last executing test programs: 2m38.311132344s ago: executing program 32 (id=550): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0x40, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40c}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x882}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xbd3b}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x204}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x40}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x800}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7d178ce}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000040}, 0x8014) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0xb4}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x7}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f00000001c0)=0x8) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r8, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r9, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r8, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) 2m36.702360661s ago: executing program 33 (id=562): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001000ac77c7d01f5e88680000181100006ed12810e44dc9614cc0bc02bc32e8d380be811381ccd46f7e21750316cd18b1133297227ed87a05591d550238c09e02d471ba51765b9ba8747c11347e708e5e99a6d666c88f288eb3ed3766885972036a3ab57ab3ec0c3829f1012b62f7cb2dc3bd466be3b96f7a56", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x906, 0x4) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) (async) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0xa, @void}, 0x10) 2m35.285079098s ago: executing program 34 (id=452): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r1}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x181, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x0, 0x0, 0x0, 0x2}) 2m34.444053077s ago: executing program 35 (id=572): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) (async) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0xf5, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 2m31.899644148s ago: executing program 36 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x3, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = socket$inet6(0xa, 0x4, 0x6) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7f, @loopback, 0x747d}, 0x1c) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bridge0/bridge/multicast_snooping\x00', 0x1, 0x0) write$P9_RVERSION(r2, &(0x7f0000000380)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.L'}, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m31.305426332s ago: executing program 37 (id=586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ec0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x20}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x80) 2m30.174878178s ago: executing program 38 (id=502): mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0xb, 0x2172, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1694, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r5, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x80c0) r6 = dup(r3) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000180)="89cca9ad7f624c06000085087509000000008100", 0x14}, {&(0x7f0000000380)="1beaf385", 0x4}], 0x3) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000200), 0x4) bind$tipc(r9, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}, 0x2}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffb, 0x800000000000009, 0x3, 0x7, 0x0, 0x0, 0x4002004c4, 0x9, 0x76, 0xc592, 0x1000, 0xfffffffffffffffd, 0x3, 0x2000000000000000, 0x4000000000000b3, 0xfffffffeffffff04], 0xeeee0000, 0x201893}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_io_uring_setup(0x48ce, &(0x7f0000000400)={0x0, 0xd353, 0x3221, 0x0, 0x19a, 0x0, r0}, 0x0, &(0x7f0000000900), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r10, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x6}) fcntl$lock(r10, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x80000000000005, 0x5}) fsmount(0xffffffffffffffff, 0x0, 0x8) 2m28.740606147s ago: executing program 39 (id=593): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001ec0)={0x9c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x6c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x40, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000040ff0f00000000000000000000186800000500000000000000060000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xfffffffe, 0x4, 0x0, 0x4, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) close(r5) close(0xffffffffffffffff) readv(r3, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x3c6681, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r9, &(0x7f0000000180)={'#! ', './file0', [{0x20, '(/@.-'}, {0x20, '%$(\x1c@[[^[!'}], 0xa, "242bab56cbe6446d1a3ae0cc562f8fc0dfded85eb2219c6015d1240d9e7d44799691db00a529"}, 0x42) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000100)="0f78a8ab11f0ff4b2e0f7915baa000ed66b9800000c00f326635010000000f300f23d10f01ca660f46b71e0ebaf80c66b8c472df8c66efbafc0c66ed2e0f01ca", 0x40}], 0x1, 0x44, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'pimreg\x00'}) 2m26.832153672s ago: executing program 40 (id=602): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x41, 0x109, 0xfffffffe, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x300, 0x4048011}, 0x20000080) 2m22.057314611s ago: executing program 41 (id=655): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101102, 0x11) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) pwrite64(r0, &(0x7f0000000140)='2', 0xfe63, 0xe7c) 2m21.449325113s ago: executing program 42 (id=660): syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057"], 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) syz_usb_disconnect(r0) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 2m21.274124727s ago: executing program 43 (id=662): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0xfe, 0x7fff8000}]}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r2, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="82", 0x1}], 0x1}, 0x4) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.001474146s ago: executing program 44 (id=689): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x8004f000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m13.718428s ago: executing program 45 (id=691): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x47, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, &(0x7f0000000280)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x6040, 0x7, 0x8005, 0x5, 0xcf, 0x0, 0x1dcd, 0x4, r3}, 0x20) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0xfff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000380)={0x3ff, 0x401, {r0}, {0xee01}, 0xffffffffffffffff, 0x4}) 2m12.806474405s ago: executing program 46 (id=701): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000380)=0x8000000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x400800, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$AUDIT_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3e8, 0x800, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48040}, 0x48801) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r6) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, r7, 0x5, 0xf0bd24, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x40800) 2m8.360627376s ago: executing program 2 (id=722): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2, 0x0, 0x0, 0x60}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)='i\f', 0x2}], 0x1}}], 0x2, 0x4404c880) 2m8.360402922s ago: executing program 2 (id=723): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2m8.280125608s ago: executing program 2 (id=724): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x34009803}, 0x4004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0x850003d1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x22) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="170000006a0083130000000000000000000000000000009eac66e000", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x2000008c}, 0x80) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r2, r0, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r3, &(0x7f0000000180)="b018ed32913c83b73d18cf7d58", 