2={0x2, @aes256, 0x9, '\x00', @auto="38b6cca302cf4b85a0983ec4a7d882c4"}) 21.300191572s ago: executing program 7 (id=2988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000003a40)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res(0x0, 0x2, 0x5dd4) r3 = syz_genetlink_get_family_id$team(&(0x7f0000003a80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003b80)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004414}, 0x4844) 20.06039081s ago: executing program 7 (id=3000): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x18c, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26e"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20.001531436s ago: executing program 39 (id=3000): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x18c, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26e"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 16.313662097s ago: executing program 3 (id=3050): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x20c, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26e"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x2800) 16.043633416s ago: executing program 3 (id=3057): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40, 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0']) 15.934514598s ago: executing program 3 (id=3059): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x48) openat$kvm(0x0, &(0x7f0000000040), 0x88000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d07}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x3, 0x2, 0x2, 0x4, 0x9, 0x8d], 0x8080000, 0x2111c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 15.821052764s ago: executing program 3 (id=3061): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='transersion=9p2000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '9p\x00'}, {0x20, '#[]'}, {0x20, ':+'}], 0xa, "47896fb8d397a8f956"}, 0x24) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) fchdir(r1) open(&(0x7f0000000280)='./bus\x00', 0x42b42, 0x1c0) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x8000, &(0x7f0000000300)={0x7}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000b00)=@v2={0x2, @aes256, 0x9, '\x00', @auto="38b6cca302cf4b85a0983ec4a7d882c4"}) 15.752079623s ago: executing program 3 (id=3063): sched_setparam(0xffffffffffffffff, &(0x7f0000000000)=0x16) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000140)='.\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000580)="0000000001000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000680)="0000000001000000", 0x8) bind$inet(r0, &(0x7f00000009c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) connect(r1, &(0x7f0000000a80)=@in={0x2, 0x4e20, @loopback}, 0x80) 14.694468303s ago: executing program 8 (id=3080): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000040), 0x651, 0x0) r2 = dup2(r0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='3', 0x4e) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r3, 0xc0106441, &(0x7f00000000c0)={0x0, 0x0, 0x3}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x16ba82, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x0, 0x1, 0x5, 0x4}) write$cgroup_int(r4, &(0x7f0000000140)=0xfe5f, 0x12) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x0}) r7 = socket(0x2d, 0x2, 0x0) bind$xdp(r7, &(0x7f0000000200)={0x2d, 0x0, r6, 0xc}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000340)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) r9 = socket(0x2d, 0x2, 0x0) bind$xdp(r9, &(0x7f0000000240)={0x2d, 0x0, 0x0, 0xc}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'bond0\x00', 0x8020}) 14.111601202s ago: executing program 3 (id=3086): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 14.054646957s ago: executing program 40 (id=3086): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 13.827532678s ago: executing program 8 (id=3090): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000b00)=@v2={0x2, @aes256, 0x9, '\x00', @auto="38b6cca302cf4b85a0983ec4a7d882c4"}) 13.768887894s ago: executing program 8 (id=3092): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0']) 13.731882277s ago: executing program 8 (id=3093): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='transersion=9p2000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '9p\x00'}, {0x20, '#[]'}, {0x20, ':+'}], 0xa, "47896fb8d397a8f956"}, 0x24) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) fchdir(r1) open(&(0x7f0000000280)='./bus\x00', 0x42b42, 0x1c0) 13.620831604s ago: executing program 8 (id=3096): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe4ff, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 13.090721778s ago: executing program 8 (id=3102): close(0x3) close(0x3) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff000000070581"], 0x0) signalfd4(r0, &(0x7f00000001c0)={[0x9bc]}, 0x8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600020000000000000000239adf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000feffffff00000000ffffffff18150000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000340)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000480), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000700)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000840)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000900)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="0200000000000000f70c29dbde0c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000940)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) io_uring_setup(0x498f, &(0x7f0000000980)={0x0, 0xf4c7, 0x800, 0x0, 0x3b3}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x15, 0xe, 0x0, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b80)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x524, &(0x7f0000000c40)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000cc0)='source', 0x0, 0x0) io_uring_enter(r9, 0x2219, 0x9fb0, 0x16, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000a00)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000a40)=[0xffffffffffffffff], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x40}]}}]}, 0x38}}, 0x0) 13.011840026s ago: executing program 41 (id=3102): close(0x3) close(0x3) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040250580100001000000010902200001010080320904000002ff000000070581"], 0x0) signalfd4(r0, &(0x7f00000001c0)={[0x9bc]}, 0x8, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600020000000000000000239adf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000feffffff00000000ffffffff18150000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000340)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000480), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000700)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000840)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000900)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="0200000000000000f70c29dbde0c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000940)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) io_uring_setup(0x498f, &(0x7f0000000980)={0x0, 0xf4c7, 0x800, 0x0, 0x3b3}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x15, 0xe, 0x0, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b80)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x524, &(0x7f0000000c40)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000cc0)='source', 0x0, 0x0) io_uring_enter(r9, 0x2219, 0x9fb0, 0x16, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000a00)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000a40)=[0xffffffffffffffff], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x9}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x40}]}}]}, 0x38}}, 0x0) 12.852016393s ago: executing program 2 (id=3104): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1003, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x17fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'wlan0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000c80)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) 12.727126396s ago: executing program 2 (id=3105): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)=',', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x150, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad18"}]}, 0x150}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12.466736564s ago: executing program 2 (id=3106): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x1b8, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.298065502s ago: executing program 2 (id=3107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='transersion=9p2000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '9p\x00'}, {0x20, '#[]'}, {0x20, ':+'}], 0xa, "47896fb8d397a8f956"}, 0x24) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) fchdir(r1) open(&(0x7f0000000280)='./bus\x00', 0x42b42, 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x0, 0x21) 12.199202017s ago: executing program 2 (id=3108): openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=0']) 11.880537242s ago: executing program 2 (id=3109): r0 = syz_open_dev$video(&(0x7f00000004c0), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000500)={0x990000, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000700)}}) r1 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127\t\x00\x00\x00.1:/export\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x6a, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x4, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8, 0x1400}, 0xa2, 0x7cb6, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000b40)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000000b80)=[{{&(0x7f0000000bc0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008004) shutdown(r6, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000a00)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000a40)={&(0x7f0000000a80)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="00c962", 0xffe0}], 0x1, 0x0, 0x0, 0x4040}, 0xc851) 11.768561064s ago: executing program 42 (id=3109): r0 = syz_open_dev$video(&(0x7f00000004c0), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000500)={0x990000, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000700)}}) r1 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127\t\x00\x00\x00.1:/export\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x6a, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x4, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8, 0x1400}, 0xa2, 0x7cb6, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000b40)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000000b80)=[{{&(0x7f0000000bc0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008004) shutdown(r6, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) openat(0xffffffffffffff9c, &(0x7f0000000980)='./debug/dynamic_debug/control\x00', 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000a00)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r7, &(0x7f0000000a40)={&(0x7f0000000a80)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="00c962", 0xffe0}], 0x1, 0x0, 0x0, 0x4040}, 0xc851) 10.473101049s ago: executing program 6 (id=3111): r0 = socket(0x15, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x4e1a, 0x0, @local, 0x2}, 0x1c) connect$netlink(r4, &(0x7f0000000540)=@unspec, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x8}}}}}}, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f00000003c0)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000400)={'comedi_bond\x00', [0x3, 0x8a0, 0x7fffffff, 0x7ff, 0x30, 0x2, 0xf1, 0x8, 0xe1, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x400000, 0x8, 0x5, 0x746f, 0x8, 0x5, 0x8, 0x7fffffff, 0x4, 0x7ffd]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0xc0010058, 0x0, 0x2000000}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000600)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x6, 0x1, 0x1, 0x1, 0xb, 0x9}, &(0x7f0000000640)=0x20) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'rose0\x00', 0x4000}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x804) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x21, &(0x7f00000005c0)=0xff, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}}, 0x0) write$tun(r6, &(0x7f0000000340)={@val={0x0, 0x9}, @val={0x1, 0x84, 0x3c5, 0x50, 0x3, 0xfe00}, @mpls}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) 10.121184055s ago: executing program 6 (id=3112): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)=',', 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x150, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad18"}]}, 0x150}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 9.867797978s ago: executing program 6 (id=3113): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x1b8, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.687707462s ago: executing program 6 (id=3114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='transersion=9p2000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '9p\x00'}, {0x20, '#[]'}, {0x20, ':+'}], 0xa, "47896fb8d397a8f956"}, 0x24) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x0, 0x21) 9.585414351s ago: executing program 6 (id=3115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.139957556s ago: executing program 6 (id=3116): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0xfffffff8) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000180)=0x8081, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x101000000000007, &(0x7f0000000880)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000008c0)={0x15, 0x110, 0xfa00, {r4, 0x8, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @rand_addr=0x64010102}, @ib={0x1b, 0x7fff, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0xfffffffffffffffc, 0x100000000000001, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000a00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x2, @loopback, 0x5}, r4}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x200001b4, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000a40)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000a80)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000004c0)={r7, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @loopback, 0xffffffff}, {0xa, 0x4e20, 0x6080, @remote, 0x7}, r5, 0x4}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000025c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r8, 0x4) 9.01810638s ago: executing program 43 (id=3116): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0xfffffff8) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000180)=0x8081, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x14, 0x23, 0x301, 0x270bd22, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x101000000000007, &(0x7f0000000880)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000008c0)={0x15, 0x110, 0xfa00, {r4, 0x8, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @rand_addr=0x64010102}, @ib={0x1b, 0x7fff, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, 0xfffffffffffffffc, 0x100000000000001, 0x8}}}, 0x118) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000a00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x2, @loopback, 0x5}, r4}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x200001b4, &(0x7f0000000240)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000a40)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000a80)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000004c0)={r7, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @loopback, 0xffffffff}, {0xa, 0x4e20, 0x6080, @remote, 0x7}, r5, 0x4}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000025c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r8, 0x4) 6.651810768s ago: executing program 1 (id=3137): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000580)="00000000010000", 0x7) setsockopt(r0, 0x84, 0x81, &(0x7f0000000680)="0000000001000000", 0x8) bind$inet(r0, &(0x7f00000009c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000a40)="0000000001000000", 0x8) connect(r1, &(0x7f0000000a80)=@in={0x2, 0x4e20, @loopback}, 0x80) 6.580737924s ago: executing program 1 (id=3140): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x1b8, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.305970534s ago: executing program 1 (id=3143): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) close_range(r0, 0xffffffffffffffff, 0x0) 6.264528915s ago: executing program 1 (id=3144): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='transersion=9p2000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '9p\x00'}, {0x20, '#[]'}, {0x20, ':+'}], 0xa, "47896fb8d397a8f956"}, 0x24) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000280)='./bus\x00', 0x42b42, 0x1c0) 6.161657761s ago: executing program 1 (id=3148): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000300)=0x80000001, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d80)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newtaction={0xb8, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa4, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x6}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x84, 0x3, 0xfffffffa, 0xffffffff}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xb8}}, 0x20004080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='clear_refs\x00') writev(r4, &(0x7f0000000900)=[{&(0x7f0000000940)='4', 0x1}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x16, &(0x7f0000000bc0)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000cc0)='GPL\x00', 0x6}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x8}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r4, &(0x7f0000000980)=""/236, 0xec, 0x20, &(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x0, 0x1, 0x3, 0x0, {0xa, 0x4e20, 0xffffffca, @local, 0x11c}}}, 0x80) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 5.550141803s ago: executing program 1 (id=3157): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000580)="0000000001000000", 0x8) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) bind$inet(r0, &(0x7f00000009c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000a40)="0000000001000000", 0x8) connect(r1, &(0x7f0000000a80)=@in={0x2, 0x4e20, @loopback}, 0x80) 5.406294154s ago: executing program 44 (id=3157): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000580)="0000000001000000", 0x8) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) bind$inet(r0, &(0x7f00000009c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000a40)="0000000001000000", 0x8) connect(r1, &(0x7f0000000a80)=@in={0x2, 0x4e20, @loopback}, 0x80) 4.020989763s ago: executing program 5 (id=3117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000003a80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003b80)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004414}, 0x4844) 3.919555127s ago: executing program 5 (id=3172): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) 3.860930991s ago: executing program 5 (id=3173): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='transersion=9p2000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '9p\x00'}, {0x20, '#[]'}, {0x20, ':+'}], 0xa, "47896fb8d397a8f956"}, 0x24) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) fchdir(0xffffffffffffffff) open(&(0x7f0000000280)='./bus\x00', 0x42b42, 0x1c0) 3.745239669s ago: executing program 5 (id=3177): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x90dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x20c, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26e"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.262908481s ago: executing program 4 (id=3184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='transersion=9p2000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '9p\x00'}, {0x20, '#[]'}, {0x20, ':+'}], 0xa, "47896fb8d397a8f956"}, 0x24) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000280)='./bus\x00', 0x42b42, 0x1c0) 3.254409287s ago: executing program 4 (id=3185): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000540), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 3.203881286s ago: executing program 4 (id=3186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x4008, &(0x7f00000002c0)={0x0, 0x1bf5, 0x0, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000780)={0x5}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f0000000100)={0x1, @in6={{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}}, 0x0, 0x7, 0x9}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r8, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd74, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x7}]}, &(0x7f0000001200)=0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000008c0)='./file0\x00') r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r10, 0x24, &(0x7f0000000940)={0x1, 0x2, 0x8, 0x73e9}) bind$packet(r7, &(0x7f0000000280)={0x11, 0xf7, r6, 0x1, 0x4f, 0x6, @remote}, 0x14) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) r11 = fanotify_init(0x1a, 0x800) r12 = openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='.