0x3b, 0x40080, &(0x7f000005ffe4)={0xa, 0xf7ff, 0x2db6, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd4) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r4, 0xffffffffffffffff, 0x2) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, @mcast1, @empty, 0x0, 0x0, 0x16, 0x9}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"], 0xb8}}, 0x20040014) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0xd7983ab608da75d7) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x60, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2m8.06105295s ago: executing program 2 (id=725): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sunx86\x00') 2m7.997644351s ago: executing program 47 (id=725): mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000440)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sunx86\x00') 2m4.394375047s ago: executing program 48 (id=764): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x10, 0x10, 0xd, 0x9, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @rand_addr=0x64010100, @empty]}, @timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@broadcast, 0x40400020}]}]}}}}}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x1c3) fdatasync(r3) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@getpolicy={0x58, 0x15, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in6=@empty, @in6=@loopback, 0x4e24, 0xa2, 0x4e20, 0x3, 0xa, 0xa0, 0x0, 0x2f, r1, r2}, 0x6e6bba}, [@iptfs_reorder_window={0x6, 0x25, 0x2}]}, 0x58}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)) 2m3.94658856s ago: executing program 49 (id=768): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x2b00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0xc4, 0x8, 0x2b, 0x5, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r1, 0x5, 0x5}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(r2, &(0x7f0000000000)='./file0/file0\x00', 0x101, 0x12) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000040)) syz_open_dev$I2C(0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r4, &(0x7f0000001fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f80)={&(0x7f0000000c40)={0x1340, 0x15, 0x1, 0x70bd2b, 0x25dfdbfb, {0x6, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "0a85cc809076c403a59104989039c07724b2ba8a5cb9689a3bcfe4931e627055e33ec687099e2d003cf6056b2df21692d42b696f1e7ce137e5bd14ad7882bfea2a6496b9edfae67b"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "28cb97119f2cc3a861ea03f4e983ac9ddb5f38e45bb21638094eed9f592e51b412bf4a70dccbdf0ac5cd1e08bb9f795b8792cfa7f5f8c589498306fdcaee60d10f5d001c24ded033afc0daf941146e795cc8ae2edf3f1f0995196190e592d4bcb76300314204ac722e029640b43387d0814e1c576325094fe91b9688274dd7"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "dba28bd1983f8fb2b5e277a92eecaceb149562095134d70da4013c36d670415a899c761fafad05d863e41fae35257947b493adbdff0d80f866bb167e5e87ba4ec7584b8596d9cf8bb5155eafcf427efb8742b3a7ddcff56745c3b3bac9241964388b658cc3440835fc56a19a69583827e68bc30bfaf411bbbc92068abfaac0ec9084e22b85a9668517237a64f7f4e82cf96b31b64a48038019b8ccc51e66f1783ad8eb904afe3fe47219e0c13390b59a4ce549da04182016d2845f071548a9a66452ad88929fb175a073bd94"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "13e1c288905e2cfb6772fd412677d2c5b396285d04f272292e086853e8d2c2f539403ff07048cc5a0f03a0aa7010f0aa13b5db43fbc9b67bbb62ab2eb2ca8e0924ec4deee2b698d5aaa263e7b17cbd352f2763c770be7804a5fe21bae510be324db45e8324434a7dc3e91087693f7c228155873e377f6c978df5d4e5b4660a0b91855580d0af7f874759ed2a54b0b42df5b6a6e9cf81e10486715352ca6642b92a2661e536d3dd0d3b604dabce62c72e6402e64fc930e2939a4f954577407d0648e5d117adfe1551e4f288a9ae7289b3d4"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "7c2822a95c2d7881d806eccc4003aa12653073965ef924b9c8c780bfc12dcd8e554449327adf63935e3928cb12acbd76209c892b37eb15a73732fde5b772140acad7c7aae19cd88d0ace0283c7b63243263cee52d92fb3b2cdbb065e47ac10c127e1a1d2479f68d579f396bcd80de92a888b1962c852919ac2b9e5c6462ff7241232735192c7f09bc6cb4888f4ac029234bc08fe52fdeabc31604f4b9e37"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "67ea8f48cc"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "57eb0be43efab28f0895dd2ac5e5338592f730764699156846173646ea7df674831d3b5ce195ad5402b9d9dad466be9ab8fdbc7086c7f282f574ec630f67472febf911f9d64f933e99c88cdfbfa1a262137300b33407a536b53c5ab29be780725b5136f246c2c16604e765c931d5760001b3009acbce85dfb07dd4c275d17de95f94df03f4f2666fe7758abfd13197c4e1f185937e1464e481d9ee7c46e9378cccd790f52e9c59d7b1799a1900c2ab294c24e86f7e07747c99fba7bf1f7f5e7e94202ff7ea7ced04bb830186356d4dae5de71db1654bace162aea37c6e57a55bf28c852fb4780999b64f5cf3a68ce61e2bc13c245be625bfe0f6719f3fbce603b2d91e9ebc7678db395c81e6dfe7da1b00134db613f0c541992d812a18a89bcb5b3c99945ef815d29e753e9a0e5a3b6e78281c5c17c7a56b864f6e375df8aa08177be6cdf8f0066fa477ca74a147e7b3c779eee6de8ab69e4a2b4ee25f905022e95bcdeddd89b85a63aaf3009b6a696177e1c38a451029031f2f0dc6af67a9540e3d134d4599314c0e147fbb113e025f7df9e374496b32e375305b5bd67f2fad15c5e30d3d2d87ed9855a5e1957381d608f4f939525b15dbb0b8656759046dbe8e7d977ecd772c2d44607c67814c4cecd3d8696171c9df8062f5abcd98e22bc4cef97148e95060541995ab8933e06cb026ca532f10515097a38551e0bb5cbf294467af8ffe8b9ad78d9bfcd0e7eccca82b947bf0e65bdf4e542df23dbeecd104a48b2cb07f66815f0352134871479fbfdd8dafeb2725e8b1996abec78eba5ccda334311baf14b1619ce69eb9d595507424168dec34e27f4f3baf13b78406cc3e9fd25e2ce0901abf34275513c79216e2191ad11486f3f1fe719af1dd7e92deec7fb23ea51ff2652cbcf809e22d6d026152caae9915371c27c1fa788f22596eee598ff2bac4ddaacbac020f1bfc78e2432116791815e2633c2af20740c816e6dc283ee73ffc13c11ac21582963dd0046f718e17634d5257ddaa1923f138fe36ab81b3dc5d53d738c7f6edb47dff2fa60cb5538def5d4e35e22d0811f2736b6c3887b6bf82cc6a2802113e9e52a367850c4e2dd62d97720733d3345a1c4f456a61c85b8b666cd35f9ad156b328ab0c9a2eebc13d92fb2b48e40ea7ce81a017a3924c63bd646330bf9f00f55e645375d8888fe0598d02d4d492580e86de76bc98024e42b54963adbdb9abbc96f39e5e22cd52ec89711da5d2b4ecb5516dbb635d721fb3af300c9cc59074b034ff37b90156149c0f556dc45eec7b2a3067dbd77619dd3897a68a1ca6c09e8c6e19d7090d35674775d1447a7bf4f6fae46fab4d9acc9eee0356a1cd3cc7e61df3a2aa32785dbeebc82c502617e14ad0dc31fee72413ac85dc5cfd7e9f65f12ad534303a5eb3a5652726c986bbaef851498afc2fddbcd19861ca1ce43ccd37d3e9a766f441752c81f012dee246d9bb77a6f85610251489e5aca4a5c39f4c944f9cdc689c323e3a32bcfc2f4b54c28f7d244c0ad6d069275d0a27e25c806179ba3002620cc7c95c9f92cdb6b4c8632452d519c1139e1def3e7057199cac612d54df6dca4264c496ca329ba542fb12e79efa55e06f62c7597e9c08d79f05d506fffec3b55b233b00cf9ed655f54d5ffa3277c3b99487a48b46b7be6a1f26fad21ae405fc2b4c9a306a25cc88096be170b243f320a348ac08c57456625f39af1b4c0eac01c230b3e770038a4a93cbae62d7fb7135891ef710fc91e81eb652d3da54b30a9e004876dd5b1ff29319a5615f69b9f78e9e29b742981feb03735267b0086c4602df72fed24bb177ad7f2067bf3f13b2bd4cd169b313c1ec25a0fc09ee3d0ee4c85b8096a3a049f9f7fca14966b741d4db9f47b3f1169010d368134aaf43fa237bb1e286bdb54c6775173eae6a8baca36dce444f7f1c225f38dfb6daa2c2a47980471fed4bc66c07c920d0809688712fb235a42d2022309f6f05ddcd699bc6a5627b9e4e88961198341f84137cd5819fda58ed6f9ebd33010715944e545896ca38921c1685e5d3b9933eb17e0958f95ac2952e9bdce5b3887946c3179e06a5e25243719a99913792fb341326656db9c90f5f344f6796a010270f243f5e96d7332b36e033941f51feac7ca2cdfe0abb8ee2141a25af7501a90e3ad944edce8390009bd490ffb86964667f684861957718939cab11edd6a15344e9470785b3e2bee435aa8f557c4012123d8146d9cb6f0ccbed6e2c1b7ffc4678966192733bec710f3a53ed19193d5a968e160b9cf8cef752596db41f1e7f684bb2e4768154331298ae4471d0702e00417fb8725149bafa89a55ba8d2f76a11cb696d64d03265dacbe474de60dd1e60ebc3c76d4a8de7d17b32e4c5ab93bef3f5b581fdcdadd7e3aca122490f318be9b6d078b9a02a7258ded7b00c55f53cec5640a0ded3e9c6c49d275ac5660f8159cb7458aab6985b8652b50aca1935990f3101091a2564306f25329b341e056cf606746f1e72d55a91c7b3db6c794cdebb1dd27775e8e310b8ba2eae4a90d5418ab27a1b4af631c1a3344948dc56740ecbc49f2f83946f4178dac3509281f060ece61098a9df80241748032dba8be7645ec864115b9a8dd50e0d14644c873a7190601ef8c1fc2d327b0f38f29585390540cee8f6c713093fd0d6c5573fffd0952de86c19a4b59506f05e6918f785915c54a03d88a6af5f2d8256093cfe491bf1610e6cb3d41c11074079139865f5f1edf2c8fe0e77b145b063825eb9a17bf8fa330a3463ec897a5044b2f0f0a2663191c3c96caa1b7b44a3f29ffdc4fbd2c2fc060d26c03667441878f941557ae797aff05ea842c2457c3dbe