\x00', 0x0, 0xa8) fanotify_mark(r11, 0x441, 0x4800001a, r12, 0x0) fanotify_mark(r11, 0x1, 0x20, r12, 0x0) open$dir(&(0x7f0000000a00)='./mnt\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{0x0, 0xf, &(0x7f00000013c0)=[{&(0x7f0000001400)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 2.953560951s ago: executing program 4 (id=3187): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='transersion=9p2000.u,cache=mmap']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '#! '}, {}, {0x20, '9p\x00'}, {0x20, '#[]'}, {0x20, ':+'}], 0xa, "47896fb8d397a8f956"}, 0x24) write$binfmt_script(r0, &(0x7f0000000200), 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) fchdir(r1) mount_setattr(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x8000, &(0x7f0000000300)={0x7}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000b00)=@v2={0x2, @aes256, 0x9, '\x00', @auto="38b6cca302cf4b85a0983ec4a7d882c4"}) 2.827551786s ago: executing program 5 (id=3189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000003a80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003b80)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004414}, 0x4844) 2.826288489s ago: executing program 4 (id=3190): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200020008000300ac1414aa080006000600"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000440)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r5, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000500)={0x0, 0x300, &(0x7f0000000540)={&(0x7f0000000580)={0x20, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 2.677874291s ago: executing program 45 (id=3189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000003a80), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003b80)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004414}, 0x4844) 2.497554191s ago: executing program 0 (id=3195): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e074f0220"], 0xa) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x82, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000000480)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)="cd89b0b00d", 0x5}], 0x1) write$binfmt_script(r2, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "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"}, 0x411) 2.399952637s ago: executing program 4 (id=3196): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x90dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x20c, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26e"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.322218877s ago: executing program 46 (id=3196): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x90dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x20c, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26e"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.984692805s ago: executing program 0 (id=3198): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000807000000000000001bc500540300000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="b8", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.899076273s ago: executing program 0 (id=3199): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000880)={0x144, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x91, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.664569325s ago: executing program 0 (id=3200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000380)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.634651795s ago: executing program 0 (id=3201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e205000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10040047}, 0x4000084) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1000', 0x4) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffff7ec]}, 0x0, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x4, r2, 0x0}]) syz_open_dev$vim2m(&(0x7f0000000000), 0xffff, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000480)={0x1, 0x6}) sendmsg$sock(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000013000500000000000000000008010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}]}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(&(0x7f0000000940)=@filename='./dev/sda1\x00', &(0x7f0000000980)='./mnt\x00', &(0x7f00000009c0)='ext4\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000a40)={0x9, 0x0, 0x1, 0x1, 0x9}) r8 = syz_open_dev$cec(&(0x7f0000000a80), 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd773a00fe8000000000000000000000000000aaff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006245a598080a8030037004023493b87aafafffffffffffeff23739400000045ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150000000006b41e5af1800010000000004002600040000000201fe906d17"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000b80)={'\x00', 0x2, 0x5, 0x1, 0x401, 0x2, "0000000000e0ff00", "00ad4a00", "00000400", "97ad3700", ["fd1782970a40000000000400", "f3ff0800080000000000ff07", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000c00)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7}) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000c40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'}) 1.525653481s ago: executing program 0 (id=3202): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz0\x00', {0x6, 0x0, 0x5, 0x7}, 0x23, [0x2, 0x6, 0x95d, 0x9, 0x2, 0x0, 0x9, 0x10, 0x100, 0x6, 0x8, 0x8a8e, 0x200, 0x10000000, 0x3, 0xfffffffe, 0x1, 0x98, 0x59, 0x2, 0x0, 0x8, 0x5, 0xd937, 0x1, 0x8001, 0x4, 0x8000, 0xd9, 0x8, 0x6, 0x9, 0x6, 0x7, 0x6, 0x2, 0xd, 0x4, 0x80000001, 0x14f2, 0x7, 0x80000000, 0x6, 0x7fffffff, 0x7, 0x2a040, 0x414d, 0x4, 0x2, 0x10001, 0x0, 0x7, 0x2f93c063, 0xffffffff, 0x80000000, 0x6, 0x101, 0x3, 0x7f, 0x8, 0xa35, 0x8, 0x20000, 0x5], [0x10, 0xf999, 0x0, 0xc20e, 0x6, 0xe, 0x9, 0x9, 0x2, 0x6, 0x10001, 0x0, 0xd72, 0x6, 0x3, 0xf821, 0x9, 0x8129, 0x7fff, 0x4, 0x3, 0x2, 0x3, 0x3, 0xb8e, 0xff, 0x3, 0x9, 0x101, 0x4ec, 0x1, 0xd540, 0x0, 0x94, 0x7, 0xf2, 0x5, 0x56, 0x0, 0x0, 0x0, 0xfffffff7, 0x8, 0x7, 0x1, 0x3c33, 0x9, 0x3, 0x1ff, 0xf, 0x5, 0x0, 0x4, 0x1, 0x4, 0xfffffff9, 0x6, 0x6, 0x6, 0x1, 0x1, 0x4d6, 0x5, 0x3], [0x5, 0x9, 0x8001, 0xd08d, 0xfffffffd, 0x1, 0x9, 0x4, 0x0, 0x100, 0x3f, 0x513, 0x1ff, 0x1, 0x6, 0x4, 0x4, 0x5, 0x8, 0x8, 0x1, 0x5620, 0xff, 0x9, 0xfffffff7, 0x10000, 0x40, 0x0, 0x5, 0x0, 0x1, 0x7fffffff, 0x1, 0x8, 0xd3, 0xcbc, 0x1, 0x2, 0xf, 0x7, 0x8, 0x2, 0x1, 0x2, 0x6, 0x7, 0x0, 0x9, 0x6, 0x101, 0x10001, 0x7, 0x8000, 0xf1c, 0x1, 0xb0, 0xee6, 0x9, 0x4, 0x0, 0x7, 0x5, 0x7, 0x2], [0x9, 0x7, 0x401, 0x4, 0x2, 0x5, 0x4, 0xf, 0x92, 0x14000000, 0x3, 0x56, 0x3, 0x6d, 0x2, 0xffffffff, 0x1, 0x100, 0x6, 0x4, 0x9, 0xd, 0x4, 0x1, 0x7, 0x800, 0x1, 0x11, 0x3, 0x1c, 0x4, 0x101, 0x2, 0x78f, 0x9, 0xffffffff, 0x80c3, 0x2, 0x9, 0x871, 0x3, 0x65d6, 0xfffffff8, 0x2, 0x0, 0x0, 0x100, 0xc, 0x1, 0x6, 0x2, 0x6, 0x2, 0x5db, 0x6, 0x73, 0x5c, 0x9, 0x7, 0xff, 0x3d, 0x0, 0x400, 0x81]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$vim2m(&(0x7f0000000600), 0x10001, 0x2) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='ms_mode\x00', &(0x7f0000000100)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x28, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000006c0)={0x1, @pix={0xfff, 0xcf6, 0x56555941, 0x2, 0xfffffffe, 0x0, 0xb, 0x1, 0x0, 0x2, 0x0, 0x3}}) 381.593993ms ago: executing program 9 (id=3208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e205000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10040047}, 0x4000084) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='1000', 0x4) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffff7ec]}, 0x0, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f0000000380)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x4, r2, 0x0}]) syz_open_dev$vim2m(&(0x7f0000000000), 0xffff, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000480)={0x1, 0x6}) sendmsg$sock(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000013000500000000000000000008010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}]}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./dev\x00', &(0x7f00000008c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./mnt\x00', 0x1ff) mount(&(0x7f0000000940)=@filename='./dev/sda1\x00', &(0x7f0000000980)='./mnt\x00', &(0x7f00000009c0)='ext4\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000a40)={0x9, 0x0, 0x1, 0x1, 0x9}) r8 = syz_open_dev$cec(&(0x7f0000000a80), 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd773a00fe8000000000000000000000000000aaff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006245a598080a8030037004023493b87aafafffffffffffeff23739400000045ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac150000000006b41e5af1800010000000004002600040000000201fe906d17"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000b80)={'\x00', 0x2, 0x5, 0x1, 0x401, 0x2, "0000000000e0ff00", "00ad4a00", "00000400", "97ad3700", ["fd1782970a40000000000400", "f3ff0800080000000000ff07", "0000ef000200", "3bf100000000000000c48400"]}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000c00)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac0000deff8f9a25bb00", 0x4, 0x4, 0x8, 0x0, 0x4, 0x7}) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000c40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000c80)={'vxcan1\x00'}) 238.87762ms ago: executing program 9 (id=3209): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0xa2000, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/118, 0x76}], 0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)=0x1) setns(0xc9, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r3, 0x89ee, &(0x7f0000000180)=0x1) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000480)=0x54) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000004c0)={'filter\x00', 0x33e, '\x00'/830}, &(0x7f0000000840)=0x362) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000880)={'raw\x00'}, &(0x7f0000000900)=0x54) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000940)={'raw\x00', 0x0, [0x3, 0x0, 0xf942, 0x7fffffff, 0x40]}, &(0x7f00000009c0)=0x54) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) close(0x3) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x78, r5, 0x2, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe000001000000000500010004000000080004"], 0x2c}}, 0x0) 165.564005ms ago: executing program 9 (id=3210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xb66, &(0x7f0000000200)={0x0, 0xc8a1, 0xc000, 0xa, 0xc1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0xb, 0x1, 0xdddd1000, 0x100000, &(0x7f0000c68000/0x100000)=nil}) 31.084341ms ago: executing program 9 (id=3211): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x1062) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) 30.989263ms ago: executing program 9 (id=3212): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./mnt\x00', 0x1ff) mount(&(0x7f00000009c0)=@filename='./dev/sda1\x00', &(0x7f0000000a00)='./mnt\x00', &(0x7f0000000a40)='ext4\x00', 0x8410, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./mnt\x00', 0x300, 0x21) 0s ago: executing program 9 (id=3213): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000001c0)="3300000008000601010000000100", 0xe) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04080520"], 0x7) write(r0, &(0x7f0000000100)='nqn=test,transport=tcp,traddr=::', 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000406030000000000e0ff0c0001003fa71c6892d623f2f2fe5730b93814d7e23d61cd2f484eba03de6e166c36fa0caa477a202e46a7a00308af1a36658fa09632e68af0d46796c76d64e4df5a49b98a75fac30960ea5ba4d4cc6d9ebb305ccdac16176a9f08e424e8f5034f348d7a08387f66f9b267e8ce405fba22af0e0a6a6e1b90d71b89926a"], 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0xc40) kernel console output (not intermixed with test programs): vsim netdevsim2 netdevsim2: renamed from eth2 [ 284.268658][ T42] audit: type=1400 audit(1793012607.885:10386): avc: denied { write } for pid=14198 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.272302][T14046] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.273061][T14046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.298261][T14046] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.336216][T14046] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.336290][T14046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.336467][T14046] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.336536][T14046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.369671][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.370337][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.375872][T14210] ip_tables: iptables: counters copy to user failed while replacing table [ 284.399596][ T42] audit: type=1400 audit(1793012608.015:10387): avc: denied { write } for pid=14211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.456351][T14046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.471876][T14046] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.471988][ T42] audit: type=1400 audit(1793012608.085:10388): avc: denied { write } for pid=14215 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.490670][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.490760][ T6617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.502441][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.502531][ T6617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.612950][ T42] audit: type=1400 audit(1793012608.225:10389): avc: denied { write } for pid=14221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.644230][ T42] audit: type=1400 audit(1793012608.265:10390): avc: denied { listen } for pid=14230 comm="syz.8.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 284.646987][ T42] audit: type=1400 audit(1793012608.265:10391): avc: denied { accept } for pid=14230 comm="syz.8.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 284.804773][T14250] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 284.851742][T14046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.875991][T14046] veth0_vlan: entered promiscuous mode [ 284.879715][T14046] veth1_vlan: entered promiscuous mode [ 284.895709][T14046] veth0_macvtap: entered promiscuous mode [ 284.899413][T14046] veth1_macvtap: entered promiscuous mode [ 284.907839][T14046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.909906][T14046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.928387][T14254] FAULT_INJECTION: forcing a failure. [ 284.928387][T14254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.928437][T14254] CPU: 0 UID: 0 PID: 14254 Comm: syz.6.2748 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.928457][T14254] Tainted: [L]=SOFTLOCKUP [ 284.928462][T14254] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.928470][T14254] Call Trace: [ 284.928483][T14254] [ 284.928489][T14254] dump_stack_lvl+0x100/0x190 [ 284.928517][T14254] should_fail_ex.cold+0x5/0xa [ 284.928550][T14254] _copy_from_iter+0x43a/0x1690 [ 284.928572][T14254] ? __pfx__copy_from_iter+0x10/0x10 [ 284.928589][T14254] ? __pfx__copy_from_iter+0x10/0x10 [ 284.928610][T14254] copy_page_from_iter+0x238/0x300 [ 284.928626][T14254] skb_copy_datagram_from_iter+0x38f/0x710 [ 284.928652][T14254] unix_stream_sendmsg+0x570/0x1510 [ 284.928669][T14254] ? __pfx_sock_has_perm+0x10/0x10 [ 284.928691][T14254] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 284.928718][T14254] ? selinux_socket_sendmsg+0x198/0x2f0 [ 284.928743][T14254] ____sys_sendmsg+0xa99/0xc30 [ 284.928757][T14254] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 284.928774][T14254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.928794][T14254] ___sys_sendmsg+0x190/0x1e0 [ 284.928809][T14254] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.928823][T14254] ? futex_wait+0x11e/0x370 [ 284.928842][T14254] ? find_held_lock+0x2b/0x80 [ 284.928862][T14254] __sys_sendmsg+0x160/0x210 [ 284.928880][T14254] ? __pfx___sys_sendmsg+0x10/0x10 [ 284.928905][T14254] do_syscall_64+0x123/0x790 [ 284.928930][T14254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.928943][T14254] RIP: 0033:0x7fd30d19f559 [ 284.928953][T14254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.928965][T14254] RSP: 002b:00007fd30e136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.928978][T14254] RAX: ffffffffffffffda RBX: 00007fd30d425fa0 RCX: 00007fd30d19f559 [ 284.928987][T14254] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 284.928994][T14254] RBP: 00007fd30d236b20 R08: 0000000000000000 R09: 0000000000000000 [ 284.929001][T14254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.929008][T14254] R13: 00007fd30d426038 R14: 00007fd30d425fa0 R15: 00007ffefa5ee258 [ 284.929022][T14254] [ 284.936304][T14257] bridge_slave_0: left allmulticast mode [ 284.936329][T14257] bridge_slave_0: left promiscuous mode [ 284.939435][T14257] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.947942][T14257] bridge_slave_1: left allmulticast mode [ 284.947966][T14257] bridge_slave_1: left promiscuous mode [ 284.948161][T14257] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.965201][T14257] bond0: (slave bond_slave_0): Releasing backup interface [ 284.981391][T14257] bond0: (slave bond_slave_1): Releasing backup interface [ 284.989938][T14257] team0: Port device team_slave_0 removed [ 284.998301][T14257] team0: Port device team_slave_1 removed [ 284.999306][T14257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.999319][T14257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.002103][T14257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.002115][T14257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.006161][T14257] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 285.029945][T14263] team0: Mode changed to "activebackup" [ 285.030228][T14254] ±ÿ: renamed from lo (while UP) [ 285.044034][T12104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.044061][T12104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.044080][T12104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.044104][T12104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.170444][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.170463][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.196790][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.196812][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.251660][T14270] ip_tables: iptables: counters copy to user failed while replacing table [ 285.467565][T14289] FAULT_INJECTION: forcing a failure. [ 285.467565][T14289] name failslab, interval 1, probability 0, space 0, times 0 [ 285.467597][T14289] CPU: 1 UID: 0 PID: 14289 Comm: syz.7.2753 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.467622][T14289] Tainted: [L]=SOFTLOCKUP [ 285.467629][T14289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.467640][T14289] Call Trace: [ 285.467647][T14289] [ 285.467654][T14289] dump_stack_lvl+0x100/0x190 [ 285.467686][T14289] should_fail_ex.cold+0x5/0xa [ 