01f00493612acecd2fb51585f0a6040ac812a23af15207730b9bc3c47709a09224e4ca60514d0672face5181cee23dd24de9ca8b30435dbad07692ba509c1314e6a5e3e16d8e060affd8c595f14e3951d80e12b728210187fb0a50f640b6b3504d2836c2dadde511db6a320f66561bb722273a13c189e480ca3962e6907fbd3316e4c9f14dee9e6bc03631575c8a21d26c82d64415a123da162f739e589754eb2608f86d74c5a36f91218462721f6cf870c436587e466269f870fe26100883167acc00b17e324b8481df0aab707f3c03bcef12d8c0fa6046e5efaae540bc8ce9f3f662c1129432d24381defb64353f2d98faa597f23dd3c86f7b8b9169cc1ee35d6e20b55705f79ab425158c4f2c4db9f0e5b5b0261f1dc383b0b3e332c789b0acea5cb16c7c3cbd43845464efe9617e69d4f11f568e395cb29aad246a94a6dbf9a8ae309bb19c292f29204853ac2265c9f06ffc17079d380b09f2ebf921be5e83734331bd951707fc6b29c2cc9a477b032994b00eb89903e453e01bf2760ed6e6d172cae8021397fae68359175222f27c5fc020655cba620befbac6c79e03fc95bd145735768d0aeaafd9531e7dae9cef53c38354d9246cd4a27d1fef472d790cd410be93f0d6c287f032fb544383934f6c6286eb8472196c77a71db4af4f13c8142f11a8562749b2ff94607b47adea520beee8526fe8d210cb288e5a91b89537d5f9efb2e39fe234234fa7a2700c97f7f5d315a745f8c099c39dc6d10090d017aa8731a8215328f7e69d3c5d830c3ba19d8dc2e3fd40052aee9fcfa993dc007c2dd0c4e25294478273d11569820ca01d4e2296c84aa2fbd172ec66c4916a2355cd84d127e5d5cced208ee392fd2c867126ad3584c50923a2c02fa1cb6d2c6b60cd8ae5fd142a93d235d4aefd30485cbfb05da20e46bde40d8ca1d4f52b66099760402eae6c66b93ad084ab1500efdb0ba8753d7937fd89143aa51909d2cdfcc425169d613aea00d707b2e3760bfe50a146e7d2487770a1fcead6c27a12769a77185eb07589ef334f9ece04a8d581bc959e5845b3cc313e78269decf7cf33d3f34b7962aef6df7af4952d9aaec68a285a6e2d7735154d975233495fb026878764f8a75247f2c979a0a36e0d450e034cbf2a82482b09673918a2ccdef9e96dff32035ea05715cf838609e90405e9c075fa22c4c201b61b04c20e043ae187666a0e3d047a9cbfe55620e7fe3b93124a5b090b7daaf044a9587da103c1aa1caed871cdd719b1c0834da8f6241e8b2cec954051ede0733770dd2e7f5a3f42a40c42046ee1f954ab70ed0e2ed4f48118912ffa075c58354ca471c22dbc7eccd35f734f4eda32d2913efaf43efc72b3514ed12659d62456fa3dce54b723a55984e1e4211411d0d45c0e6b888043ee149d04f3f93739c40c2febfa220a6596a3acd21779aaf68ebb40d61bee5179bc6aa66b2227b6cfcd3bd363b31c72b41ce1db4097fd6b2dc1670bd8d588842e9ea233b9d7f3c67e92d6ba0c36f048c122bd9522cc60ef3c2a9f53521a38ad024725a6d4bf0b20ecb10f40e8df4faf984495be7ef84af31177a6a0984f2712b5a7abee1f5e60e252abbf94807f19beaed03b23e26205913c26cb446da13f1bde6145b7574f75fe90bb16f2c6ae3b48c6ceb1672c68c31015cf32087ef350ff94c3c24f4429912705a944f6a6415ffa949985eb3ce7fd7ed8833d0b19919251104e7cf95ad099fc835ef8dbb5e1ba23dfc8e0dfbdaf9fb03fd338808e0f04286520d6a2e1a1957fb61f1792401bf82954391a7ba69b543a66e73072e826cba7b57b969287ddc0efe870c5b9c9eb56936b838f37a330483d53300826d33abbcf552a28e02be1dde53d7538d8add4c05f47a8b019ce30f05276f31bc6ed5cd4be4d6af83f52b86bb934eff7d092cb41d59afa175979c80b84829aa7efbadd747c49470b1fe7d967786b468df438eb83717265cd337584560734999e880d212388ccf4df3f70a28c87da682f337d85430bf9d74ab2b78952d39fe8d0e6764cb8254ccbb772dd278b88d317864d0d4102543a764b28b9536695a1a169294dc6285e3628accf4746f37b29c8c8e76397339613bb6a2ad2cb9e7116351f7b285dd7df416af4cc75fe018d90b30ba95ebc8f5f68a7c4e2e5e51076780bca87804f4acd1dd552ababa1a2b1929b34d4e3ab548726814ef606d62b9b21bb0104b3bd2953061ed5dd09c9891e61a92a45f527f1de74afaf09c54df6efb512d147433555044d5c45b40dc8682916822207c010663a55f016ca57cc626248f02fcdec801dbb9204a0827ba07eda52be6d0ba3d74f29992b224cb7e4449439d35265c9c070b10f1499860a694ad49a0b53aabffd69e4ab8989010cd092c8b279bc814db53346531e7d1f72c2aa3e85ae28b9c5c5fc506ae289366a271b9c007ab81e9d3453b7fce6656b861935b9416136eaa96785d62e714c8e324cd730a1f50c3688a2b211f75872c27947ca2f2c2d28e52a64a59dadf2d22135390e165dc3bb899daebb24222af7090b760c151fbc0170c9e049de66a3c18e93a81f7a35d0a74d6676fd64d5a37ba9c69fd3aff91996b7e56ee1081be6fe938ca879c8f29a2ab855fa5057ff4a5290ab5accad0ecda412633c5fa93d67d7ec4f6103ce1146f40b2d8cb81bb5eb839da718bb4bd20ea9f9b84214883e213c43b3c3ddd20a5ae541455ea6a554c10b4e2e95c9810a72abff3a891fb75abf2e68b7fbbbc1c8b6d1400694bcb74fa3c9dbb9778ac7b8a94a4f4d8e8bcd406b78f6e77d472cd92d9ee3963a4245977502700fd19f86e38d6ef10920a5c51dc919daefdd216a52dfea430bccef51ca0eb1bc31bfd4b299d0288abbccaeabe8420a2a4ccc1b6917fd139e32e289f2696464af48c0c1e22ee3"}]}, 0x1340}, 0x1, 0x0, 0x0, 0x20000000}, 0x4840) 2m1.569684177s ago: executing program 50 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x3000000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xf48, 0x0, 0xfffffe3f, 0x10000, 0x0, "4d0000000001000000fbd98ec08100", 0xfff, 0x800}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 2m0.915894624s ago: executing program 51 (id=791): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) unshare(0x22020600) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r6, 0x1}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x5000000, 0x1, r6, 0x5}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000011}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3ff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000804}, 0x20008810) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) 1m53.814633689s ago: executing program 52 (id=825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc/file0\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000780)={{r1, &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000180)={@align=0x9, {0x2, 0x1, 0x7, 0xf800000000000000}}, 0xffffff89, &(0x7f00000001c0), &(0x7f0000000200)=0x2}, 0x5, &(0x7f00000006c0)=[{0x3, 0xa, &(0x7f0000000240)='\x00', &(0x7f0000000280)="dde38c8b7fb07ba3d0d2c325910ac82e737f90f14fa0a1ed9bb073aa2e3a789e8bdb884d01731917a46d82c1631b7ef9f666b9b0a6b250332b1e5b7d8104348440f5865bc39c00c3c52357c91a5517603d6a12c3da3ccaea80bb42bb371eef2e984cb0ff2b04aa599a3da09b9f07b8f6798823af7f8f849873966dbb0bd73d5f642c63116359c843fc31771a3c778b626e7bbbbad7e8c1544e631c7f7bc63c75bd41af6614ffb701f962d5c4f8bab8caf7aa0b3e5b974f5352ce4900191ff75810a86be4cb2cb540", 0xc8, 0x18}, {0x2, 0x8, &(0x7f0000000380)='/dev/kvm\x00', &(0x7f00000003c0)="d900503a8c8099eb14f114cd95ec490a03640ce4f65847ee01a166d085e25881fa9d64055fc468334fd899e5b5b78361e375889c3420d2c919b25c6b048dc1f32e28e215303c313f08f98b20defe28ef7eaeee5d0033d57cde65e51f9d32c50cd6baee69070fe3e2abdf9c238c901d1db45fc60fd5a0cf46607e4d698e84f5d3909ac45a6efc0e44a862e1777dd862b43da8a5f413f0fbed0b83881c", 0x9c, 0xa}, {0x2, 0x1, &(0x7f0000000480)='/dev/kvm\x00', &(0x7f00000004c0)="bb965f805efffaa5648e45371d5bf284fcb3a8", 0x13, 0x2}, {0x3, 0xcc1, &(0x7f0000000500)='{^*\\@)^\\)\x00', &(0x7f0000000540)="4ddfba28b538b15b55609e35e657e21330c7630997784ad3f7217b69af1550bcbdc0221f3f08e2efae6796093deefdc5a4", 0x31, 0x2}, {0x1, 0xa00000, &(0x7f0000000580)='/dev/kvm\x00', &(0x7f00000005c0)="f87975e69f6ff3beadb1677df58e4be824932723b76a1f47791c78bc71b685bb7e6a6ad672f6721f46c815f576b56ebc9f6e24d1ed97c3aab3e5fb98eb528f851b7317334172fa984d24470f2bb5a90e9dfbdf58d58ba5b751013f1830f3f5870a139279054a7fe824246879f144601de2a7c74c4b3facca39d09111de6e7f3260432422526e7ee45c975bc60447d6f072e1d8a2a63bc1c11de866563074d35517579f53b8da723b9a952293c8407b53e459a680086531a3e2cd936703597480e27f4a62c5faf79f419b20d6101b761da8ab31774c47dfd0d3ed0815a7888f686716491f92851ad9f7d3da9ab9a5f2a18d415093eeb3", 0xf6, 0x2a}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) ioctl(r1, 0xae60, 0x0) 1m53.253205981s ago: executing program 53 (id=829): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="703a732f5f202e2f66696c65303a30f598a24f5aa26e5fae28ebadb9ec6b95cf5757d9cdcc420a8e231424bdb2a2533b5c0764522799c67c78363be75c0c39a2269c942ade722b92d1d950ab2fd6aaf3a208ab77d3c68f36147e1a6a42bce60a3cec9e01442ea2506959a7c72b167d1a1b36d880f8e154cd831fb0b7f7b08e702d504caa6c8047a3ecb8a78d5809", 0x8e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357", 0x2f}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = gettid() r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, 0x0, 0x0, 0x0) sched_getattr(r3, &(0x7f0000000040)={0x38}, 0x38, 0x0) syz_emit_ethernet(0x9a, 0x0, 0x0) pipe(0x0) r5 = fsopen(0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) mkdir(0x0, 0xd8) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) sendmsg$can_bcm(r7, 0x0, 0x40000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 1m51.276349357s ago: executing program 54 (id=834): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x2e, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="ac440500000000b0f60012800b0001006970366772650000040002801c002b8008000100336e65d35d013990b25a5423273273f78d3ee79a416b44ee04947cb265672cec6b73812d30ac79171a4839b54adae7dbe672ecd3de8386c369184be16a8c0c12149b05237c95c8a2c5518527145fa1ddaef4387b800dd0c21ff4482be1b6c8afe6a72de5a6527d24c4e3a0b173fe0497", @ANYRES32, @ANYRES8, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) ioctl(r2, 0xc4c85513, &(0x7f0000000200)) close_range(r2, r0, 0x2) 1m49.35600157s ago: executing program 55 (id=840): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0)=0x6ba, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x4004004) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m45.696730584s ago: executing program 4 (id=835): socket(0x400000000010, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount$afs(&(0x7f0000000040), &(0x7f0000000080)='./config\x00', &(0x7f00000000c0), 0x800010, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x70bd26, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0xb6b) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0106d4", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x4, "128ea3d8552b6c34331b6c7f10e5f63dbabe7f5558e3d0cb46e9bb80e9ff3cb7", '\x00', {"6f287b23e92e70dedcd9166f0781d355", "8c78f365a790ab0b8186b2e40286001e"}}}}}}}}, 0x0) 1m45.562228229s ago: executing program 56 (id=846): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001840)={0x10, 0x1001, 0x0, 0xf00}, 0x10}], 0x1}, 0x10) 1m45.521188089s ago: executing program 4 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000108001b00000000001c001a801800028014000180080003000100000008001c"], 0x44}}, 0x0) socket$unix(0x1, 0x1, 0x0) 1m45.520934183s ago: executing program 2 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x301100) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r0, 0x2001}, {r2, 0xa010}, {r2, 0x8}, {r2, 0x4000}, {r1, 0x20}, {r2, 0x50}, {r2, 0x4c0}, {r3, 0x8653}], 0x8, &(0x7f0000000200), &(0x7f0000000280)={[0x5]}, 0x8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r4 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$sock_int(r6, 0x1, 0x27, 0x0, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x3c5f22}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m45.410004597s ago: executing program 4 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (fail_nth: 6) 1m45.358035768s ago: executing program 4 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1m45.357680666s ago: executing program 2 (id=851): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b502000000c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcb6ae3e198f67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x501000, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x10, &(0x7f0000000a00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@posixacl}, {@cache_mmap}, {@posixacl}, {@cache_readahead}, {@access_client}, {@noxattr}, {@posixacl}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@uid_lt={'uid<', r5}}]}}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x11e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001680)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x3c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x40086610, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000240)=0x280000, 0x4) 1m45.259324998s ago: executing program 4 (id=852): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x60, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007090001007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000300)="0f22a6f243ad660f3880437db9800000c00f3235002000000f30f3460f0942d8f1c4437d04c5e1400f01d166baf80cb8ac65f48def66bafc0cedb9df0800000f32", 0x41}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, 0x0, 0x0) setns(0xc9, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) r9 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_MODE_SETPLANE(r9, 0xc03064b7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x80000006, 0x58, 0x0, 0x7, 0x2, 0xc, 0xfffffffa, 0x31e}) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=':{\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000020000001200000008003900f9ffffff080039000200000005002d0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8084) 1m44.6012942s ago: executing program 4 (id=854): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) 1m44.509877766s ago: executing program 57 (id=854): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) 1m43.000064615s ago: executing program 7 (id=858): signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x184, r1, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf8, 0xa8, @random="474424ffb35e77986458b7f2ee8fb423685cb8125dafd8577f5e7a126f0245df85f0b0a75d65ffbdf34ea4ada5bba7cc8eed17d6556e4633da38a340011ab792364e8aaaa38c56d54cd560d164e8882b27f9d6caa2a701cefc9df076d49b1f4f1d8f3bb5d0d7d2711d0cbee483cd5833786ea40b9bc0c0e0725a4d7a1e05547be3428fc7aee207c2373c679c73eb9d7519af24ec62a63eb661f7f4a6106ef1cd14eaddcd41c9a337866858d16bb2d94910abca42d9319cc97758096ad5fb9808127da945e7f3aef8030db7b8fe9e0ce0f46366645b6fac4ef7ce116d52451083ea644b622dd4b2a919a6deb488c9789ecff5bcd4"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x42, 0xa8, @random="12081e5fe48bc72a2d6eeb8e1bc0f03bca20d245820afa347e89ec08676093c85c7d5cb32c802f09faa8c45a1c8e132c59cf34acba8bc545cfeed4739563"}]}, 0x184}, 0x1, 0x0, 0x0, 0x40850}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0) (async) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x4, 0x0, 0x1, 0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc6}, @SEG6_ATTR_ALGID={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000004c0)={{0x84, @rand_addr=0x64010100, 0x4e22, 0x3, 'sed\x00', 0x6, 0x1000, 0x2}, {@broadcast, 0x4e20, 0x3, 0x4, 0x5f1, 0x4ac5}}, 0x44) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x5, &(0x7f0000000540)=[{0xfd3a, 0xba, 0xf, 0x3}, {0x9, 0x4, 0x5, 0x9}, {0x3, 0x8, 0x9, 0x8}, {0xf, 0x4, 0x5, 0x1}, {0x1, 0x64, 0xff, 0x3ff}]}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/profiling', 0x42000, 0xa0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000600)) (async) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000600)=0x0) mq_notify(r0, &(0x7f0000000640)={0x0, 0x8, 0x2, @tid=r5}) (async) mq_notify(r0, &(0x7f0000000640)={0x0, 0x8, 0x2, @tid=r5}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000680)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000680)=0x1, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r7, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) (async) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r7, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000800)={0x7, 'wlan0\x00', {0x7}, 0x8000}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000800)={0x7, 'wlan0\x00', {0x7}, 0x8000}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDDISABIO(r8, 0x4b37) (async) ioctl$KDDISABIO(r8, 0x4b37) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x32) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000840)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x40000, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_CSIF_INFO(r0, 0xc0106440, &(0x7f0000000900)={0x1, 0x8a4, &(0x7f00000008c0)}) read$msr(r4, &(0x7f0000000940)=""/4096, 0x1000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001980)=@o_path={&(0x7f0000001940)='./file0\x00', 0x0, 0x10, r9}, 0x18) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000001b80)={0x0, 0x87, 0xd9, &(0x7f00000019c0)="b23fc2b3e8200bc937110dcf300af2d3a2ba025558508b42a74399e38b7c96bcd405c503b9d25fdff47147bf3ff5c8a53914de91fc2798df5b3911e11d0b7228aad0e559384219b019431e1a3b81d7594289ef89ee3d9bab336c6829c2e0460bfd517b437922261895d603cda7a57cd7d07f2b372cfa49d896636cc5fb31aa24e4e1e6941a9a02", &(0x7f0000001a80)="28d2f8a65d322166546994cf6d92ec28c0fbd278ea6f3ad39c8f33ab5c485d759c413ffc95144a860787da17cfb8793c4ec876b677c08476e0fa014c67b6da6987b12db57e3ae35c197bffa5b8268462ab05a32174b0d2dd4a6d45572b56bfd4f2d96d78a2ddabd012b6cea2e1dc97e8d340f7af37d4c78567831ae5a7c701a2027611e81ac2461ca6317086547f5b5ca89c97a007bb419038e2ddc15402cad060d1cf9b380fc37b00ee1e2a8d5865338defe77f70fa8925d5ca3edeb3ace992415793761cfa5ea8dd0a2dd8f1071bbe7844f4c42377224d2f", 0x1}) (async) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000001b80)={0x0, 0x87, 0xd9, &(0x7f00000019c0)="b23fc2b3e8200bc937110dcf300af2d3a2ba025558508b42a74399e38b7c96bcd405c503b9d25fdff47147bf3ff5c8a53914de91fc2798df5b3911e11d0b7228aad0e559384219b019431e1a3b81d7594289ef89ee3d9bab336c6829c2e0460bfd517b437922261895d603cda7a57cd7d07f2b372cfa49d896636cc5fb31aa24e4e1e6941a9a02", &(0x7f0000001a80)="28d2f8a65d322166546994cf6d92ec28c0fbd278ea6f3ad39c8f33ab5c485d759c413ffc95144a860787da17cfb8793c4ec876b677c08476e0fa014c67b6da6987b12db57e3ae35c197bffa5b8268462ab05a32174b0d2dd4a6d45572b56bfd4f2d96d78a2ddabd012b6cea2e1dc97e8d340f7af37d4c78567831ae5a7c701a2027611e81ac2461ca6317086547f5b5ca89c97a007bb419038e2ddc15402cad060d1cf9b380fc37b00ee1e2a8d5865338defe77f70fa8925d5ca3edeb3ace992415793761cfa5ea8dd0a2dd8f1071bbe7844f4c42377224d2f", 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001c00)={0x5, &(0x7f0000001bc0)=[{0x2, 0x7, 0x3, 0x4}, {0x15, 0x4, 0xd, 0x5}, {0x5, 0x9, 0x1}, {0xffff, 0x2c, 0x5c, 0x4}, {0x46, 0x2, 0x2, 0xa}]}) openat$comedi(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/comedi1\x00', 0x101000, 0x0) gettid() ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r0, {0xfffffff8}}, './file0\x00'}) 1m42.920850099s ago: executing program 7 (id=859): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a00000200000024000180140001"], 0x64}}, 0x28040111) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf694}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000004000)=0x10, 0x24000002) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0xd0, 0x1a0, 0x0, 0x2b8, 0x1a0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, &(0x7f00000004c0), {[{{@ipv6={@mcast1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0x0, 0xffffffff, 0xff000000], 'hsr0\x00', 'ip6tnl0\x00', {}, {}, 0x5c, 0xf7, 0x0, 0x14}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x1, 0x1, [0x2, 0x8, 0x8, 0x6, 0x8, 0xc, 0xdcd, 0xa, 0x0, 0x1, 0x7, 0xe, 0x8, 0x7, 0x5, 0xb], 0x9}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffff7f, 0x33cd0f9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@loopback, 0xa, 0x1c, 0xd}}}, {{@ipv6={@mcast2, @mcast2, [0x0, 0xffffffff, 0xff000000, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 'wg1\x00', 'sit0\x00', {0xff}, {0xff}, 0x3a, 0x9, 0x3, 0x40}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000b80)=ANY=[@ANYRES32=r6, @ANYRES64=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4080) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000013000000000"], 0x28}}, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="f49222a1063667b6f9915d23e5a3ba3df5c3c1e3742f330eb088cf887250f16da8316652e0f1df2588da08ecbcb887d0153ba4d1ebc55f1f62eac91ee7dc6ae0724400a9a6f2a567ad06fc09a7318fe304ebd056844e5e8ee52cee080ce444fde2f4a534d918beab04fc4e110d4f60ccae851b51d8dd163a1b096b6dd544a0647b37658756182e0f87a6855dc7e7623bcca876be4fd3d78f37a42f0f8d0dd1a21369c1dd9a9e57880f97b90c4fd8ae95a675389be7e000000000000000"], 0x9) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x4010) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r9, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001800010400000000000000000a000000fe030001000000000800040001000000080006006400000006001500070000001400168008000100060000000800040001020304"], 0x48}}, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r10, 0x0) 1m42.861004524s ago: executing program 7 (id=860): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000304000000000000000000007000", @ANYRES32=0x0, @ANYBLOB="000000004f32010008001c00", @ANYRES32, @ANYBLOB='\b\x00.\x00\x00\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x4e811}, 0x0) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000200)='c:\xcaZS\x91:D\x00]\"T\x94D\xfd\x90\x1bK\x8der\x89\xd6\xef<\xbb\x9a_$\xb9\xa5\xcd\xd9\xf7\xaf\xcb\xf66-p:\xe1\x90\\\xfdG\x95\xe7\xca}\xca.\x92\x81s\xc3\xac\x84\x059\xe9\x81d\"\xeb\xde\xe7\xb5+\x10\x1f\xdcq|\x18\n\x04\xa6\x9b\x1d`\xeb\xa1\'N\xa6\xdf\x17\x84\xf2=ev\xf7&\x13\x82-\xb9\xc0P\x81\xe9\x05ng\x92\xeb\xd7\xdd\xed~\xc1\xe6d\x06\x80\xa0\xa3\x9br\xcd\xd8A.\xaf\x81[\xc4', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x502}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000818000/0x400000)=nil) syz_clone3(&(0x7f00000005c0)={0x42200000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000304000000000000000000007000", @ANYRES32=0x0, @ANYBLOB="000000004f32010008001c00", @ANYRES32, @ANYBLOB='\b\x00.\x00\x00\x00\x00\x00'], 0x30}, 0x1, 0x0, 0x0, 0x4e811}, 0x0) (async) fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54}) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000200)='c:\xcaZS\x91:D\x00]\"T\x94D\xfd\x90\x1bK\x8der\x89\xd6\xef<\xbb\x9a_$\xb9\xa5\xcd\xd9\xf7\xaf\xcb\xf66-p:\xe1\x90\\\xfdG\x95\xe7\xca}\xca.\x92\x81s\xc3\xac\x84\x059\xe9\x81d\"\xeb\xde\xe7\xb5+\x10\x1f\xdcq|\x18\n\x04\xa6\x9b\x1d`\xeb\xa1\'N\xa6\xdf\x17\x84\xf2=ev\xf7&\x13\x82-\xb9\xc0P\x81\xe9\x05ng\x92\xeb\xd7\xdd\xed~\xc1\xe6d\x06\x80\xa0\xa3\x9br\xcd\xd8A.\xaf\x81[\xc4', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x502}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000818000/0x400000)=nil) (async) syz_clone3(&(0x7f00000005c0)={0x42200000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 1m41.969134668s ago: executing program 7 (id=861): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1m41.963537408s ago: executing program 7 (id=862): r0 = semget(0x3, 0x1, 0x22) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs2/binder1\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x100000000000000) read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0x178b) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x101, 0x48000028, r6, 0x0) fanotify_mark(r7, 0x102, 0x40001043, r6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x7, 0x1800}, {0x2, 0x8}, {0x3, 0xacdd, 0x1800}], 0x3, &(0x7f00000000c0)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) r11 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f00000003c0), &(0x7f00000004c0)=0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000c00028004000380c29140c9ed86646dd236657cf8e5b753c43ec6ce56956026f6c890ce639175b28993f28e3dec6c251cc0701521fc89a308f0934949275f8be088c56201e9613f41f278e82171a7f023a8c37a974600e4cc948886313f39c20780bbc43508e95ba061c84ba7e205c166511c847c"], 0x124}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r13 = socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) epoll_pwait2(r10, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x4]}, 0x8) syz_io_uring_submit(r14, r15, r16, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd=r13, 0x8, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x8, '\x00', 0x0, 0xfffffffffffffff9}}) socket$inet6(0xa, 0x6, 0xe5b9) 1m41.680597005s ago: executing program 7 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000006000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) (fail_nth: 6) 1m41.558362368s ago: executing program 58 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a000006000000000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) (fail_nth: 6) 1m29.780620377s ago: executing program 59 (id=851): mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b502000000c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcb6ae3e198f67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x501000, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140), 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x10, &(0x7f0000000a00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_any}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@posixacl}, {@cache_mmap}, {@posixacl}, {@cache_readahead}, {@access_client}, {@noxattr}, {@posixacl}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@uid_lt={'uid<', r5}}]}}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="000088644204011a0067000003219078e000000100000000864a00000000011036502bea92698d6012ab9693cda90104e0c30112182a8e12e9c1ca6119d9b29f1f933163050f8dd51b945489c7da43aac25865050fe6a5ed60109f61e2d8124c909c83276effffffffac1414aae0000001ac1414aa00000000ac14143cffffffffe0000002ac1e00010000004e244e23040190780ee75d1201aacb8bda31f9d175f6061314d42fc10735bd8dbd1ebb756bc3898f5202b59f28d5e824e47eb9b6594f96c2bac3c818087552acea1d27ff61cc1ec0e761fdd7f3a184812651cd23a048542f2ec627e8eaf30c0b029d2e8b636c02ecca352f714038b5249f5d85dd81dcc17b9bc5ff22446d3a75416126a61df5589da0b9f4661a1656ffa10f"], 