285.467714][T14289] should_failslab+0xc2/0x120 [ 285.467740][T14289] __kmalloc_cache_noprof+0x91/0x6d0 [ 285.467761][T14289] ? genl_start+0x1e8/0x970 [ 285.467786][T14289] genl_start+0x1e8/0x970 [ 285.467810][T14289] __netlink_dump_start+0x60e/0x990 [ 285.467860][T14289] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 285.467884][T14289] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 285.467913][T14289] ? __pfx_genl_get_cmd+0x10/0x10 [ 285.467931][T14289] ? __pfx_genl_start+0x10/0x10 [ 285.467949][T14289] ? __pfx_genl_dumpit+0x10/0x10 [ 285.467968][T14289] ? __pfx_genl_done+0x10/0x10 [ 285.467990][T14289] ? netlink_sendmsg+0x755/0x10c0 [ 285.468007][T14289] ? ____sys_sendmsg+0xa99/0xc30 [ 285.468028][T14289] ? __radix_tree_lookup+0x217/0x2b0 [ 285.468059][T14289] genl_rcv_msg+0x471/0x800 [ 285.468084][T14289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.468104][T14289] ? __lock_acquire+0x5c0/0x1f40 [ 285.468125][T14289] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 285.468156][T14289] ? __lock_acquire+0x5c0/0x1f40 [ 285.468184][T14289] netlink_rcv_skb+0x159/0x420 [ 285.468202][T14289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.468225][T14289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.468255][T14289] ? netlink_deliver_tap+0x1ae/0xb50 [ 285.468287][T14289] genl_rcv+0x28/0x40 [ 285.468305][T14289] netlink_unicast+0x668/0x950 [ 285.468327][T14289] ? __pfx_netlink_unicast+0x10/0x10 [ 285.468369][T14289] netlink_sendmsg+0x9ac/0x10c0 [ 285.468394][T14289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.468419][T14289] ? selinux_socket_sendmsg+0x198/0x2f0 [ 285.468450][T14289] ? ____sys_sendmsg+0xa99/0xc30 [ 285.468470][T14289] ____sys_sendmsg+0xa99/0xc30 [ 285.468489][T14289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.468510][T14289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.468538][T14289] ? lock_acquire+0x1d1/0x380 [ 285.468561][T14289] ? get_pid_task+0x2a/0x250 [ 285.468589][T14289] ___sys_sendmsg+0x190/0x1e0 [ 285.468614][T14289] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.468637][T14289] ? get_pid_task+0x106/0x250 [ 285.468673][T14289] ? find_held_lock+0x2b/0x80 [ 285.468707][T14289] __sys_sendmsg+0x160/0x210 [ 285.468732][T14289] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.468766][T14289] do_syscall_64+0x123/0x790 [ 285.468789][T14289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.468804][T14289] RIP: 0033:0x7f736619f559 [ 285.468817][T14289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.468834][T14289] RSP: 002b:00007f73670ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.468851][T14289] RAX: ffffffffffffffda RBX: 00007f7366425fa0 RCX: 00007f736619f559 [ 285.468860][T14289] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 285.468870][T14289] RBP: 00007f73670ee090 R08: 0000000000000000 R09: 0000000000000000 [ 285.468879][T14289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.468887][T14289] R13: 00007f7366426038 R14: 00007f7366425fa0 R15: 00007ffeb54601c8 [ 285.468910][T14289] [ 285.484021][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.637978][T14301] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 285.687265][T14305] ip_tables: iptables: counters copy to user failed while replacing table [ 285.986106][T14328] FAULT_INJECTION: forcing a failure. [ 285.986106][T14328] name failslab, interval 1, probability 0, space 0, times 0 [ 285.986154][T14328] CPU: 3 UID: 0 PID: 14328 Comm: syz.7.2762 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.986170][T14328] Tainted: [L]=SOFTLOCKUP [ 285.986175][T14328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.986181][T14328] Call Trace: [ 285.986197][T14328] [ 285.986202][T14328] dump_stack_lvl+0x100/0x190 [ 285.986232][T14328] should_fail_ex.cold+0x5/0xa [ 285.986250][T14328] should_failslab+0xc2/0x120 [ 285.986269][T14328] kmem_cache_alloc_noprof+0x92/0x6a0 [ 285.986284][T14328] ? dst_alloc+0x99/0x1a0 [ 285.986307][T14328] dst_alloc+0x99/0x1a0 [ 285.986325][T14328] rt_dst_alloc+0x35/0x3a0 [ 285.986343][T14328] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 285.986360][T14328] ip_route_output_key_hash+0x118/0x2b0 [ 285.986373][T14328] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 285.986389][T14328] ? raw_sendmsg+0x64e/0x37a0 [ 285.986401][T14328] ? find_held_lock+0x2b/0x80 [ 285.986414][T14328] ip_route_output_flow+0x27/0x150 [ 285.986427][T14328] raw_sendmsg+0xb2f/0x37a0 [ 285.986444][T14328] ? __pfx_raw_sendmsg+0x10/0x10 [ 285.986456][T14328] ? avc_has_perm+0x135/0x1e0 [ 285.986470][T14328] ? __pfx_avc_has_perm+0x10/0x10 [ 285.986485][T14328] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 285.986513][T14328] ? __pfx_raw_sendmsg+0x10/0x10 [ 285.986525][T14328] inet_sendmsg+0x11c/0x140 [ 285.986537][T14328] __sys_sendto+0x470/0x4e0 [ 285.986552][T14328] ? __pfx_inet_sendmsg+0x10/0x10 [ 285.986564][T14328] ? __pfx___sys_sendto+0x10/0x10 [ 285.986584][T14328] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 285.986610][T14328] ? ksys_write+0x1ac/0x250 [ 285.986624][T14328] ? __pfx_ksys_write+0x10/0x10 [ 285.986640][T14328] __x64_sys_sendto+0xe0/0x1c0 [ 285.986656][T14328] ? do_syscall_64+0xae/0x790 [ 285.986672][T14328] ? lockdep_hardirqs_on+0x7d/0x110 [ 285.986687][T14328] do_syscall_64+0x123/0x790 [ 285.986704][T14328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.986716][T14328] RIP: 0033:0x7f736619f559 [ 285.986725][T14328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.986736][T14328] RSP: 002b:00007f73670ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 285.986751][T14328] RAX: ffffffffffffffda RBX: 00007f7366425fa0 RCX: 00007f736619f559 [ 285.986758][T14328] RDX: 0000000000000014 RSI: 0000200000000800 RDI: 0000000000000003 [ 285.986765][T14328] RBP: 00007f73670ee090 R08: 0000200000000840 R09: 0000000000000010 [ 285.986772][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.986778][T14328] R13: 00007f7366426038 R14: 00007f7366425fa0 R15: 00007ffeb54601c8 [ 285.986793][T14328] [ 286.260945][T14346] ip_tables: iptables: counters copy to user failed while replacing table [ 286.344265][T14348] ip_tables: iptables: counters copy to user failed while replacing table [ 286.677787][T14372] ip_tables: iptables: counters copy to user failed while replacing table [ 286.817463][T14376] bridge_slave_0: left allmulticast mode [ 286.817489][T14376] bridge_slave_0: left promiscuous mode [ 286.817669][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.821132][T14376] bridge_slave_1: left allmulticast mode [ 286.821155][T14376] bridge_slave_1: left promiscuous mode [ 286.821355][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.836067][T14376] bond0: (slave bond_slave_0): Releasing backup interface [ 286.843634][T14382] FAULT_INJECTION: forcing a failure. [ 286.843634][T14382] name failslab, interval 1, probability 0, space 0, times 0 [ 286.843666][T14382] CPU: 1 UID: 0 PID: 14382 Comm: syz.7.2783 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.843710][T14382] Tainted: [L]=SOFTLOCKUP [ 286.843717][T14382] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 286.843729][T14382] Call Trace: [ 286.843736][T14382] [ 286.843744][T14382] dump_stack_lvl+0x100/0x190 [ 286.843775][T14382] should_fail_ex.cold+0x5/0xa [ 286.843803][T14382] should_failslab+0xc2/0x120 [ 286.843828][T14382] kmem_cache_alloc_noprof+0x92/0x6a0 [ 286.843852][T14382] ? create_new_namespaces+0x30/0xac0 [ 286.843880][T14382] create_new_namespaces+0x30/0xac0 [ 286.843903][T14382] ? bpf_lsm_capable+0x9/0x10 [ 286.843928][T14382] ? security_capable+0x80/0x260 [ 286.843962][T14382] unshare_nsproxy_namespaces+0xf6/0x210 [ 286.843988][T14382] ksys_unshare+0x44f/0x980 [ 286.844009][T14382] ? __pfx_ksys_unshare+0x10/0x10 [ 286.844031][T14382] ? fput+0x7c/0x100 [ 286.844058][T14382] ? ksys_write+0x1ac/0x250 [ 286.844089][T14382] __x64_sys_unshare+0x31/0x40 [ 286.844111][T14382] do_syscall_64+0x123/0x790 [ 286.844140][T14382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.844160][T14382] RIP: 0033:0x7f736619f559 [ 286.844175][T14382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.844192][T14382] RSP: 002b:00007f73670ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 286.844211][T14382] RAX: ffffffffffffffda RBX: 00007f7366425fa0 RCX: 00007f736619f559 [ 286.844223][T14382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 286.844234][T14382] RBP: 00007f73670ee090 R08: 0000000000000000 R09: 0000000000000000 [ 286.844246][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.844257][T14382] R13: 00007f7366426038 R14: 00007f7366425fa0 R15: 00007ffeb54601c8 [ 286.844283][T14382] [ 286.849894][T14376] bond0: (slave bond_slave_1): Releasing backup interface [ 286.868587][T14376] team0: Port device team_slave_0 removed [ 286.876168][T14376] team0: Port device team_slave_1 removed [ 286.876882][T14376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.876900][T14376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.880056][T14376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.880075][T14376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.894825][T14384] team0: Mode changed to "activebackup" [ 286.900297][T14379] rxe_eth0 speed is unknown, defaulting to 1000 [ 286.973919][T14390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 287.018175][T14383] rxe_eth0 speed is unknown, defaulting to 1000 [ 287.129609][T14394] rxe_eth0 speed is unknown, defaulting to 1000 [ 287.394502][ T5784] Bluetooth: hci3: command tx timeout [ 287.852892][T14442] netlink: 'syz.8.2802': attribute type 3 has an invalid length. [ 287.899539][T14444] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 288.197981][T14458] ima: Unable to open file: / (-22) [ 288.206520][T14458] ima: Unable to open file: / (-22) [ 288.216144][T14457] ima: policy update failed [ 288.398284][T14469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.398620][T14469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.449828][T14472] FAULT_INJECTION: forcing a failure. [ 288.449828][T14472] name failslab, interval 1, probability 0, space 0, times 0 [ 288.449858][T14472] CPU: 1 UID: 0 PID: 14472 Comm: syz.6.2812 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.449874][T14472] Tainted: [L]=SOFTLOCKUP [ 288.449878][T14472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 288.449885][T14472] Call Trace: [ 288.449899][T14472] [ 288.449905][T14472] dump_stack_lvl+0x100/0x190 [ 288.449932][T14472] should_fail_ex.cold+0x5/0xa [ 288.449963][T14472] should_failslab+0xc2/0x120 [ 288.449983][T14472] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 288.449997][T14472] ? __alloc_skb+0x140/0x710 [ 288.450030][T14472] __alloc_skb+0x140/0x710 [ 288.450052][T14472] ? __alloc_skb+0x5b7/0x710 [ 288.450068][T14472] ? __pfx___alloc_skb+0x10/0x10 [ 288.450089][T14472] netlink_dump+0x194/0xd00 [ 288.450108][T14472] ? __pfx_netlink_dump+0x10/0x10 [ 288.450130][T14472] ? __asan_memset+0x23/0x50 [ 288.450142][T14472] ? genl_start+0x67a/0x970 [ 288.450156][T14472] __netlink_dump_start+0x6d6/0x990 [ 288.450177][T14472] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 288.450191][T14472] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 288.450208][T14472] ? __pfx_genl_get_cmd+0x10/0x10 [ 288.450219][T14472] ? __pfx_genl_start+0x10/0x10 [ 288.450230][T14472] ? __pfx_genl_dumpit+0x10/0x10 [ 288.450242][T14472] ? __pfx_genl_done+0x10/0x10 [ 288.450255][T14472] ? netlink_sendmsg+0x755/0x10c0 [ 288.450266][T14472] ? ____sys_sendmsg+0xa99/0xc30 [ 288.450281][T14472] ? __radix_tree_lookup+0x217/0x2b0 [ 288.450312][T14472] genl_rcv_msg+0x471/0x800 [ 288.450333][T14472] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.450349][T14472] ? __lock_acquire+0x5c0/0x1f40 [ 288.450363][T14472] ? __pfx_netdev_nl_queue_get_dumpit+0x10/0x10 [ 288.450379][T14472] ? __lock_acquire+0x5c0/0x1f40 [ 288.450396][T14472] netlink_rcv_skb+0x159/0x420 [ 288.450407][T14472] ? __pfx_genl_rcv_msg+0x10/0x10 [ 288.450421][T14472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.450438][T14472] ? netlink_deliver_tap+0x1ae/0xb50 [ 288.450457][T14472] genl_rcv+0x28/0x40 [ 288.450469][T14472] netlink_unicast+0x668/0x950 [ 288.450482][T14472] ? __pfx_netlink_unicast+0x10/0x10 [ 288.450497][T14472] netlink_sendmsg+0x9ac/0x10c0 [ 288.450511][T14472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.450526][T14472] ? selinux_socket_sendmsg+0x198/0x2f0 [ 288.450544][T14472] ? ____sys_sendmsg+0xa99/0xc30 [ 288.450556][T14472] ____sys_sendmsg+0xa99/0xc30 [ 288.450568][T14472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.450581][T14472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.450598][T14472] ? lock_acquire+0x1d1/0x380 [ 288.450611][T14472] ? get_pid_task+0x2a/0x250 [ 288.450629][T14472] ___sys_sendmsg+0x190/0x1e0 [ 288.450643][T14472] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.450657][T14472] ? get_pid_task+0x106/0x250 [ 288.450679][T14472] ? find_held_lock+0x2b/0x80 [ 288.450698][T14472] __sys_sendmsg+0x160/0x210 [ 288.450716][T14472] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.450742][T14472] do_syscall_64+0x123/0x790 [ 288.450759][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.450770][T14472] RIP: 0033:0x7fd30d19f559 [ 288.450781][T14472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.450792][T14472] RSP: 002b:00007fd30e136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.450807][T14472] RAX: ffffffffffffffda RBX: 00007fd30d425fa0 RCX: 00007fd30d19f559 [ 288.450815][T14472] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 288.450821][T14472] RBP: 00007fd30e136090 R08: 0000000000000000 R09: 0000000000000000 [ 288.450828][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.450835][T14472] R13: 00007fd30d426038 R14: 00007fd30d425fa0 R15: 00007ffefa5ee258 [ 288.450857][T14472] [ 288.499732][T14476] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2814'. [ 288.520563][T14478] net_ratelimit: 4 callbacks suppressed [ 288.520592][T14478] ip_tables: iptables: counters copy to user failed while replacing table [ 288.642742][T14483] ip_tables: iptables: counters copy to user failed while replacing table [ 289.039058][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2826'. [ 289.039081][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2826'. [ 289.147927][T14520] netlink: 1092 bytes leftover after parsing attributes in process `syz.6.2831'. [ 289.155894][T14518] ip_tables: iptables: counters copy to user failed while replacing table [ 289.200472][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 289.200490][ T42] audit: type=1800 audit(1793012612.815:10418): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35043 res=0 errno=-22 [ 289.203123][ T42] audit: type=1800 audit(1793012612.815:10419): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35066 res=0 errno=-22 [ 289.300182][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2836'. [ 289.300206][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2836'. [ 289.360612][T14536] input: syz1 as /devices/virtual/input/input17 [ 289.361347][T14536] input: failed to attach handler leds to device input17, error: -6 [ 289.362264][ T42] audit: type=1800 audit(1793012612.975:10420): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299995 res=0 errno=-22 [ 289.362735][ T42] audit: type=1800 audit(1793012612.975:10421): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=300010 res=0 errno=-22 [ 289.363136][ T42] audit: type=1800 audit(1793012612.975:10422): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=300013 res=0 errno=-22 [ 289.363638][ T42] audit: type=1800 audit(1793012612.975:10423): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=300012 res=0 errno=-22 [ 289.386669][ T42] audit: type=1800 audit(1793012612.995:10424): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=300011 res=0 errno=-22 [ 289.388828][ T42] audit: type=1800 audit(1793012612.995:10425): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=300002 res=0 errno=-22 [ 289.388870][ T42] audit: type=1800 audit(1793012612.995:10426): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=300005 res=0 errno=-22 [ 289.388906][ T42] audit: type=1800 audit(1793012612.995:10427): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=299998 res=0 errno=-22 [ 289.443783][ T5937] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 289.474499][ T5784] Bluetooth: hci3: command tx timeout [ 289.593786][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 289.594586][ T5937] usb 7-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 289.595168][ T5937] usb 7-1: config 0 has no interfaces? [ 289.597025][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.597039][ T5937] usb 7-1: Product: syz [ 289.597048][ T5937] usb 7-1: Manufacturer: syz [ 289.597056][ T5937] usb 7-1: SerialNumber: syz [ 289.599529][ T5937] usb 7-1: config 0 descriptor?? [ 289.799009][T14552] netlink: 'syz.8.2843': attribute type 2 has an invalid length. [ 289.984229][T12105] usb 7-1: USB disconnect, device number 7 [ 289.994748][T14561] ip_tables: iptables: counters copy to user failed while replacing table [ 290.088771][T14564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.123321][T14564] team0: Unable to change to the same mode the team is in [ 290.323807][T14576] rxe_eth0 speed is unknown, defaulting to 1000 [ 290.662575][T14589] ip_tables: iptables: counters copy to user failed while replacing table [ 290.711191][T14595] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2857'. [ 290.780179][T14596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14596 comm=syz.8.2857 [ 290.781410][T14595] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14595 comm=syz.8.2857 [ 290.811598][T14595] /dev/sg0: Can't lookup blockdev [ 290.961790][T14607] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 291.065667][T14620] ip_tables: iptables: counters copy to user failed while replacing table [ 291.506517][T14636] bond1: (slave lo): Releasing backup interface [ 291.507615][T14636] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 291.528169][T14636] bridge_slave_0: left allmulticast mode [ 291.528194][T14636] bridge_slave_0: left promiscuous mode [ 291.529783][T14636] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.537783][T14636] bridge_slave_1: left allmulticast mode [ 291.537805][T14636] bridge_slave_1: left promiscuous mode [ 291.537999][T14636] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.563602][T14636] bond0: (slave bond_slave_0): Releasing backup interface [ 291.574961][T14636] bond0: (slave bond_slave_1): Releasing backup interface [ 291.583614][T14636] team0: Port device team_slave_0 removed [ 291.589006][T14636] team0: Port device team_slave_1 removed [ 291.589750][T14636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.589768][T14636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.594511][T14636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.594529][T14636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.597044][T14636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 291.601911][T14638] team0: Mode changed to "activebackup" [ 291.609555][T14643] FAULT_INJECTION: forcing a failure. [ 291.609555][T14643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.609594][T14643] CPU: 2 UID: 0 PID: 14643 Comm: syz.6.2873 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.609617][T14643] Tainted: [L]=SOFTLOCKUP [ 291.609624][T14643] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.609634][T14643] Call Trace: [ 291.609656][T14643] [ 291.609664][T14643] dump_stack_lvl+0x100/0x190 [ 291.609720][T14643] should_fail_ex.cold+0x5/0xa [ 291.609765][T14643] _copy_from_user+0x2e/0xd0 [ 291.609792][T14643] kstrtouint_from_user+0xd6/0x1d0 [ 291.609817][T14643] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 291.609847][T14643] ? lock_acquire+0x1d1/0x380 [ 291.609874][T14643] proc_fail_nth_write+0x83/0x220 [ 291.609900][T14643] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 