0x11e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001680)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x3c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x40086610, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000240)=0x280000, 0x4) 44.428505815s ago: executing program 8 (id=1666): sendmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000380)="61ff359d8ee2289d87b97d5c414d283d2959b090b3274fe1518b653ddb2ecd7cbeb7ac19e9cc6f44445457a48fea5bb2ad7405c1885a114b04e6b670cd5181c2beac8fec6b97621d56fb73d1584c78a466129bbbade931621d368ff7f25f89e02a71352115120c8ee5b5e14731a6034c8a922c783c7e4d3d76c46cabd5c628901ad924e3fb41cc39250e67642531233beadab22c0199e46161e2a6f394b26040f1c14b2f3b6012d3635f62fc81f04b8c1ac4a6f304b73f59587c847d1489269d9799fe3008a2223ae849aacc8c19ef87844466ac656f79ba62d94f91", 0xdc}, {0x0}], 0x2, &(0x7f0000001dc0)=[{0x1010, 0x88, 0x2, "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"}, {0x100, 0x109, 0x9, "5c7ca7eae58d1f9b2714c76103ee19e7c19bdad9b84e5de6a24a206f5a74f14227cbbd866d1e811a7a503676789df6cdff3b63ffc9bf9f4ed2e034a828d66ec51914958966b1ec1438a165bee04de77e2e354e70fdfdf9c5e24a4f5aec125f30fa81600cd6b517e5f7fa189751e7569497eeffbb1a89d14d3cf63a41089cd64310460b69b4c2692f7133ce4901e71cdbc705371f9bd5b7bb6617fa7aea37e217b7561f3749b43d2753c0fb7f1cc567b5991019574bbd64b1ee8ba7fbedaac28d5f56ee0c4c2b83c7f6ed5383d71ceb576725406952fb16683e569d6b6de6144f0f8818506384ac8d649cb934"}], 0xfffffffffffffebf}}], 0x1, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x8}) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xff97, @remote}, 0x10, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 44.370521958s ago: executing program 8 (id=1669): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x80911, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x8, 0x81, 0x0, 0x3c33}, {0x7, 0xa, 0xf, 0x4}, {0x520, 0x3, 0x9}, {0x150, 0x73, 0x77, 0x8}, {0xb5, 0x6, 0x7, 0x2}, {0x90, 0xff, 0xa, 0x800}, {0xfffe, 0x81, 0x5, 0x88c0}]}) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) 44.370114885s ago: executing program 8 (id=1671): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002280)={0x50, 0xfffffffffffffff5, r2, {0x7, 0x9, 0x0, 0x8, 0xfffe, 0x5, 0x0, 0x100, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000002480)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xfffffffffffffffe, r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r5, r6, 0x0, 0x20fffe82) 43.460892899s ago: executing program 8 (id=1690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090afbffffff0000000000000a0000040900010073797a31000000000800054000000004090002006d797a310000000008000a40fffffffc200011800e00019d006f6ef86e6c696d69740700000c0002800cf3029dfffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x4040041) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000090900010073797a31000000000900020073797a3100"], 0x84}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 43.407541077s ago: executing program 8 (id=1691): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040e4220"], 0x7) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x808040, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x97) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000002900)={&(0x7f0000002100)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002880)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_retopts={{0x10}}], 0x30}, 0x20004c10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r6 = io_uring_setup(0x2e71, &(0x7f0000000280)={0x0, 0x800000, 0x400, 0x4, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) r7 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r7, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES8=r2, @ANYBLOB="010028bd7000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000500340000000000080026006c0900002800518024000080090001"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r8, &(0x7f00000000c0)='7', 0x1) 43.350476533s ago: executing program 8 (id=1693): lsm_set_self_attr(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xb0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x1c, 0x1, 0x0, 0x3, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) lsm_set_self_attr(0x0, &(0x7f0000000000)={0x69, 0x4, 0x75, 0x55, "7d2b8e7db22cf930e353401ed6cf8dae8248a3a893a25c5030c6232370764660a9f8275510e18308585bc4b325edc774f0543cbe203c4de8ee3aa942727535d74835e3677d4cbff66179fba0da33eaa0121b708fdb"}, 0x75, 0x0) 42.700192796s ago: executing program 1 (id=1701): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) read(r1, 0x0, 0x0) 42.640719978s ago: executing program 1 (id=1703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_NMI(r2, 0xae9a) rt_sigqueueinfo(0x0, 0x22, &(0x7f0000000040)={0x40006, 0x5, 0xfffffffb}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.340921908s ago: executing program 1 (id=1705): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000000000), 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x448000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2400810}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44005}, 0x20000004) 42.281024788s ago: executing program 1 (id=1706): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x81, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xa) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x26020480) umount2(&(0x7f0000000080)='./file0\x00', 0x4) unshare(0x20600) 42.233566112s ago: executing program 1 (id=1707): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x9}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1805}, 0x271d06846df4b024) accept4$nfc_llcp(r2, 0x0, 0x0, 0x80800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = userfaultfd(0x801) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') (async) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x9}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1805}, 0x271d06846df4b024) (async) accept4$nfc_llcp(r2, 0x0, 0x0, 0x80800) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) (async) userfaultfd(0x801) (async) getpid() (async) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async) mprotect(&(0x7f0000692000/0x9000)=nil, 0x9000, 0x2) (async) 40.566268483s ago: executing program 1 (id=1721): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x3000000) 40.499304308s ago: executing program 60 (id=1721): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x3000000) 32.680599211s ago: executing program 3 (id=1813): syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe00000000000000000000000000002cfe8000000000000000000000000000bb330200000000000004017f04010005020453c204"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r5, 0x24, 0x1, 0x7, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa255}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000100)='syzkaller\x00', 0xe, 0x5a, &(0x7f0000000200)=""/90, 0x41100, 0x48, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c03e, r0, 0x4, 0x0, &(0x7f0000000280)=[{0x0, 0x4, 0xc, 0x5}, {0x0, 0x1, 0x1}, {0x0, 0x1, 0x2, 0x8}, {0x4, 0x5, 0xa}], 0x10, 0x1ff}, 0x94) 32.360565716s ago: executing program 3 (id=1819): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x88) r4 = gettid() r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f00000000c0)=[{r6, 0x92}], 0x1, 0x2) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(r3) fgetxattr(r3, &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f0000000180)=""/18, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000700)={0x8, 0x0, [{0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, {0x40000000, 0x6, 0x7, 0x0, 0x0, 0xd, 0x2}, {0x7, 0xfffffffe, 0x0, 0xf7, 0x1, 0x80000001, 0x8}, {0x80000007, 0x1, 0x2, 0x105, 0x401, 0x3, 0x400}, {0x80000008, 0x9, 0x5, 0x6, 0x16c0000, 0x7, 0x4}, {0xb, 0x7ff, 0x2, 0x3, 0xe, 0x8, 0x3}, {0x0, 0x9, 0x0, 0xab, 0xa0, 0x6, 0x1ff}, {0xc0000001, 0x3, 0x0, 0xfffffffc, 0x9, 0xfffffc00, 0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r9, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r9, 