291.609933][T14643] vfs_write+0x2aa/0x1050 [ 291.609963][T14643] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 291.609988][T14643] ? lock_acquire+0x1d1/0x380 [ 291.610008][T14643] ? __fget_files+0x34/0x3d0 [ 291.610032][T14643] ? __pfx_vfs_write+0x10/0x10 [ 291.610051][T14643] ? find_held_lock+0x2b/0x80 [ 291.610067][T14643] ? __fget_files+0x215/0x3d0 [ 291.610095][T14643] ? __fget_files+0x21f/0x3d0 [ 291.610126][T14643] ksys_write+0x12a/0x250 [ 291.610147][T14643] ? __pfx_ksys_write+0x10/0x10 [ 291.610176][T14643] do_syscall_64+0x123/0x790 [ 291.610207][T14643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.610225][T14643] RIP: 0033:0x7fd30d15fd8e [ 291.610240][T14643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.610257][T14643] RSP: 002b:00007fd30e135fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.610280][T14643] RAX: ffffffffffffffda RBX: 00007fd30e1366c0 RCX: 00007fd30d15fd8e [ 291.610290][T14643] RDX: 0000000000000001 RSI: 00007fd30e1360a0 RDI: 0000000000000004 [ 291.610301][T14643] RBP: 00007fd30e136090 R08: 0000000000000000 R09: 0000000000000000 [ 291.610311][T14643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.610322][T14643] R13: 00007fd30d426038 R14: 00007fd30d425fa0 R15: 00007ffefa5ee258 [ 291.610348][T14643] [ 291.740357][T14647] ip_tables: iptables: counters copy to user failed while replacing table [ 291.806063][T14654] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 291.957982][T14661] FAULT_INJECTION: forcing a failure. [ 291.957982][T14661] name failslab, interval 1, probability 0, space 0, times 0 [ 291.958016][T14661] CPU: 0 UID: 0 PID: 14661 Comm: syz.6.2882 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.958040][T14661] Tainted: [L]=SOFTLOCKUP [ 291.958047][T14661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.958057][T14661] Call Trace: [ 291.958063][T14661] [ 291.958070][T14661] dump_stack_lvl+0x100/0x190 [ 291.958102][T14661] should_fail_ex.cold+0x5/0xa [ 291.958129][T14661] should_failslab+0xc2/0x120 [ 291.958154][T14661] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 291.958177][T14661] ? __alloc_skb+0x5b7/0x710 [ 291.958212][T14661] ? __alloc_skb+0x140/0x710 [ 291.958242][T14661] __alloc_skb+0x140/0x710 [ 291.958267][T14661] ? __alloc_skb+0x5b7/0x710 [ 291.958292][T14661] ? __pfx___alloc_skb+0x10/0x10 [ 291.958326][T14661] netlink_alloc_large_skb+0x69/0x150 [ 291.958347][T14661] netlink_sendmsg+0x755/0x10c0 [ 291.958368][T14661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.958391][T14661] ? selinux_socket_sendmsg+0x198/0x2f0 [ 291.958420][T14661] ? ____sys_sendmsg+0xa99/0xc30 [ 291.958440][T14661] ____sys_sendmsg+0xa99/0xc30 [ 291.958461][T14661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.958488][T14661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.958515][T14661] ? lock_acquire+0x1d1/0x380 [ 291.958537][T14661] ? get_pid_task+0x2a/0x250 [ 291.958566][T14661] ___sys_sendmsg+0x190/0x1e0 [ 291.958590][T14661] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.958614][T14661] ? get_pid_task+0x106/0x250 [ 291.958649][T14661] ? find_held_lock+0x2b/0x80 [ 291.958682][T14661] __sys_sendmsg+0x160/0x210 [ 291.958713][T14661] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.958754][T14661] do_syscall_64+0x123/0x790 [ 291.958784][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.958801][T14661] RIP: 0033:0x7fd30d19f559 [ 291.958815][T14661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.958829][T14661] RSP: 002b:00007fd30e136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.958848][T14661] RAX: ffffffffffffffda RBX: 00007fd30d425fa0 RCX: 00007fd30d19f559 [ 291.958860][T14661] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 291.958872][T14661] RBP: 00007fd30e136090 R08: 0000000000000000 R09: 0000000000000000 [ 291.958893][T14661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.958902][T14661] R13: 00007fd30d426038 R14: 00007fd30d425fa0 R15: 00007ffefa5ee258 [ 291.958926][T14661] [ 292.138541][T14670] rxe_eth0 speed is unknown, defaulting to 1000 [ 292.696440][T14698] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 292.902738][T14705] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 292.940610][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2901'. [ 292.940614][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2901'. [ 293.377223][T14720] ip_tables: iptables: counters copy to user failed while replacing table [ 293.563968][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.803954][ T5941] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 293.963861][ T5941] usb 11-1: Using ep0 maxpacket: 16 [ 293.964988][ T5941] usb 11-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 293.966197][ T5941] usb 11-1: config 0 has no interfaces? [ 293.971097][ T5941] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.971118][ T5941] usb 11-1: Product: syz [ 293.971131][ T5941] usb 11-1: Manufacturer: syz [ 293.971143][ T5941] usb 11-1: SerialNumber: syz [ 293.978126][ T5941] usb 11-1: config 0 descriptor?? [ 294.189087][T14747] CIFS: bad ip= option (ÛÚyñU£~+1) [ 294.350355][ T5942] usb 11-1: USB disconnect, device number 2 [ 294.755132][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 294.755170][ T42] audit: type=1400 audit(1793012618.375:10455): avc: denied { getopt } for pid=14767 comm="syz.8.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 294.762801][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2919'. [ 295.144225][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2929'. [ 295.181305][T14793] FAULT_INJECTION: forcing a failure. [ 295.181305][T14793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.181339][T14793] CPU: 2 UID: 0 PID: 14793 Comm: syz.8.2930 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.181365][T14793] Tainted: [L]=SOFTLOCKUP [ 295.181372][T14793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.181383][T14793] Call Trace: [ 295.181410][T14793] [ 295.181418][T14793] dump_stack_lvl+0x100/0x190 [ 295.181480][T14793] should_fail_ex.cold+0x5/0xa [ 295.181531][T14793] _copy_from_iter+0x1f4/0x1690 [ 295.181563][T14793] ? __asan_memset+0x23/0x50 [ 295.181591][T14793] ? __pfx__copy_from_iter+0x10/0x10 [ 295.181613][T14793] ? __pfx___alloc_skb+0x10/0x10 [ 295.181653][T14793] netlink_sendmsg+0x8f5/0x10c0 [ 295.181697][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.181723][T14793] ? selinux_socket_sendmsg+0x198/0x2f0 [ 295.181750][T14793] ? ____sys_sendmsg+0xa99/0xc30 [ 295.181770][T14793] ____sys_sendmsg+0xa99/0xc30 [ 295.181790][T14793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.181811][T14793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.181838][T14793] ? lock_acquire+0x1d1/0x380 [ 295.181858][T14793] ? get_pid_task+0x2a/0x250 [ 295.181889][T14793] ___sys_sendmsg+0x190/0x1e0 [ 295.181912][T14793] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.181934][T14793] ? get_pid_task+0x106/0x250 [ 295.181969][T14793] ? find_held_lock+0x2b/0x80 [ 295.182000][T14793] __sys_sendmsg+0x160/0x210 [ 295.182027][T14793] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.182068][T14793] do_syscall_64+0x123/0x790 [ 295.182101][T14793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.182120][T14793] RIP: 0033:0x7f84d4b9f559 [ 295.182136][T14793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.182153][T14793] RSP: 002b:00007f84d5b2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.182178][T14793] RAX: ffffffffffffffda RBX: 00007f84d4e25fa0 RCX: 00007f84d4b9f559 [ 295.182201][T14793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 295.182211][T14793] RBP: 00007f84d5b2a090 R08: 0000000000000000 R09: 0000000000000000 [ 295.182222][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.182233][T14793] R13: 00007f84d4e26038 R14: 00007f84d4e25fa0 R15: 00007ffc183dc7a8 [ 295.182268][T14793] [ 295.363894][T12105] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 295.513784][T12105] usb 7-1: Using ep0 maxpacket: 16 [ 295.514343][T12105] usb 7-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 295.514940][T12105] usb 7-1: config 0 has no interfaces? [ 295.516905][T12105] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.516924][T12105] usb 7-1: Product: syz [ 295.516933][T12105] usb 7-1: Manufacturer: syz [ 295.516941][T12105] usb 7-1: SerialNumber: syz [ 295.519133][T12105] usb 7-1: config 0 descriptor?? [ 295.521221][ T42] audit: type=1800 audit(1793012619.135:10456): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308316 res=0 errno=-22 [ 295.524460][ T42] audit: type=1800 audit(1793012619.135:10457): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=308348 res=0 errno=-22 [ 295.524504][ T42] audit: type=1800 audit(1793012619.145:10458): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=308323 res=0 errno=-22 [ 295.524536][ T42] audit: type=1800 audit(1793012619.145:10459): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=308324 res=0 errno=-22 [ 295.526484][ T42] audit: type=1800 audit(1793012619.145:10460): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=308345 res=0 errno=-22 [ 295.526522][ T42] audit: type=1800 audit(1793012619.145:10461): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=308346 res=0 errno=-22 [ 295.526556][ T42] audit: type=1800 audit(1793012619.145:10462): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=308325 res=0 errno=-22 [ 295.526724][ T42] audit: type=1800 audit(1793012619.145:10463): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=308347 res=0 errno=-22 [ 295.848783][T14810] fuse: Unknown parameter 'rootm' [ 295.892910][T12364] usb 7-1: USB disconnect, device number 8 [ 295.978099][T14821] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2941'. [ 296.290917][T14829] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 296.394989][T14832] fuse: Unknown parameter 'rootm' [ 297.054942][ T5941] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 297.090905][T14855] fuse: Unknown parameter 'rootm' [ 297.213782][ T5941] usb 7-1: Using ep0 maxpacket: 16 [ 297.216338][ T5941] usb 7-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 297.216878][ T5941] usb 7-1: config 0 has no interfaces? [ 297.218707][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.218727][ T5941] usb 7-1: Product: syz [ 297.218741][ T5941] usb 7-1: Manufacturer: syz [ 297.218755][ T5941] usb 7-1: SerialNumber: syz [ 297.221983][ T5941] usb 7-1: config 0 descriptor?? [ 297.223857][ T42] audit: type=1800 audit(1793012620.835:10464): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308394 res=0 errno=-22 [ 297.534650][T14879] fuse: Bad value for 'rootmode' [ 297.578375][T14881] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 297.610640][T12463] usb 7-1: USB disconnect, device number 9 [ 297.803947][T14889] rxe_eth0 speed is unknown, defaulting to 1000 [ 298.110334][T14902] fuse: Bad value for 'rootmode' [ 298.440571][T14913] rxe_eth0 speed is unknown, defaulting to 1000 [ 298.842275][T14924] fuse: Bad value for 'rootmode' [ 298.897439][ T5942] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 299.053902][ T5942] usb 11-1: Using ep0 maxpacket: 16 [ 299.055981][ T5942] usb 11-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 299.056464][ T5942] usb 11-1: config 0 has no interfaces? [ 299.058247][ T5942] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.058260][ T5942] usb 11-1: Product: syz [ 299.058267][ T5942] usb 11-1: Manufacturer: syz [ 299.058275][ T5942] usb 11-1: SerialNumber: syz [ 299.060323][ T5942] usb 11-1: config 0 descriptor?? [ 299.430048][T12105] usb 11-1: USB disconnect, device number 3 [ 299.915535][T14948] fuse: Bad value for 'rootmode' [ 300.050196][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 300.050210][ T42] audit: type=1800 audit(1793012623.665:10487): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35293 res=0 errno=-22 [ 300.052377][ T42] audit: type=1800 audit(1793012623.665:10488): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=35316 res=0 errno=-22 [ 300.056530][T12465] usb 12-1: USB disconnect, device number 2 [ 300.151064][T14956] FAULT_INJECTION: forcing a failure. [ 300.151064][T14956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.151085][T14956] CPU: 3 UID: 0 PID: 14956 Comm: syz.2.2995 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.151102][T14956] Tainted: [L]=SOFTLOCKUP [ 300.151106][T14956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.151113][T14956] Call Trace: [ 300.151118][T14956] [ 300.151122][T14956] dump_stack_lvl+0x100/0x190 [ 300.151143][T14956] should_fail_ex.cold+0x5/0xa [ 300.151161][T14956] strncpy_from_user+0x3b/0x2d0 [ 300.151178][T14956] do_getname+0x78/0x390 [ 300.151192][T14956] do_sys_openat2+0xc3/0x1d0 [ 300.151203][T14956] ? __pfx_do_sys_openat2+0x10/0x10 [ 300.151214][T14956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 300.151233][T14956] ? __fget_files+0x21f/0x3d0 [ 300.151251][T14956] __x64_sys_openat+0x12d/0x210 [ 300.151262][T14956] ? __pfx___x64_sys_openat+0x10/0x10 [ 300.151273][T14956] ? ksys_write+0x1ac/0x250 [ 300.151291][T14956] do_syscall_64+0x123/0x790 [ 300.151309][T14956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.151358][T14956] RIP: 0033:0x7f0f80f9f559 [ 300.151368][T14956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.151379][T14956] RSP: 002b:00007f0f81e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 300.151391][T14956] RAX: ffffffffffffffda RBX: 00007f0f81225fa0 RCX: 00007f0f80f9f559 [ 300.151398][T14956] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffffffffff9c [ 300.151405][T14956] RBP: 00007f0f81e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 300.151411][T14956] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 300.151418][T14956] R13: 00007f0f81226038 R14: 00007f0f81225fa0 R15: 00007ffce07d94f8 [ 300.151434][T14956] [ 300.182660][ T7956] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.303195][ T7956] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.394751][ T7956] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.458672][ T42] audit: type=1800 audit(1793012624.075:10489): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3003" name="map_device" dev="sysfs" ino=22299 res=0 errno=-22 [ 300.460132][T14972] rnbd_client L607: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0) [ 300.460668][T14972] rtrs_client L2844: pathname cannot contain / and . [ 300.461456][ T42] audit: type=1800 audit(1793012624.075:10490): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316300 res=0 errno=-22 [ 300.462374][ T42] audit: type=1800 audit(1793012624.075:10491): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316311 res=0 errno=-22 [ 300.475826][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.482191][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.483463][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.489078][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.490412][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.504815][ T42] audit: type=1800 audit(1793012624.115:10492): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316330 res=0 errno=-22 [ 300.517291][ T7956] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.530591][T12463] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 300.531208][ T42] audit: type=1800 audit(1793012624.145:10493): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316341 res=0 errno=-22 [ 300.598365][T14981] comedi comedi2: dt2817: I/O base address or length out of range [ 300.655459][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3004'. [ 300.683939][T12463] usb 11-1: Using ep0 maxpacket: 16 [ 300.684781][T12463] usb 11-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 300.685245][T12463] usb 11-1: config 0 has no interfaces? [ 300.686863][T12463] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.686876][T12463] usb 11-1: Product: syz [ 300.686884][T12463] usb 11-1: Manufacturer: syz [ 300.686891][T12463] usb 11-1: SerialNumber: syz [ 300.688189][T12463] usb 11-1: config 0 descriptor?? [ 300.690970][ T42] audit: type=1800 audit(1793012624.305:10494): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=316352 res=0 errno=-22 [ 300.691979][ T42] audit: type=1800 audit(1793012624.305:10495): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=316384 res=0 errno=-22 [ 300.692544][ T42] audit: type=1800 audit(1793012624.305:10496): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=316359 res=0 errno=-22 [ 300.813829][ T5882] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.813871][ T5882] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.813901][ T5882] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.813928][ T5882] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.813955][ T5882] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.813981][ T5882] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.823854][ T5882] netdevsim netdevsim7 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.847481][ T5882] netdevsim netdevsim7 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.968886][ T7956] bond0 (unregistering): Released all slaves [ 300.987245][T14973] rxe_eth0 speed is unknown, defaulting to 1000 [ 301.013421][ T5494] 8021q: adding VLAN 0 to HW filter on device eth2 [ 301.077536][ T5937] usb 11-1: USB disconnect, device number 4 [ 301.238773][ T5494] 8021q: adding VLAN 0 to HW filter on device eth3 [ 301.348784][T15015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.374711][T15015] team0: Unable to change to the same mode the team is in [ 301.381104][ T7956] hsr_slave_0: left promiscuous mode [ 301.384554][ T7956] hsr_slave_1: left promiscuous mode [ 301.386694][ T7956] batman_adv: batadv0: Removing interface: virt_wifi0 [ 301.395996][ T7956] veth1_macvtap: left promiscuous mode [ 301.396028][ T7956] veth0_macvtap: left promiscuous mode [ 301.396114][ T7956] veth1_vlan: left promiscuous mode [ 301.396211][ T7956] veth0_vlan: left promiscuous mode [ 301.631237][T15020] smc: net device lo applied user defined pnetid SYZ2 [ 301.632319][T15027] smc: net device lo erased user defined pnetid SYZ2 [ 301.637055][ T5494] 8021q: adding VLAN 0 to HW filter on device eth4 [ 301.666127][T14973] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.666172][T14973] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.666240][T14973] bridge_slave_0: entered allmulticast mode [ 301.667033][T14973] bridge_slave_0: entered promiscuous mode [ 301.672557][T14973] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.672627][T14973] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.672694][T14973] bridge_slave_1: entered allmulticast mode [ 301.673471][T14973] bridge_slave_1: entered promiscuous mode [ 301.690463][T15037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 301.694167][T14973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.696823][T14973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.718901][T14973] team0: Port device team_slave_0 added [ 301.727349][T14973] team0: Port device team_slave_1 added [ 301.777586][T14973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.777602][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.777623][T14973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.779188][T14973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.779202][T14973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.779224][T14973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.823486][T14973] hsr_slave_0: entered promiscuous mode [ 301.824194][T14973] hsr_slave_1: entered promiscuous mode [ 301.832776][T14973] debugfs: 'hsr0' already exists in 'hsr' [ 301.832798][T14973] Cannot create hsr debugfs directory [ 301.883835][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.906931][T15050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.908244][T15050] team0: Unable to change to the same mode the team is in [ 301.989349][ T5494] 8021q: adding VLAN 0 to HW filter on device eth5 [ 302.081909][T15057] Trying to write to