0x2000000a}}, 0x10) 29.820058431s ago: executing program 3 (id=1819): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x88) r4 = gettid() r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f00000000c0)=[{r6, 0x92}], 0x1, 0x2) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(r3) fgetxattr(r3, &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f0000000180)=""/18, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@ng={0x4, 0xb}, 0x2, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000700)={0x8, 0x0, [{0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, {0x40000000, 0x6, 0x7, 0x0, 0x0, 0xd, 0x2}, {0x7, 0xfffffffe, 0x0, 0xf7, 0x1, 0x80000001, 0x8}, {0x80000007, 0x1, 0x2, 0x105, 0x401, 0x3, 0x400}, {0x80000008, 0x9, 0x5, 0x6, 0x16c0000, 0x7, 0x4}, {0xb, 0x7ff, 0x2, 0x3, 0xe, 0x8, 0x3}, {0x0, 0x9, 0x0, 0xab, 0xa0, 0x6, 0x1ff}, {0xc0000001, 0x3, 0x0, 0xfffffffc, 0x9, 0xfffffc00, 0x6}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r9, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r9, 0x2000000a}}, 0x10) 29.410912203s ago: executing program 3 (id=1856): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 29.320891605s ago: executing program 3 (id=1857): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) pipe(&(0x7f0000000500)) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f0000000140)=""/223, 0xdf, 0x0, &(0x7f0000000280)=""/70, 0x46}}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x2, 0xe, 0x6, 0x101, 0x0, 0x5, 0x0}) fsmount(r2, 0x0, 0x2) (async) r4 = fsmount(r2, 0x0, 0x2) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) (async) setpgid(r5, 0x0) setpgid(0x0, r5) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) write$hidraw(r0, &(0x7f0000000600)="eb4aaf4b9a945ad803091b606bf855d3efebfeedab5c77e6c02920eaebcb90ee8588b3623aa725f30f48abf912a77e76c1dfca1b314fdda57040c4b48f56a288337c83b742ad33a63f3569f625084d3454f83cf2876481065096d89c48b5f3f87daaf36e0bcef9132d9249476955b7d1252ecb3d5523ff516cf0d479e2acc1fb20c10ea1145cd369a84587a5243315331989f619b3ea4ff107c47338d46bf4df3d49e15e24e3beeda48d3614f94219cf25e123b1f2a046558fc7c3367eb9144a1477ef52a97dfef8202426dffe5bcb70614504bde81c2d6bb143391d6bfabdf5e556a91138c39418ca434a72ffe0a6c351c332", 0xf3) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) mkdir(&(0x7f0000000380)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000380)='./file1\x00', 0x0) shutdown(r6, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r7, 0x0, 0x7ffff000, 0x0) (async) splice(r6, 0x0, r7, 0x0, 0x7ffff000, 0x0) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) (async) ioctl$VIDIOC_LOG_STATUS(r8, 0x5646, 0x0) write(r0, &(0x7f0000000400)='base', 0x4) (async) write(r0, &(0x7f0000000400)='base', 0x4) 29.320756978s ago: executing program 3 (id=1858): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (fail_nth: 7) 28.0712365s ago: executing program 61 (id=1693): lsm_set_self_attr(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xb0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="0100000000000000000011"], 0xc4}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0xa0402) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x1c, 0x1, 0x0, 0x3, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) lsm_set_self_attr(0x0, &(0x7f0000000000)={0x69, 0x4, 0x75, 0x55, "7d2b8e7db22cf930e353401ed6cf8dae8248a3a893a25c5030c6232370764660a9f8275510e18308585bc4b325edc774f0543cbe203c4de8ee3aa942727535d74835e3677d4cbff66179fba0da33eaa0121b708fdb"}, 0x75, 0x0) 14.29163607s ago: executing program 62 (id=1858): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (fail_nth: 7) 4.130677968s ago: executing program 0 (id=2179): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) fcntl$setown(r0, 0x8, r2) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x7fff, 0x6}]}, 0xc, 0x0) 4.129920502s ago: executing program 0 (id=2181): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x3f00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.867772331s ago: executing program 9 (id=2187): r0 = userfaultfd(0x80001) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="c1e2b53bd343c44a529959", 0xb}, 0x1, 0x0, 0x0, 0x24000014}, 0x44000090) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0xe88e164663c95962, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty}, {@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x8a}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x4}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x15c}}, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 3.230792875s ago: executing program 0 (id=2189): openat$ptp0(0xffffffffffffff9c, 0x0, 0xe82, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r1, 0xffffffffffffff73, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000003, {0x1, 0x1fffffffe, 0x40000a, 0x6, 0x8, 0xa, {0x1, 0x8010001, 0x4d0, 0x40d, 0xffff, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r3, r4, 0x200003d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x26, 0x7fff, 0x61001838, 0x0, 0xfffc, 0x48, 0x5d2186cc, 0x0, 0x0, 0x80, 0x10001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x260a41, 0xb3836f6d7a15f29) 3.060837204s ago: executing program 0 (id=2190): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x252, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x7f, 0x0, 0x4, 0x0, 0x8}) 3.060163007s ago: executing program 0 (id=2191): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x242000, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'trylock', ' ', 'none'}, 0xd) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x288901, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@loopback, 0x2c, r5}) read$FUSE(r4, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002280)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000002380)=0xe8) mount$binderfs(&(0x7f0000000180), &(0x7f00000001c0)='./binderfs2\x00', &(0x7f0000000200), 0x80080, &(0x7f00000023c0)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x8000000000000000}}, {@max={'max', 0x3d, 0x2}}], [{@euid_gt={'euid>', r6}}, {@fowner_lt={'fowner<', r7}}, {@dont_measure}]}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000024c0), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000002780)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002740)={&(0x7f0000002500)={0x224, r8, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x34, 0x3, "9fcb0f74544fcf52c880dab88f72548a42aa0378dcd21d400782bc5d6f28f413d4634946331b99091b3a75cd70fc9243"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x32, 0x3, "1fc5b00b4a5f97fc2a0bebf30b88f972259380aaaa6276772f88f6fb349cd7d14b807e2ef65a6ee9517182b90735"}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa98}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa285}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6ed}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9c, 0x3, "11eaf467758a77c854c7191377f4dd8d9f1598fdbc33fbfce2fe0e86ce1e467595579e2564c8b6ac85a7045d042b08ef5090b6c1a8e2c04b541d81f3c7a83a0f013446648ec03568ae1fc4ef8bd86fab799e9da9b7d87a71f6d957e8c844c78d4d36d75181f67d0d12d531e7c4c9ca72a54ec68a1ea24122eec99653eede88723ef7d2deca4aa02fe056da90aa04848142bc7917fa25560b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x40480d0}, 0x20040000) sendto$llc(r4, &(0x7f00000027c0)="2d36de01ac770ac2c05e886ccc2bffb9a61c8de5aa645adb9830911c8c24fbb43d3893327b6e0e820b84ed574c3119877bbdf3d0bc588e669a1b23d98ba34fea65f9336941a8fcaea44e036fa4b0ab89b2cb4e36b8b1a0e064e5309d3489b8", 0x5f, 0x6000001, &(0x7f0000002840)={0x1a, 0x309, 0x63, 0x1, 0x85, 0x1, @remote}, 0x10) lsetxattr$security_capability(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0), &(0x7f0000002900)=@v2={0x2000000, [{0xe, 0x8}, {0x7, 0x5}]}, 0x14, 0x3) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000002940)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000002980)=0x2c) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000002a80)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)={0x24, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x23}]}, 0x24}}, 0xc811) write$P9_RXATTRWALK(r4, &(0x7f0000002ac0)={0xf, 0x1f, 0x1, 0x264}, 0xf) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000002b00)={0x0, 