read-only block-device nullb0 [ 302.122177][T15063] nfs: Unknown parameter 'mountpr' [ 302.125222][T15064] nfs: Unknown parameter 'mountpr' [ 302.264000][ T24] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 302.385517][T14973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.388300][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.389531][T14973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 302.391555][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.392313][T14973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 302.396425][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.397047][T14973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 302.402415][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.444115][ T24] usb 13-1: Using ep0 maxpacket: 16 [ 302.444892][ T24] usb 13-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 302.448851][ T24] usb 13-1: config 0 has no interfaces? [ 302.451477][ T24] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.451496][ T24] usb 13-1: Product: syz [ 302.451509][ T24] usb 13-1: Manufacturer: syz [ 302.451522][ T24] usb 13-1: SerialNumber: syz [ 302.460097][ T24] usb 13-1: config 0 descriptor?? [ 302.482319][T14973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.502235][T14973] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.508374][T11282] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.508457][T11282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.514422][T11282] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.514516][T11282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.593922][ T5784] Bluetooth: hci2: command tx timeout [ 302.603134][T15085] ip_tables: iptables: counters copy to user failed while replacing table [ 302.670775][T12299] usb 13-1: USB disconnect, device number 2 [ 302.679634][T15090] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 302.684744][T15090] team0: Unable to change to the same mode the team is in [ 302.779218][T15097] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 302.878152][T14973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.904181][T14973] veth0_vlan: entered promiscuous mode [ 302.909911][T14973] veth1_vlan: entered promiscuous mode [ 302.928925][T14973] veth0_macvtap: entered promiscuous mode [ 302.931602][T14973] veth1_macvtap: entered promiscuous mode [ 302.941491][T14973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.946260][T14973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.964533][ T7956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.985060][ T5882] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.985088][ T5882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.985106][ T5882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.022644][ T6622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.022659][ T6622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.038556][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.038578][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.094089][T12465] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 303.149063][T15112] fuse: Bad value for 'rootmode' [ 303.254514][T12465] usb 7-1: Using ep0 maxpacket: 16 [ 303.258116][T12465] usb 7-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 303.261030][T15121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.261519][T12465] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.261533][T12465] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 303.265221][T15121] team0: Unable to change to the same mode the team is in [ 303.280414][T15119] ip_tables: iptables: counters copy to user failed while replacing table [ 303.288209][T12465] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.288226][T12465] usb 7-1: Product: syz [ 303.288233][T12465] usb 7-1: Manufacturer: syz [ 303.288242][T12465] usb 7-1: SerialNumber: syz [ 303.294823][T12465] r8152-cfgselector 7-1: Unknown version 0x0000 [ 303.294843][T12465] r8152-cfgselector 7-1: config 0 descriptor?? [ 303.466322][T15137] fuse: Bad value for 'rootmode' [ 303.505360][ T63] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 303.716103][T15148] bridge_slave_0: left allmulticast mode [ 303.716120][T15148] bridge_slave_0: left promiscuous mode [ 303.716316][T15148] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.723342][T15148] bridge_slave_1: left allmulticast mode [ 303.723362][T15148] bridge_slave_1: left promiscuous mode [ 303.723529][T15148] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.737605][T15148] bond0: (slave bond_slave_0): Releasing backup interface [ 303.741345][T15148] bond0: (slave bond_slave_1): Releasing backup interface [ 303.746619][T15148] team0: Port device team_slave_0 removed [ 303.751799][T15148] team0: Port device team_slave_1 removed [ 303.752181][T15148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.752193][T15148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.753009][T15148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.753019][T15148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.756023][T15148] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.765812][T15148] team0: Mode changed to "activebackup" [ 303.844533][T12465] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 303.850729][T15150] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 303.964595][T15156] ip_tables: iptables: counters copy to user failed while replacing table [ 303.987028][T15159] fuse: Bad value for 'fd' [ 304.003808][T12465] usb 11-1: Using ep0 maxpacket: 16 [ 304.004537][T12465] usb 11-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 304.006230][T12465] usb 11-1: config 0 has no interfaces? [ 304.010591][T12465] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.010606][T12465] usb 11-1: Product: syz [ 304.010613][T12465] usb 11-1: Manufacturer: syz [ 304.010621][T12465] usb 11-1: SerialNumber: syz [ 304.011939][T12465] usb 11-1: config 0 descriptor?? [ 304.135169][T15172] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 304.163266][T15174] FAULT_INJECTION: forcing a failure. [ 304.163266][T15174] name failslab, interval 1, probability 0, space 0, times 0 [ 304.163323][T15174] CPU: 2 UID: 0 PID: 15174 Comm: syz.2.3054 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.163350][T15174] Tainted: [L]=SOFTLOCKUP [ 304.163357][T15174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.163368][T15174] Call Trace: [ 304.163375][T15174] [ 304.163383][T15174] dump_stack_lvl+0x100/0x190 [ 304.163431][T15174] should_fail_ex.cold+0x5/0xa [ 304.163459][T15174] should_failslab+0xc2/0x120 [ 304.163492][T15174] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 304.163515][T15174] ? __alloc_skb+0x5b7/0x710 [ 304.163548][T15174] ? __alloc_skb+0x140/0x710 [ 304.163578][T15174] __alloc_skb+0x140/0x710 [ 304.163603][T15174] ? __alloc_skb+0x5b7/0x710 [ 304.163629][T15174] ? __pfx___alloc_skb+0x10/0x10 [ 304.163665][T15174] netlink_alloc_large_skb+0x69/0x150 [ 304.163704][T15174] netlink_sendmsg+0x755/0x10c0 [ 304.163728][T15174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.163753][T15174] ? selinux_socket_sendmsg+0x198/0x2f0 [ 304.163783][T15174] ? ____sys_sendmsg+0xa99/0xc30 [ 304.163803][T15174] ____sys_sendmsg+0xa99/0xc30 [ 304.163824][T15174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.163846][T15174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.163875][T15174] ? lock_acquire+0x1d1/0x380 [ 304.163896][T15174] ? get_pid_task+0x2a/0x250 [ 304.163925][T15174] ___sys_sendmsg+0x190/0x1e0 [ 304.163949][T15174] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.163972][T15174] ? get_pid_task+0x106/0x250 [ 304.164007][T15174] ? find_held_lock+0x2b/0x80 [ 304.164043][T15174] __sys_sendmsg+0x160/0x210 [ 304.164069][T15174] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.164108][T15174] do_syscall_64+0x123/0x790 [ 304.164142][T15174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.164160][T15174] RIP: 0033:0x7f0f80f9f559 [ 304.164177][T15174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.164194][T15174] RSP: 002b:00007f0f81e8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.164212][T15174] RAX: ffffffffffffffda RBX: 00007f0f81225fa0 RCX: 00007f0f80f9f559 [ 304.164224][T15174] RDX: 0000000020008080 RSI: 0000200000000500 RDI: 0000000000000006 [ 304.164236][T15174] RBP: 00007f0f81e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 304.164247][T15174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.164258][T15174] R13: 00007f0f81226038 R14: 00007f0f81225fa0 R15: 00007ffce07d94f8 [ 304.164284][T15174] [ 304.227226][ T1353] usb 11-1: USB disconnect, device number 5 [ 304.381626][T15183] fuse: Bad value for 'fd' [ 304.447453][T15187] FAULT_INJECTION: forcing a failure. [ 304.447453][T15187] name failslab, interval 1, probability 0, space 0, times 0 [ 304.447485][T15187] CPU: 3 UID: 0 PID: 15187 Comm: syz.3.3059 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.447512][T15187] Tainted: [L]=SOFTLOCKUP [ 304.447519][T15187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.447531][T15187] Call Trace: [ 304.447538][T15187] [ 304.447546][T15187] dump_stack_lvl+0x100/0x190 [ 304.447579][T15187] should_fail_ex.cold+0x5/0xa [ 304.447607][T15187] should_failslab+0xc2/0x120 [ 304.447632][T15187] __kmalloc_noprof+0xfc/0x840 [ 304.447653][T15187] ? rcu_is_watching+0x13/0xc0 [ 304.447672][T15187] ? tomoyo_realpath_from_path+0xb6/0x690 [ 304.447698][T15187] tomoyo_realpath_from_path+0xb6/0x690 [ 304.447724][T15187] tomoyo_path_number_perm+0x23c/0x580 [ 304.447751][T15187] ? tomoyo_path_number_perm+0x22e/0x580 [ 304.447779][T15187] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 304.447816][T15187] ? __lock_acquire+0x5c0/0x1f40 [ 304.447852][T15187] ? __fget_files+0x34/0x3d0 [ 304.447880][T15187] ? find_held_lock+0x2b/0x80 [ 304.447903][T15187] ? hook_file_ioctl_common+0x140/0x440 [ 304.447932][T15187] ? __fget_files+0x21f/0x3d0 [ 304.447964][T15187] security_file_ioctl+0xd3/0x230 [ 304.447994][T15187] __x64_sys_ioctl+0xb7/0x210 [ 304.448021][T15187] do_syscall_64+0x123/0x790 [ 304.448049][T15187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.448073][T15187] RIP: 0033:0x7f2dc279f559 [ 304.448089][T15187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.448106][T15187] RSP: 002b:00007f2dc360f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.448126][T15187] RAX: ffffffffffffffda RBX: 00007f2dc2a25fa0 RCX: 00007f2dc279f559 [ 304.448138][T15187] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 304.448149][T15187] RBP: 00007f2dc360f090 R08: 0000000000000000 R09: 0000000000000000 [ 304.448160][T15187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.448171][T15187] R13: 00007f2dc2a26038 R14: 00007f2dc2a25fa0 R15: 00007fff7b00ec98 [ 304.448198][T15187] [ 304.448206][T15187] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.661454][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3062'. [ 304.768473][T15202] netlink: 'syz.6.3065': attribute type 3 has an invalid length. [ 304.768531][T15202] netlink: 1080 bytes leftover after parsing attributes in process `syz.6.3065'. [ 304.797249][T15206] geneve2: entered promiscuous mode [ 304.810201][T15208] fuse: Bad value for 'fd' [ 305.274253][T12367] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 305.423778][T12367] usb 11-1: Using ep0 maxpacket: 16 [ 305.424288][T12367] usb 11-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 305.424772][T12367] usb 11-1: config 0 has no interfaces? [ 305.426481][T12367] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.426494][T12367] usb 11-1: Product: syz [ 305.426501][T12367] usb 11-1: Manufacturer: syz [ 305.426509][T12367] usb 11-1: SerialNumber: syz [ 305.428689][ T42] kauditd_printk_skb: 73 callbacks suppressed [ 305.428701][ T42] audit: type=1800 audit(1793012629.045:10570): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326562 res=0 errno=-22 [ 305.429607][ T42] audit: type=1800 audit(1793012629.045:10571): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=326594 res=0 errno=-22 [ 305.430130][ T42] audit: type=1800 audit(1793012629.045:10572): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=326569 res=0 errno=-22 [ 305.430621][T12367] usb 11-1: config 0 descriptor?? [ 305.436522][ T42] audit: type=1800 audit(1793012629.045:10573): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=326570 res=0 errno=-22 [ 305.437027][ T42] audit: type=1800 audit(1793012629.055:10574): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=326591 res=0 errno=-22 [ 305.437496][ T42] audit: type=1800 audit(1793012629.055:10575): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=326592 res=0 errno=-22 [ 305.438000][ T42] audit: type=1800 audit(1793012629.055:10576): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=326571 res=0 errno=-22 [ 305.438963][ T42] audit: type=1800 audit(1793012629.055:10577): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=326593 res=0 errno=-22 [ 305.500230][T15226] 9pnet_virtio: no channels available for device syz [ 305.637685][ T1353] usb 11-1: USB disconnect, device number 6 [ 305.662361][T15234] 9pnet_virtio: no channels available for device syz [ 305.777768][ T42] audit: type=1800 audit(1793012629.395:10578): pid=15239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3080" name="resume" dev="sysfs" ino=891 res=0 errno=-22 [ 305.796682][ T42] audit: type=1800 audit(1793012629.415:10579): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=326723 res=0 errno=-22 [ 305.802008][T15239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 306.172154][T15249] 9pnet_virtio: no channels available for device syz [ 306.230580][T12170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.261128][T15251] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.415124][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 306.419775][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 306.423319][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 306.424331][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 306.424933][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.540164][T12170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.641959][T12170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.642179][T15276] fuse: Unknown parameter '0x0000000000000004' [ 306.687254][T15255] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.726196][T12170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.740393][T15283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 306.741993][T15283] net_ratelimit: 2 callbacks suppressed [ 306.742017][T15283] ip_tables: iptables: counters copy to user failed while replacing table [ 306.906304][T15287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15287 comm=syz.6.3097 [ 307.147446][T12170] bond0 (unregistering): Released all slaves [ 307.154489][T15299] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 307.187721][ T12] netdevsim netdevsim3 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.187759][ T12] netdevsim netdevsim3 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.187787][ T12] netdevsim netdevsim3 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.187828][ T12] netdevsim netdevsim3 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.196744][T15305] fuse: Unknown parameter '0x0000000000000004' [ 307.320433][T15255] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.320564][T15255] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.320629][T15255] bridge_slave_0: entered allmulticast mode [ 307.321385][T15255] bridge_slave_0: entered promiscuous mode [ 307.334339][T15255] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.334473][T15255] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.334594][T15255] bridge_slave_1: entered allmulticast mode [ 307.335778][T15255] bridge_slave_1: entered promiscuous mode [ 307.365999][T15255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.368470][T15255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.396130][T15255] team0: Port device team_slave_0 added [ 307.401179][T15255] team0: Port device team_slave_1 added [ 307.417931][T15255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.417954][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.417967][T15255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.419033][T15255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.419042][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.419057][T15255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.440823][T15255] hsr_slave_0: entered promiscuous mode [ 307.441287][T15255] hsr_slave_1: entered promiscuous mode [ 307.441677][T15255] debugfs: 'hsr0' already exists in 'hsr' [ 307.441690][T15255] Cannot create hsr debugfs directory [ 307.495182][ T5142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.501035][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.502453][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.503497][ T5142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.505294][ T5142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.582495][T15319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.585604][T15319] ip_tables: iptables: counters copy to user failed while replacing table [ 307.667371][T15255] netdevsim netdevsim0 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.693549][T12170] hsr_slave_0: left promiscuous mode [ 307.696140][T12170] hsr_slave_1: left promiscuous mode [ 307.700538][T12170] veth1_macvtap: left promiscuous mode [ 307.700559][T12170] veth0_macvtap: left promiscuous mode [ 307.700604][T12170] veth1_vlan: left promiscuous mode [ 307.700635][T12170] veth0_vlan: left promiscuous mode [ 307.995785][T15255] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.020106][T15315] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.102062][T15255] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.164495][T15255] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.437829][T15315] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.437916][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.438019][T15315] bridge_slave_0: entered allmulticast mode [ 308.439380][T15315] bridge_slave_0: entered promiscuous mode [ 308.441493][T15315] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.441570][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.441695][T15315] bridge_slave_1: entered allmulticast mode [ 308.443058][T15315] bridge_slave_1: entered promiscuous mode [ 308.471833][T15315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.495367][T15315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.513868][T15315] team0: Port device team_slave_0 added [ 308.516157][T15315] team0: Port device team_slave_1 added [ 308.524394][ T5142] Bluetooth: hci2: command tx timeout [ 308.534957][T15315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.534980][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.535001][T15315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.536537][T15315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.536549][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.536571][T15315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.571097][T15315] hsr_slave_0: entered promiscuous mode [ 308.571936][T15315] hsr_slave_1: entered promiscuous mode [ 308.572484][T15315] debugfs: 'hsr0' already exists in 'hsr' [ 308.572502][T15315] Cannot create hsr debugfs directory [ 308.728034][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.740611][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.748294][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.753109][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.753529][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.783593][T15315] netdevsim netdevsim1 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.895193][T15315] netdevsim netdevsim1 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.006224][T12170] bond0 (unregistering): Released all slaves [ 309.009807][T12170] bond1 (unregistering): Released all slaves [ 309.054019][ T5882] netdevsim netdevsim8 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.054051][ T5882] netdevsim netdevsim8 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.054069][ T5882] netdevsim netdevsim8 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.054086][ T5882] netdevsim netdevsim8 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.056199][T15345] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.417434][T15345] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.417566][T15345] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.417654][T15345] bridge_slave_0: entered allmulticast mode [ 309.418923][T15345] bridge_slave_0: entered promiscuous mode [ 309.420800][T15345] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.420926][T15345] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.421026][T15345] bridge_slave_1: entered allmulticast mode [ 309.423168][T15345] bridge_slave_1: entered promiscuous mode [ 309.467529][T15345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.470011][T15345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.512076][T15345] team0: Port device team_slave_0 added [ 309.519458][T12170] hsr_slave_0: left promiscuous mode [ 309.519990][T12170] hsr_slave_1: left promiscuous mode [ 309.563915][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 309.634100][ T5784] Bluetooth: hci4: command tx timeout [ 309.804635][T15345] team0: Port device team_slave_1 added [ 309.822891][T15345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.822908][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.822930][T15345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.824525][T15345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.824537][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.824558][T15345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.834731][T15287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.866450][T15255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.877610][T15255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 309.878862][T15255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.892684][T15255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.904270][T15345] hsr_slave_0: entered promiscuous mode [ 309.905097][T15345] hsr_slave_1: entered promiscuous mode [ 309.905693][T15345] debugfs: 'hsr0' already exists in 'hsr' [ 309.905710][T15345] Cannot create hsr debugfs directory [ 309.906602][T15255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.920904][T15255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.921462][T15255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.930483][T15255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.990402][T15372] comedi comedi0: Minor 3 could not be opened [ 309.990922][T15372] kvm [15371]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2000000 [ 310.022862][T15315] netdevsim netdevsim1 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.096483][T15315] netdevsim netdevsim1 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.105343][ T5494] 8021q: adding VLAN 0 to HW filter on device eth18 [ 310.168330][T15255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.178538][T15255] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.201936][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.202015][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.216283][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.216365][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.250383][T15255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.250406][T15255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.354536][T12170] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.365381][ T5494] 8021q: adding VLAN 0 to HW filter on device eth19 [ 310.385915][T15315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.388816][T15315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.389360][T15315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.393129][T15315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.395920][T15315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.401926][T15315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.402340][T15315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.409952][T15315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.498063][T15345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.500237][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 310.500664][T15345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.503205][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 310.507254][T15345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 310.513536][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.549358][T12170] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.550079][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 310.550089][ T42] audit: type=1400 audit(1793012634.165:10665): avc: denied { write } for pid=15409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.571822][T15345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.577881][T15345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 310.596519][ T5784] Bluetooth: hci2: command tx timeout [ 310.617528][T12170] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.632639][T15255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.641385][ T42] audit: type=1400 audit(1793012634.255:10666): avc: denied { write } for pid=15419 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.642495][T15315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.671482][T15315] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.687119][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.687190][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.688172][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.688215][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.691845][ T5494] 8021q: adding VLAN 0 to HW filter on device eth20 [ 310.712291][T15255] veth0_vlan: entered promiscuous mode [ 310.743145][ T42] audit: type=1800 audit(1793012634.355:10667): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=358834 res=0 errno=-22 [ 310.749320][ T42] audit: type=1400 audit(1793012634.365:10668): avc: denied { write } for pid=15425 comm="syz.6.3114" name="/" dev="9p" ino=71827801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.779885][T12170] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.794549][T15345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.794996][T15255] veth1_vlan: entered promiscuous mode [ 310.838866][ T42] audit: type=1400 audit(1793012634.455:10669): avc: denied { write } for pid=15428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.840708][T15345] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.856029][ T5784] Bluetooth: hci3: command tx timeout [ 310.889616][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.889665][ T6625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.895683][T15255] veth0_macvtap: entered promiscuous mode [ 310.903157][T15255] veth1_macvtap: entered promiscuous mode [ 310.909420][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.909466][ T6625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.923076][T15255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.938503][ T42] audit: type=1400 audit(1793012634.555:10670): avc: denied { write } for pid=15433 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.941704][ T42] audit: type=1800 audit(1793012634.555:10671): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=358854 res=0 errno=-22 [ 310.943123][ T42] audit: type=1800 audit(1793012634.555:10672): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=358859 res=0 errno=-22 [ 310.944085][ T42] audit: type=1800 audit(1793012634.565:10673): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=358863 res=0 errno=-22 [ 310.950298][T15255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.957122][ T42] audit: type=1800 audit(1793012634.575:10674): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=358862 res=0 errno=-22 [ 310.985843][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.985928][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.986000][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.999453][ T12] netdevsim netdevsim2 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.002713][ T5494] 8021q: adding VLAN 0 to HW filter on device eth21 [ 311.015360][ T5829] netdevsim netdevsim2 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.200180][T12170] bond0 (unregistering): Released all slaves [ 311.214025][ T5829] netdevsim netdevsim2 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.214159][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.214376][ T5829] netdevsim netdevsim2 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.263231][T11282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.263254][T11282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.309664][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.309679][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.434203][T15315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.480238][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 311.485353][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 311.489818][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 311.495927][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 311.501631][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 311.502697][T15464] ip6gre1: entered allmulticast mode [ 311.523123][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 311.543498][T15315] veth0_vlan: entered promiscuous mode [ 311.549142][T15315] veth1_vlan: entered promiscuous mode [ 311.591938][T15315] veth0_macvtap: entered promiscuous mode [ 311.601870][T15315] veth1_macvtap: entered promiscuous mode [ 311.610223][T15345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.620444][T15315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.628658][T15315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.696589][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.714157][ T5784] Bluetooth: hci4: command tx timeout [ 311.748311][T12170] hsr_slave_0: left promiscuous mode [ 311.749041][T12170] hsr_slave_1: left promiscuous mode [ 311.759855][T12170] veth1_macvtap: left promiscuous mode [ 311.759878][T12170] veth0_macvtap: left promiscuous mode [ 311.759925][T12170] veth1_vlan: left promiscuous mode [ 311.759956][T12170] veth0_vlan: left promiscuous mode [ 312.026282][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.043820][ T7956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.057801][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.057815][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.074385][ T7956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.107059][T15465] rxe_eth0 speed is unknown, defaulting to 1000 [ 312.108906][T11282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.108922][T11282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.242010][T15508] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.251386][T15508] ip_tables: iptables: counters copy to user failed while replacing table [ 312.263193][T15345] veth0_vlan: entered promiscuous mode [ 312.272359][T15345] veth1_vlan: entered promiscuous mode [ 312.336680][T15345] veth0_macvtap: entered promiscuous mode [ 312.340669][T15345] veth1_macvtap: entered promiscuous mode [ 312.390774][T15345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.421316][T15345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.530677][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.531124][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.531239][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.531371][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.623975][T12170] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.637855][ T6622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.637872][ T6622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.675577][ T5784] Bluetooth: hci2: command tx timeout [ 312.706770][T15465] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.706818][T15465] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.706880][T15465] bridge_slave_0: entered allmulticast mode [ 312.708752][T15465] bridge_slave_0: entered promiscuous mode [ 312.717315][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.717329][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.741390][T12170] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.751611][T15465] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.751657][T15465] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.751781][T15465] bridge_slave_1: entered allmulticast mode [ 312.752501][T15465] bridge_slave_1: entered promiscuous mode [ 312.781310][T15465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.782829][T15465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.796287][T15465] team0: Port device team_slave_0 added [ 312.803071][T15465] team0: Port device team_slave_1 added [ 312.816919][T15465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.816931][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.816944][T15465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.817779][T15465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.817786][T15465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.817799][T15465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.839100][T15465] hsr_slave_0: entered promiscuous mode [ 312.839581][T15465] hsr_slave_1: entered promiscuous mode [ 312.861064][T15551] comedi comedi0: Minor 3 could not be opened [ 312.861511][T15551] kvm [15550]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2000000 [ 312.885997][T12170] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.890026][T15554] program syz.4.3110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.913945][ T5784] Bluetooth: hci3: command tx timeout [ 312.977651][T15561] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups) [ 312.996673][T12170] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.061324][T15566] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 313.062693][T15566] ip_tables: iptables: counters copy to user failed while replacing table [ 313.138652][T15465] netdevsim netdevsim5 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.290509][T12170] bridge_slave_1: left allmulticast mode [ 313.290543][T12170] bridge_slave_1: left promiscuous mode [ 313.290715][T12170] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.301024][T12170] bridge_slave_0: left allmulticast mode [ 313.301051][T12170] bridge_slave_0: left promiscuous mode [ 313.301295][T12170] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.380049][ T41] wacom 0003:056A:0042.0006: Unknown device_type for 'syz0'. Assuming pen. [ 313.381776][ T41] wacom 0003:056A:0042.0006: hidraw1: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 313.387944][ T41] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.0006/input/input18 [ 313.549335][T15590] fido_id[15590]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 313.554936][ T5784] Bluetooth: hci1: command tx timeout [ 313.592897][T12170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.597959][T12170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.599413][T12170] bond0 (unregistering): Released all slaves [ 313.656810][T15465] netdevsim netdevsim5 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.714691][ T5829] netdevsim netdevsim6 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.714812][ T5829] netdevsim netdevsim6 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.715235][ T5829] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.715295][ T5829] netdevsim netdevsim6 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.793843][ T5784] Bluetooth: hci4: command tx timeout [ 314.057629][T15465] netdevsim netdevsim5 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.136582][T12170] hsr_slave_0: left promiscuous mode [ 314.137285][T12170] hsr_slave_1: left promiscuous mode [ 314.139471][T12170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.139488][T12170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.140131][T12170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.140141][T12170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.162718][T12170] veth1_macvtap: left promiscuous mode [ 314.162750][T12170] veth0_macvtap: left promiscuous mode [ 314.162843][T12170] veth1_vlan: left promiscuous mode [ 314.162900][T12170] veth0_vlan: left promiscuous mode [ 314.170438][T15645] 9pnet_virtio: no channels available for device syz [ 314.405029][T12170] team0 (unregistering): Port device team_slave_1 removed [ 314.412178][T12170] team0 (unregistering): Port device team_slave_0 removed [ 314.513137][T15465] netdevsim netdevsim5 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.673557][T15465] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.681324][T15465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.683104][T15465] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.688852][T15465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.689731][T15465] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.699490][T15465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.700840][T15465] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.708462][T15465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.721068][T15666] geneve2: entered promiscuous mode [ 314.792700][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.792715][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.806467][T15465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.808136][T15674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.812558][T15465] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.817179][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.817241][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.821376][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.821422][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.994856][ T5784] Bluetooth: hci3: command tx timeout [ 315.031315][T12170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.089053][ T5142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.092883][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.098376][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.118357][T12170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.120992][ T5142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.130511][ T5142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.194053][T15465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.227494][T12170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.288306][T12170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.348938][T15690] rxe_eth0 speed is unknown, defaulting to 1000 [ 315.444310][T15465] veth0_vlan: entered promiscuous mode [ 315.458687][T15465] veth1_vlan: entered promiscuous mode [ 315.464651][ T12] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.464684][ T12] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.464702][ T12] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.513475][T15726] comedi comedi0: Minor 3 could not be opened [ 315.536447][T12170] bridge_slave_1: left allmulticast mode [ 315.536472][T12170] bridge_slave_1: left promiscuous mode [ 315.536664][T12170] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.541923][T12170] bridge_slave_0: left allmulticast mode [ 315.541948][T12170] bridge_slave_0: left promiscuous mode [ 315.542118][T12170] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.634287][ T5784] Bluetooth: hci1: command tx timeout [ 315.685798][T12170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.695679][T12170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.697292][T12170] bond0 (unregistering): Released all slaves [ 315.722876][T15735] netlink: 'syz.4.3164': attribute type 1 has an invalid length. [ 315.722892][T15735] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3164'. [ 315.765397][T15737] netlink: 'syz.4.3165': attribute type 3 has an invalid length. [ 315.778290][T15465] veth0_macvtap: entered promiscuous mode [ 315.794546][T15465] veth1_macvtap: entered promiscuous mode [ 315.796490][ T42] kauditd_printk_skb: 168 callbacks suppressed [ 315.796503][ T42] audit: type=1400 audit(1793012639.405:10843): avc: denied { write } for pid=15738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.803804][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 315.829101][ T12] netdevsim netdevsim1 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.836082][T15465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.881214][ T42] audit: type=1400 audit(1793012639.495:10844): avc: denied { write } for pid=15744 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.886436][T15465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.924797][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.984499][ T7956] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.984626][ T7956] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.003806][ T42] audit: type=1800 audit(1793012639.615:10845): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=374823 res=0 errno=-22 [ 316.059448][ T42] audit: type=1400 audit(1793012639.675:10846): avc: denied { write } for pid=15752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.119313][ T42] audit: type=1400 audit(1793012639.735:10847): avc: denied { write } for pid=15760 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.135416][T11282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.135434][T11282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.152613][ T42] audit: type=1800 audit(1793012639.765:10848): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=375613 res=0 errno=-22 [ 316.161895][T15690] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.161973][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.162076][T15690] bridge_slave_0: entered allmulticast mode [ 316.163427][T15690] bridge_slave_0: entered promiscuous mode [ 316.168462][T15690] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.168591][T15690] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.168789][T15690] bridge_slave_1: entered allmulticast mode [ 316.170032][T15690] bridge_slave_1: entered promiscuous mode [ 316.213924][ T5882] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.219483][T15690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.220056][T11282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.220072][T11282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.221923][T15690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.230748][ T42] audit: type=1400 audit(1793012639.845:10849): avc: denied { write } for pid=15766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.300676][T15690] team0: Port device team_slave_0 added [ 316.302486][T15690] team0: Port device team_slave_1 added [ 316.323212][ T42] audit: type=1400 audit(1793012639.935:10850): avc: denied { write } for pid=15773 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.357871][T15690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.357883][T15690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.357897][T15690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.358896][T15690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.358905][T15690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.358922][T15690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.423405][T15777] team0: No ports can be present during mode change [ 316.445492][T12170] hsr_slave_0: left promiscuous mode [ 316.455844][T12170] hsr_slave_1: left promiscuous mode [ 316.460232][T12170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.460247][T12170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.461847][T12170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.461865][T12170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.470468][T12170] veth1_macvtap: left promiscuous mode [ 316.470519][T12170] veth0_macvtap: left promiscuous mode [ 316.470602][T12170] veth1_vlan: left promiscuous mode [ 316.470661][T12170] veth0_vlan: left promiscuous mode [ 316.492402][T15781] EXT4-fs (nbd5): unable to read superblock [ 316.570856][ T42] audit: type=1800 audit(1793012640.185:10851): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=377625 res=0 errno=-22 [ 316.584891][ T42] audit: type=1400 audit(1793012640.205:10852): avc: denied { write } for pid=15782 comm="syz.5.3173" name="/" dev="9p" ino=71827801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.726400][T15795] 9pnet_virtio: no channels available for device syz [ 316.772319][T12170] team0 (unregistering): Port device team_slave_1 removed [ 316.786194][T12170] team0 (unregistering): Port device team_slave_0 removed [ 316.839175][T15690] hsr_slave_0: entered promiscuous mode [ 316.839964][T15690] hsr_slave_1: entered promiscuous mode [ 316.840496][T15690] debugfs: 'hsr0' already exists in 'hsr' [ 316.840515][T15690] Cannot create hsr debugfs directory [ 316.891155][T15798] team0: No ports can be present during mode change [ 317.036229][T15809] 9pnet_virtio: no channels available for device syz [ 317.104993][T15690] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.109668][T15813] 9pnet_virtio: no channels available for device syz [ 317.154109][ T5784] Bluetooth: hci4: command tx timeout [ 317.223882][T15690] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.247396][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247448][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.290056][T15690] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.331876][T15825] 9pnet_virtio: no channels available for device syz [ 317.333281][T15825] ip_tables: iptables: counters copy to user failed while replacing table [ 317.385151][T15690] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.533146][T12170] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.729191][T15690] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 317.738084][T15690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.738454][T15690] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 317.749875][T15690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.750307][T15690] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 317.752139][T15690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.752536][T15690] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 317.757335][T15690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.822315][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.823066][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.826220][T15690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.827538][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.831317][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.831601][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.833452][T15690] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.836364][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.836414][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.841424][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.841468][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.870655][T15690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.076802][T15856] rxe_eth0 speed is unknown, defaulting to 1000 [ 318.146858][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.148605][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.150626][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.159298][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.159844][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.228554][T15690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.394621][T15890] rxe_eth0 speed is unknown, defaulting to 1000 [ 318.488688][T15856] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.488762][T15856] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.488844][T15856] bridge_slave_0: entered allmulticast mode [ 318.489633][T15856] bridge_slave_0: entered promiscuous mode [ 318.496079][T15856] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.496159][T15856] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.496249][T15856] bridge_slave_1: entered allmulticast mode [ 318.499751][T15856] bridge_slave_1: entered promiscuous mode [ 318.519643][T15690] veth0_vlan: entered promiscuous mode [ 318.541924][T15856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.549856][T15690] veth1_vlan: entered promiscuous mode [ 318.564698][T15856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.597269][T15856] team0: Port device team_slave_0 added [ 318.615446][T15856] team0: Port device team_slave_1 added [ 318.646469][T15856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.646482][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.646496][T15856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.647361][T15856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.647369][T15856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.647382][T15856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.691310][T15856] hsr_slave_0: entered promiscuous mode [ 318.692107][T15856] hsr_slave_1: entered promiscuous mode [ 318.692647][T15856] debugfs: 'hsr0' already exists in 'hsr' [ 318.692666][T15856] Cannot create hsr debugfs directory [ 318.776584][T15690] veth0_macvtap: entered promiscuous mode [ 318.781110][T15944] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups) [ 318.782625][T15690] veth1_macvtap: entered promiscuous mode [ 318.810435][T15690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.821592][T15690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.831621][ T5829] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.831715][ T5829] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.901952][T15856] netdevsim netdevsim7 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.906220][T15955] input: syz0 as /devices/virtual/input/input21 [ 318.918209][ T5882] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.918251][ T5882] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.948075][ T5937] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 318.979843][T12170] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.025241][T15856] netdevsim netdevsim7 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.041779][T15890] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.041867][T15890] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.041934][T15890] bridge_slave_0: entered allmulticast mode [ 319.042739][T15890] bridge_slave_0: entered promiscuous mode [ 319.053937][T15890] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.055715][T15890] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.055833][T15890] bridge_slave_1: entered allmulticast mode [ 319.057141][T15890] bridge_slave_1: entered promiscuous mode [ 319.093057][T12170] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.117775][T15856] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.136453][T15890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.145829][T15890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.199369][T12170] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.210546][T15890] team0: Port device team_slave_0 added [ 319.217569][ T9] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 319.230579][T15856] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.233894][ T5784] Bluetooth: hci4: command tx timeout [ 319.240698][T15890] team0: Port device team_slave_1 added [ 319.241750][T11282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.241761][T11282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.261136][T15890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.261149][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.261167][T15890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.284159][T15890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.284170][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.284184][T15890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.322851][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.322872][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.348127][T15890] hsr_slave_0: entered promiscuous mode [ 319.349019][T15890] hsr_slave_1: entered promiscuous mode [ 319.349562][T15890] debugfs: 'hsr0' already exists in 'hsr' [ 319.349580][T15890] Cannot create hsr debugfs directory [ 319.459199][T15974] netlink: 1092 bytes leftover after parsing attributes in process `syz.9.3158'. [ 319.506554][T15977] FAULT_INJECTION: forcing a failure. [ 319.506554][T15977] name failslab, interval 1, probability 0, space 0, times 0 [ 319.506604][T15977] CPU: 3 UID: 0 PID: 15977 Comm: syz.9.3203 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.506651][T15977] Tainted: [L]=SOFTLOCKUP [ 319.506659][T15977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.506671][T15977] Call Trace: [ 319.506678][T15977] [ 319.506687][T15977] dump_stack_lvl+0x100/0x190 [ 319.506729][T15977] should_fail_ex.cold+0x5/0xa [ 319.506756][T15977] should_failslab+0xc2/0x120 [ 319.506786][T15977] kmem_cache_alloc_noprof+0x92/0x6a0 [ 319.506807][T15977] ? dev_queue_xmit_nit+0x38/0xa80 [ 319.506830][T15977] ? skb_clone+0x187/0x3f0 [ 319.506848][T15977] skb_clone+0x187/0x3f0 [ 319.506864][T15977] dev_queue_xmit_nit+0x255/0xa80 [ 319.506890][T15977] dev_hard_start_xmit+0x2f5/0x760 [ 319.506920][T15977] __dev_queue_xmit+0x1c2f/0x4a50 [ 319.506946][T15977] ? __pfx___dev_queue_xmit+0x10/0x10 [ 319.506969][T15977] ? rcu_is_watching+0x13/0xc0 [ 319.506987][T15977] ? __skb_clone+0x5c7/0x7c0 [ 319.507006][T15977] netlink_deliver_tap+0x9b8/0xb50 [ 319.507026][T15977] netlink_unicast+0x784/0x950 [ 319.507040][T15977] ? __pfx_netlink_unicast+0x10/0x10 [ 319.507050][T15977] ? genl_rcv_msg+0x4be/0x800 [ 319.507066][T15977] netlink_ack+0x660/0xba0 [ 319.507082][T15977] netlink_rcv_skb+0x333/0x420 [ 319.507093][T15977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 319.507107][T15977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.507124][T15977] ? netlink_deliver_tap+0x1ae/0xb50 [ 319.507143][T15977] genl_rcv+0x28/0x40 [ 319.507154][T15977] netlink_unicast+0x668/0x950 [ 319.507167][T15977] ? __pfx_netlink_unicast+0x10/0x10 [ 319.507182][T15977] netlink_sendmsg+0x9ac/0x10c0 [ 319.507196][T15977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.507211][T15977] ? selinux_socket_sendmsg+0x198/0x2f0 [ 319.507252][T15977] ? __sys_sendto+0x492/0x4e0 [ 319.507270][T15977] __sys_sendto+0x492/0x4e0 [ 319.507285][T15977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.507297][T15977] ? __pfx___sys_sendto+0x10/0x10 [ 319.507319][T15977] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 319.507344][T15977] __x64_sys_sendto+0xe0/0x1c0 [ 319.507360][T15977] ? do_syscall_64+0xae/0x790 [ 319.507381][T15977] ? lockdep_hardirqs_on+0x7d/0x110 [ 319.507397][T15977] do_syscall_64+0x123/0x790 [ 319.507416][T15977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.507429][T15977] RIP: 0033:0x7f6a0e55fd8e [ 319.507440][T15977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 319.507451][T15977] RSP: 002b:00007f6a0f3c5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 319.507462][T15977] RAX: ffffffffffffffda RBX: 00007f6a0f3c76c0 RCX: 00007f6a0e55fd8e [ 319.507470][T15977] RDX: 0000000000000020 RSI: 00007f6a0f3c6000 RDI: 0000000000000008 [ 319.507476][T15977] RBP: 0000000000000000 R08: 00007f6a0f3c5f04 R09: 000000000000000c [ 319.507487][T15977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 319.507494][T15977] R13: 00007f6a0f3c5f58 R14: 00007f6a0f3c6000 R15: 0000000000000000 [ 319.507508][T15977] [ 319.540161][T12170] bridge_slave_1: left allmulticast mode [ 319.540184][T12170] bridge_slave_1: left promiscuous mode [ 319.540393][T12170] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.545557][T12170] bridge_slave_0: left allmulticast mode [ 319.545579][T12170] bridge_slave_0: left promiscuous mode [ 319.545834][T12170] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.690662][T12170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.693955][T12170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.701840][T12170] bond0 (unregistering): Released all slaves [ 319.724364][ T9] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 319.803443][T15856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 319.817982][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 319.838601][T15856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 319.846273][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 319.846738][T15856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 319.851807][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 319.868992][T15856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 319.873335][T15856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 319.884030][ T5784] Bluetooth: hci1: command tx timeout [ 319.931565][T15890] netdevsim netdevsim3 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.966826][ T5829] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.966998][ T5829] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.967020][ T5829] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.967038][ T5829] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.035328][T15955] ceph: No mds server is up or the cluster is laggy [ 320.037536][T15890] netdevsim netdevsim3 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.040962][T16005] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 9 (only 8 groups) [ 320.091752][ T5494] 8021q: adding VLAN 0 to HW filter on device eth6 [ 320.125818][T15890] netdevsim netdevsim3 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.194560][T15856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.205931][T15856] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.210106][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.210153][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.225182][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.225271][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.241435][T12170] hsr_slave_0: left promiscuous mode [ 320.243362][T12170] hsr_slave_1: left promiscuous mode [ 320.246385][T12170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.246424][T12170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.248485][T12170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.248501][T12170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.257831][T12170] veth1_macvtap: left promiscuous mode [ 320.257861][T12170] veth0_macvtap: left promiscuous mode [ 320.257951][T12170] veth1_vlan: left promiscuous mode [ 320.258003][T12170] veth0_vlan: left promiscuous mode [ 320.274006][ T5784] Bluetooth: hci3: command tx timeout [ 320.430434][T12170] team0 (unregistering): Port device team_slave_1 removed [ 320.440438][T12170] team0 (unregistering): Port device team_slave_0 removed [ 320.475634][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3213'. [ 320.480475][T16023] nvme nvme0: failed to connect socket: -111 [ 320.480860][T16023] [ 320.486569][T16023] ====================================================== [ 320.488785][T16023] WARNING: possible circular locking dependency detected [ 320.491029][T16023] syzkaller #0 Tainted: G L [ 320.493325][T16023] ------------------------------------------------------ [ 320.495859][T16023] syz.9.3213/16023 is trying to acquire lock: [ 320.497661][T16023] ffff88803b355880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 320.500796][T16023] [ 320.500796][T16023] but task is already holding lock: [ 320.503088][T16023] ffffffff91174720 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 320.506063][T16023] [ 320.506063][T16023] which lock already depends on the new lock. [ 320.506063][T16023] [ 320.509438][T16023] [ 320.509438][T16023] the existing dependency chain (in reverse order) is: [ 320.512666][T16023] [ 320.512666][T16023] -> #4 (nvmf_dev_mutex){+.+.}-{4:4}: [ 320.515466][T16023] lock_acquire+0x1d1/0x380 [ 320.517318][T16023] __mutex_lock+0x19f/0x1c10 [ 320.519176][T16023] nvmf_dev_show+0x26/0x210 [ 320.521029][T16023] seq_read_iter+0x32f/0x1270 [ 320.522921][T16023] seq_read+0x344/0x4d0 [ 320.524676][T16023] vfs_read+0x1e4/0xb40 [ 320.526390][T16023] ksys_read+0x12a/0x250 [ 320.528137][T16023] do_syscall_64+0x123/0x790 [ 320.530007][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.532314][T16023] [ 320.532314][T16023] -> #3 (&p->lock){+.+.}-{4:4}: [ 320.534859][T16023] lock_acquire+0x1d1/0x380 [ 320.536550][T16023] __mutex_lock+0x19f/0x1c10 [ 320.538274][T16023] seq_read_iter+0xe1/0x1270 [ 320.540073][T16023] kernfs_fop_read_iter+0x46c/0x610 [ 320.542124][T16023] __kernel_read+0x397/0xad0 [ 320.544024][T16023] integrity_kernel_read+0x7e/0xb0 [ 320.546033][T16023] ima_calc_file_hash_tfm+0x25e/0x350 [ 320.548192][T16023] ima_calc_file_hash+0x1e3/0x380 [ 320.550178][T16023] ima_collect_measurement+0x952/0xb30 [ 320.552351][T16023] process_measurement+0xdfe/0x2350 [ 320.554438][T16023] ima_file_check+0xbf/0x110 [ 320.556302][T16023] security_file_post_open+0xc4/0x210 [ 320.558493][T16023] path_openat+0x5d0/0x23f0 [ 320.560356][T16023] do_file_open+0x20e/0x430 [ 320.562185][T16023] do_sys_openat2+0x163/0x1d0 [ 320.564106][T16023] __x64_sys_openat+0x12d/0x210 [ 320.566048][T16023] do_syscall_64+0x123/0x790 [ 320.567926][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.570235][T16023] [ 320.570235][T16023] -> #2 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 320.573339][T16023] lock_acquire+0x1d1/0x380 [ 320.575080][T16023] __mutex_lock+0x19f/0x1c10 [ 320.576885][T16023] process_measurement+0x5ab/0x2350 [ 320.578957][T16023] ima_file_check+0xbf/0x110 [ 320.580802][T16023] security_file_post_open+0xc4/0x210 [ 320.582941][T16023] path_openat+0x5d0/0x23f0 [ 320.584802][T16023] do_file_open+0x20e/0x430 [ 320.586652][T16023] file_open_name+0x1c3/0x3e0 [ 320.588521][T16023] filp_open+0x2e/0x50 [ 320.590196][T16023] kernel_read_file_from_path_initns+0xec/0x240 [ 320.592624][T16023] _request_firmware+0x6f1/0x1410 [ 320.594634][T16023] request_firmware+0x35/0x50 [ 320.596492][T16023] reg_reload_regdb+0x87/0x540 [ 320.598382][T16023] genl_family_rcv_msg_doit+0x214/0x300 [ 320.600591][T16023] genl_rcv_msg+0x560/0x800 [ 320.602414][T16023] netlink_rcv_skb+0x159/0x420 [ 320.604339][T16023] genl_rcv+0x28/0x40 [ 320.605987][T16023] netlink_unicast+0x668/0x950 [ 320.607845][T16023] netlink_sendmsg+0x9ac/0x10c0 [ 320.609675][T16023] ____sys_sendmsg+0xa99/0xc30 [ 320.611585][T16023] ___sys_sendmsg+0x190/0x1e0 [ 320.613431][T16023] __sys_sendmsg+0x160/0x210 [ 320.615240][T16023] do_syscall_64+0x123/0x790 [ 320.616980][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.619131][T16023] [ 320.619131][T16023] -> #1 (cb_lock){++++}-{4:4}: [ 320.621516][T16023] lock_acquire+0x1d1/0x380 [ 320.623359][T16023] down_read+0x94/0x4c0 [ 320.624987][T16023] genl_release+0x7e/0x1d0 [ 320.626685][T16023] netlink_release+0x104e/0x1fc0 [ 320.628495][T16023] __sock_release+0xb3/0x260 [ 320.630317][T16023] sock_close+0x1c/0x30 [ 320.632033][T16023] __fput+0x3fb/0xb50 [ 320.633781][T16023] fput_close_sync+0x118/0x250 [ 320.635694][T16023] filp_close_sync+0x75/0xa0 [ 320.637458][T16023] __x64_sys_close+0x81/0x110 [ 320.639354][T16023] do_syscall_64+0x123/0x790 [ 320.641213][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.643541][T16023] [ 320.643541][T16023] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 320.646641][T16023] check_prev_add+0xeb/0xe60 [ 320.648503][T16023] __lock_acquire+0x1528/0x1f40 [ 320.650426][T16023] lock_acquire+0x1d1/0x380 [ 320.652267][T16023] down_write+0x86/0x1f0 [ 320.654032][T16023] __sock_release+0x86/0x260 [ 320.655859][T16023] sock_close+0x1c/0x30 [ 320.657441][T16023] __fput+0x3fb/0xb50 [ 320.659111][T16023] __fput_sync+0xd7/0x100 [ 320.660921][T16023] nvme_tcp_alloc_queue.isra.0+0xd5a/0x1600 [ 320.663256][T16023] nvme_tcp_configure_admin_queue+0x26/0x530 [ 320.665589][T16023] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 320.667597][T16023] nvme_tcp_create_ctrl+0xacf/0x1080 [ 320.669702][T16023] nvmf_dev_write+0x4ee/0xb60 [ 320.671593][T16023] vfs_write+0x2aa/0x1050 [ 320.673375][T16023] ksys_write+0x12a/0x250 [ 320.675152][T16023] do_syscall_64+0x123/0x790 [ 320.677008][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.679324][T16023] [ 320.679324][T16023] other info that might help us debug this: [ 320.679324][T16023] [ 320.682919][T16023] Chain exists of: [ 320.682919][T16023] &sb->s_type->i_mutex_key#13 --> &p->lock --> nvmf_dev_mutex [ 320.682919][T16023] [ 320.687486][T16023] Possible unsafe locking scenario: [ 320.687486][T16023] [ 320.690139][T16023] CPU0 CPU1 [ 320.692058][T16023] ---- ---- [ 320.694002][T16023] lock(nvmf_dev_mutex); [ 320.695572][T16023] lock(&p->lock); [ 320.697772][T16023] lock(nvmf_dev_mutex); [ 320.700150][T16023] lock(&sb->s_type->i_mutex_key#13); [ 320.702074][T16023] [ 320.702074][T16023] *** DEADLOCK *** [ 320.702074][T16023] [ 320.704918][T16023] locks held by syz.9.3213/16023: 1, last CPU#1: [ 320.707169][T16023] #0: ffffffff91174720 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_write+0xa6/0xb60 [ 320.710547][T16023] [ 320.710547][T16023] stack backtrace: [ 320.712686][T16023] CPU: 1 UID: 0 PID: 16023 Comm: syz.9.3213 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.716493][T16023] Tainted: [L]=SOFTLOCKUP [ 320.717953][T16023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 320.721341][T16023] Call Trace: [ 320.722455][T16023] [ 320.723502][T16023] dump_stack_lvl+0x100/0x190 [ 320.725137][T16023] print_circular_bug.cold+0x178/0x1be [ 320.726996][T16023] check_noncircular+0x146/0x160 [ 320.728670][T16023] check_prev_add+0xeb/0xe60 [ 320.730344][T16023] __lock_acquire+0x1528/0x1f40 [ 320.732123][T16023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.734301][T16023] lock_acquire+0x1d1/0x380 [ 320.735814][T16023] ? __sock_release+0x86/0x260 [ 320.737533][T16023] ? __pfx___might_resched+0x10/0x10 [ 320.739454][T16023] down_write+0x86/0x1f0 [ 320.741003][T16023] ? __sock_release+0x86/0x260 [ 320.742728][T16023] ? __pfx_down_write+0x10/0x10 [ 320.744514][T16023] ? __pfx_locks_remove_file+0x10/0x10 [ 320.746503][T16023] __sock_release+0x86/0x260 [ 320.748193][T16023] ? __pfx_sock_close+0x10/0x10 [ 320.749949][T16023] sock_close+0x1c/0x30 [ 320.751464][T16023] __fput+0x3fb/0xb50 [ 320.752918][T16023] ? kfree+0x22b/0x6d0 [ 320.754403][T16023] __fput_sync+0xd7/0x100 [ 320.755985][T16023] nvme_tcp_alloc_queue.isra.0+0xd5a/0x1600 [ 320.758121][T16023] ? nvme_tcp_configure_admin_queue+0x26/0x530 [ 320.760352][T16023] nvme_tcp_configure_admin_queue+0x26/0x530 [ 320.762378][T16023] ? __wake_up+0x3f/0x60 [ 320.763891][T16023] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 320.765701][T16023] ? mark_held_locks+0x40/0x70 [ 320.767435][T16023] ? __pfx_nvme_tcp_setup_ctrl+0x10/0x10 [ 320.769461][T16023] ? lockdep_hardirqs_on+0x7d/0x110 [ 320.771349][T16023] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 320.773419][T16023] ? nvme_change_ctrl_state+0xc0/0x440 [ 320.775347][T16023] nvme_tcp_create_ctrl+0xacf/0x1080 [ 320.777112][T16023] nvmf_dev_write+0x4ee/0xb60 [ 320.778685][T16023] vfs_write+0x2aa/0x1050 [ 320.780161][T16023] ? __pfx_nvmf_dev_write+0x10/0x10 [ 320.782021][T16023] ? lock_acquire+0x1d1/0x380 [ 320.783761][T16023] ? __fget_files+0x34/0x3d0 [ 320.785399][T16023] ? __pfx_vfs_write+0x10/0x10 [ 320.787014][T16023] ? find_held_lock+0x2b/0x80 [ 320.788574][T16023] ? __fget_files+0x215/0x3d0 [ 320.790197][T16023] ? __fget_files+0x215/0x3d0 [ 320.791922][T16023] ? __fget_files+0x21f/0x3d0 [ 320.793629][T16023] ksys_write+0x12a/0x250 [ 320.795200][T16023] ? __pfx_ksys_write+0x10/0x10 [ 320.796978][T16023] do_syscall_64+0x123/0x790 [ 320.798657][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.800806][T16023] RIP: 0033:0x7f6a0e59f559 [ 320.802418][T16023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.809249][T16023] RSP: 002b:00007f6a0f3c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.812256][T16023] RAX: ffffffffffffffda RBX: 00007f6a0e825fa0 RCX: 00007f6a0e59f559 [ 320.815106][T16023] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000003 [ 320.817929][T16023] RBP: 00007f6a0e636b20 R08: 0000000000000000 R09: 0000000000000000 [ 320.820713][T16023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.823573][T16023] R13: 00007f6a0e826038 R14: 00007f6a0e825fa0 R15: 00007fff8f33ca88 [ 320.826421][T16023] [ 320.850057][T15890] netdevsim netdevsim3 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.852651][ T5494] 8021q: adding VLAN 0 to HW filter on device eth7 [ 320.898003][ T42] kauditd_printk_skb: 83 callbacks suppressed [ 320.898015][ T42] audit: type=1400 audit(1793012644.515:10936): avc: denied { write } for pid=16028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.921429][ T42] audit: type=1800 audit(1793012644.535:10937): pid=15890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27354 res=0 errno=-13 [ 320.925533][ T42] audit: type=1800 audit(1793012644.545:10938): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=398117 res=0 errno=-22 [ 320.930905][ T42] audit: type=1400 audit(1793012644.545:10939): avc: denied { write } for pid=16034 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.944426][T15890] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.951322][T15890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.952241][T15890] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.953444][T15890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.960371][T15890] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.968502][T15890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 320.969085][ T5494] 8021q: adding VLAN 0 to HW filter on device eth8 [ 320.969527][T15890] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.984629][T15890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.022021][ T42] audit: type=1400 audit(1793012644.635:10940): avc: denied { write } for pid=16041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.024335][T15890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.035143][T15890] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.037167][T11282] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.037196][T11282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.040996][T11282] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.041048][T11282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.057468][T12170] sctp: sctp_close: sk:ffff88802d0a8940, timeout:0 [ 321.057491][T12170] sctp: sctp_destroy_sock: sk:ffff88802d0a8940 [ 321.059123][ T42] audit: type=1400 audit(1793012644.675:10941): avc: denied { write } for pid=16051 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.087360][ T5494] 8021q: adding VLAN 0 to HW filter on device eth9 [ 321.089085][T15856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.116239][ T42] audit: type=1400 audit(1793012644.735:10942): avc: denied { write } for pid=16055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.137632][T12170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.149233][ T42] audit: type=1400 audit(1793012644.765:10943): avc: denied { write } for pid=16064 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.182694][T12170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.204268][ T42] audit: type=1400 audit(1793012644.825:10944): avc: denied { write } for pid=16070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.207043][T15856] veth0_vlan: entered promiscuous mode [ 321.210667][T15856] veth1_vlan: entered promiscuous mode [ 321.224845][T15856] veth0_macvtap: entered promiscuous mode [ 321.231827][T15856] veth1_macvtap: entered promiscuous mode [ 321.232944][ T42] audit: type=1400 audit(1793012644.845:10945): avc: denied { write } for pid=16076 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.237918][T15856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.239697][T15856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.256691][T12170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.268532][T15856] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 321.287181][T12170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.290195][T11282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.290213][T11282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.293501][T15890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.294099][ T5882] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.294488][T15856] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 321.305519][T11282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.305537][T11282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.335498][T15890] veth0_vlan: entered promiscuous mode [ 321.343803][T15890] veth1_vlan: entered promiscuous mode [ 321.353886][ T12] netdevsim netdevsim4 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.370872][T12170] bridge_slave_1: left allmulticast mode [ 321.370893][T12170] bridge_slave_1: left promiscuous mode [ 321.371008][T12170] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.372543][T12170] bridge_slave_0: left allmulticast mode [ 321.372560][T12170] bridge_slave_0: left promiscuous mode [ 321.372710][T12170] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.440162][T12170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.441554][T12170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.442436][T12170] bond0 (unregistering): Released all slaves [ 321.456005][T15890] veth0_macvtap: entered promiscuous mode [ 321.458540][T15890] veth1_macvtap: entered promiscuous mode [ 321.470789][T15890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.475730][T15890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.503632][T15890] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 321.515717][T11282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.515736][T11282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.516405][T15890] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 321.523361][T11282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.523379][T11282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.524702][ T12] netdevsim netdevsim4 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.524878][ T12] netdevsim netdevsim4 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.525019][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.525093][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.525116][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.525143][ T12] netdevsim netdevsim4 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.525170][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.525195][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.525220][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.525237][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.662699][T12170] hsr_slave_0: left promiscuous mode [ 321.663165][T12170] hsr_slave_1: left promiscuous mode [ 321.663430][T12170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.663441][T12170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.674876][T12170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.674889][T12170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.681463][T12170] veth1_macvtap: left promiscuous mode [ 321.681488][T12170] veth0_macvtap: left promiscuous mode [ 321.681526][T12170] veth1_vlan: left promiscuous mode [ 321.681551][T12170] veth0_vlan: left promiscuous mode [ 321.735975][T12170] team0 (unregistering): Port device team_slave_1 removed [ 321.738073][T12170] team0 (unregistering): Port device team_slave_0 removed [ 321.933239][ T5494] 8021q: adding VLAN 0 to HW filter on device eth22 [ 321.946360][T12170] sctp: sctp_close: sk:ffff888035abc0c0, timeout:0 [ 321.946385][T12170] sctp: sctp_destroy_sock: sk:ffff888035abc0c0 [ 321.963860][ T5784] Bluetooth: hci1: command tx timeout [ 322.033947][ T5494] 8021q: adding VLAN 0 to HW filter on device eth23 [ 322.119287][ T5494] 8021q: adding VLAN 0 to HW filter on device eth24 [ 322.364166][ T5784] Bluetooth: hci3: command tx timeout [ 322.443875][ T5784] Bluetooth: hci4: command tx timeout [ 322.634039][ T5494] 8021q: adding VLAN 0 to HW filter on device eth17 [ 322.815164][ T5494] 8021q: adding VLAN 0 to HW filter on device eth10 [ 322.932157][ T5494] 8021q: adding VLAN 0 to HW filter on device eth11 [ 323.043082][ T5494] 8021q: adding VLAN 0 to HW filter on device eth12 [ 323.172751][ T5494] 8021q: adding VLAN 0 to HW filter on device eth25 [ 324.034267][ T5784] Bluetooth: hci1: command tx timeout [ 324.273888][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 324.433913][ T5784] Bluetooth: hci3: command tx timeout [ 324.955994][ T5191] udevd[5191]: worker [5800] /devices/platform/dummy_hcd.3/usb8/8-1 timeout; kill it [ 324.956055][ T5191] udevd[5191]: seq 14665 '/devices/platform/dummy_hcd.3/usb8/8-1' killed [ 324.967878][ T5191] udevd[5191]: worker [5800] terminated by signal 9 (Killed) [ 324.967905][ T5191] udevd[5191]: worker [5800] failed while handling '/devices/platform/dummy_hcd.3/usb8/8-1' [ 325.015057][ T5494] 8021q: adding VLAN 0 to HW filter on device eth14 [ 325.120068][ T5494] 8021q: adding VLAN 0 to HW filter on device eth15 [ 325.214428][ T5494] 8021q: adding VLAN 0 to HW filter on device eth16 [ 325.428690][ T5494] 8021q: adding VLAN 0 to HW filter on device eth13 [ 325.937861][ T42] kauditd_printk_skb: 112 callbacks suppressed [ 325.937880][ T42] audit: type=1400 audit(1793012649.555:11058): avc: denied { write } for pid=16344 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.989392][ T42] audit: type=1400 audit(1793012649.605:11059): avc: denied { write } for pid=16346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.018139][ T42] audit: type=1400 audit(1793012649.635:11060): avc: denied { write } for pid=16349 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.071551][ T42] audit: type=1400 audit(1793012649.685:11061): avc: denied { write } for pid=16351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.107218][ T42] audit: type=1400 audit(1793012649.725:11062): avc: denied { write } for pid=16354 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.113919][ T5784] Bluetooth: hci1: command tx timeout [ 326.175010][ T42] audit: type=1400 audit(1793012649.795:11063): avc: denied { write } for pid=16357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.217029][ T42] audit: type=1400 audit(1793012649.835:11064): avc: denied { write } for pid=16360 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.300393][ T42] audit: type=1400 audit(1793012649.915:11065): avc: denied { write } for pid=16363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.332051][ T42] audit: type=1400 audit(1793012649.945:11066): avc: denied { write } for pid=16366 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.356434][ T5494] 8021q: adding VLAN 0 to HW filter on device eth2 [ 326.416269][ T42] audit: type=1400 audit(1793012650.035:11067): avc: denied { write } for pid=16370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.496020][ T5494] 8021q: adding VLAN 0 to HW filter on device eth3 [ 326.514383][ T5784] Bluetooth: hci3: command tx timeout [ 326.630453][ T5494] 8021q: adding VLAN 0 to HW filter on device eth4 [ 326.747384][ T5494] 8021q: adding VLAN 0 to HW filter on device eth5 [ 327.206030][ T5494] 8021q: adding VLAN 0 to HW filter on device eth18 [ 327.308334][ T5494] 8021q: adding VLAN 0 to HW filter on device eth19 [ 327.422728][ T5494] 8021q: adding VLAN 0 to HW filter on device eth20 [ 327.540129][ T5494] 8021q: adding VLAN 0 to HW filter on device eth21