0x11, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0xf, 0x4, [0x3ff, 0x8]}}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0xc, 0x40, [0x100000000, 0x5]}}, @calipso={0x7, 0x40, {0x1, 0xe, 0x6, 0x7, [0x9, 0x8, 0x9, 0x9, 0x7, 0x9, 0xa8]}}, @jumbo={0xc2, 0x4, 0x2}, @generic={0x6, 0xb, "2d2468dfec5edfeb9a2e74"}]}, 0x98) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000002bc0)={0x0, 0x9}) sendmsg$nl_netfilter(r4, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x48, 0x3, 0x1, 0x401, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x2}, [@generic="a9d9d5dbfccb674f84b3587dee0483a4ecf199f502ac471fe2fb83e0739fbcb93756daace58c4bc38d33b1b3ad961a8171"]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_open_dev$sndctrl(&(0x7f0000002d40), 0x0, 0x4100) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000002d80)={'#! ', './file0', [{0x20, '#\xcc//{$\'!:#'}, {}, {0x20, 'mptcp_pm\x00'}, {0x20, '/dev/snd/controlC#\x00'}, {0x20, 'trylock'}, {0x20, ':\\-'}, {}], 0xa, "e2cb1179857e41fc0c2bbfca3e5141b361c574cd4ba941ec20abad989e500e89b3aa88ef5794895a5ccb4bfd907f9aa4b79c31ed1d2b3b5c8a3a32fd966833c08a1e280c142767d4c375c77c113177c6fa2a67c5b7755e90576e8935402074230646378e665ea7f7c3d3c3d9f74592"}, 0xb1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) recvmsg$inet_nvme(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002e40)=""/81, 0x51}, {&(0x7f0000002ec0)=""/94, 0x5e}], 0x2}, 0x40000042) newfstatat(0xffffffffffffff9c, &(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl$Q_SETQUOTA(0x8ce0a15239b8b1fa, &(0x7f0000002fc0)=@loop={'/dev/loop', 0x0}, r9, &(0x7f00000030c0)={0x72, 0xf, 0x2, 0x6, 0x4046, 0x8, 0x200, 0x5, 0x2800}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000003180)={0x5, &(0x7f0000003140)=[{0x0, 0x5, 0xe2, 0x8}, {0x3, 0x0, 0x9}, {0xac, 0x1, 0x6, 0xa60d}, {0x0, 0x2, 0xbb, 0x9}, {0xfffc, 0xff, 0x1, 0xfffffffc}]}) 2.990413066s ago: executing program 0 (id=2192): socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc02010111240201010200"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)="c225", 0x2}], 0x1, 0x0, 0x0, 0x24004040}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x40}}], 0x2, 0x40015) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x308, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYBLOB="65ae70bbfa55c867b0bc38e408d4e5e8c05def406ec6c0826d4d6f6b7eeb09a2c21fd1b1386f5e25e13241fc2aef2bc47360245e9ffda5b5116d166b6ef98b9021b9fdb61d7ba943b493f735771ff67560c5f3602f132ebabda6b0105c2ed10c8a9eafcb4b220673af9fe91edf4d1477dd51013e91d421316f1155bcb3316bef53688933fe1a245b37c6ddb4d491668649e7bf6b040430b5de9fb3105b3835131368c1c6d70d7c9c7711e579f265bc39832ddb65667fc241007947129f6c0ef0aba576", @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) fremovexattr(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="62747266732e00440524b9734995e0d82208eea29d7c5c3287b6128c452dad059d20061a228f59d39ffa80e815b0f4a9033272aa230356fe02b9a58eabee532b196e5a220a22093b00000000000007ff40121c50dea68ba13cb2edad9e6dab56398a63d033e72029014b606f3451d43f66803d"]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000780)='I\xa4\xd6\xba\xb9M\x9b\x1a\x92\xb9\xe7\xac\xba\xb0QqN\'\xcd1T2\x01}\xb1\xd4\x8fW\x83M\xfbc!X\xb3]B\x9fIf\xd9\x16\xd8\xb9\'\x9d_\x8d\xa2\xd5\x95\fI\xf9\v \xc2\xb6\xfb\xbb{Gq&\xe0\x10\x83_\xf0\xfe7\xaf%\x05}\xe4tl\x93\xcd\v\xafh\x10\xa6/\xe8X\x1d\b\x8dH\xf4\xd4l\xec.3p\b]\x8e\x04\x1aS\xc1E\n\xca\x8f\'\xf1\x9f\x83\xfa].\xc8K\x8d\r\x8b}\xa3\xf5,n\xe9$\xa9c\nI\xbc\"\xfa\x9fS\x1e\xc1\x84\x87\xe8\x01\x15\x8b\b\x01;\xc2?(\xe5\xe6uz~\xc9n\x1f\xa9\xf9H\xee\xd0qO\x1e', &(0x7f0000000140)="cfe04666161c83a1f8a0cefa000062563b51a8776b81ecf989317b31b3b29708d9e2f8b6c0e4a5492428ca3f4e66c5ee2229cddfeaf64e96f822b93003cebe8747bfee910a821350d95000"/86, 0x56) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0xc) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x1000, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, {0x0, 0x0, 0x1}, {}, {}, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x4, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) r7 = dup(0xffffffffffffffff) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r8, &(0x7f0000000080)=""/237, 0xed, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) 2.990148467s ago: executing program 9 (id=2193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010400000000000100000000000014000780080011400000000805001500070000000500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 2.940317193s ago: executing program 9 (id=2194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0xffff8001, 0x4, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000140)=0x8) (async) r7 = socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}}, 0x4c800) 2.800416553s ago: executing program 9 (id=2195): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="1143530120514105", 0x8, 0x4008005, &(0x7f0000000040)={0x11, 0xc, r1, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000000c0), &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd09, &(0x7f0000000300)="0400000032000000000000008a0100003801000001000000000000000000000000000000000000000000000000000000746573745f7261696400414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141410041414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100000000000000000800000000000000000000000000000072616964") r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x148, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x14}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0xa}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x95}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x11) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9f, 0xec, 0x401, 0x3, 0x0, 0x2, 0x0, 0xa}}, {0x18, 0x2, [0x1ff, 0x7, 0x1ff, 0xdcb, 0x5b, 0x3ff, 0x3, 0x2, 0x6, 0x5]}}, {{0x1c, 0x1, {0x6, 0xa, 0x2, 0x62c2, 0x0, 0x2, 0x8, 0x1}}, {0x6, 0x2, [0x80]}}]}]}, 0x80}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x82400, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000180)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = open(&(0x7f0000000200)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r8, 0xa, 0x11) fcntl$setlease(r8, 0x400, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = getpid() syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000100)={0x2, r10}) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r8, 0x8, r11) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) 1.940367775s ago: executing program 9 (id=2199): r0 = syz_usb_connect(0x0, 0x47, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x40, 0xd, 0x93, {0x93, 0x5, "842b0a60487fa4f82049021476d648752cce78f75e0c309ab0dc9f1f7ec99d60d258032a53a6631856976bd452d659cdc8a5ed1893d65f6260a7859631743d3eb9881b1e0197b786040187cfce083a562c07508e22a1179f0b0c9cf60d5f023e2c6212d997b8f5333b0f89941167b5f421386526e1b81f34eb16e40e1deb59339bc5f0ba7d86b446d58994ab278c7b8269"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}, &(0x7f0000000180)=ANY=[@ANYBLOB="0022203dcc6c6f0060901b0000b08aac4f79c3d75a488e32490883acd48d8d558b17a7"], &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0x1ef}}}}, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="0015220000002da8fabf05005430c99f08443e90b465ea9b543709000000930000000000f8e065c7c5c66cb4169d1a5d12cf550c15af73e029d833e915cabd67e045df32267da6"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0x20, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r6, 0x11}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x10, 0x0, 0x4, r6, 0x1}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3, {0x0, 0x1}}, 0x18) r7 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r8 = fanotify_init(0xf00, 0x2) fanotify_mark(r8, 0x105, 0x8971, r7, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x800, 0xfffffe01, 0x881}, 0x18, 0x1000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20040041}, 0x2000004) 1.390230212s ago: executing program 9 (id=2205): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="210020b0e78da4fd7d892b988e5795a29846082672e76eb36e87d3752de3ba1d5e22eaabdbbf62c4b083263a103cb79f084289d8fa0fe11786168801e8686ba89be9c13358971b1e48b3db9e25c0e89cf49a4991fa70d0588530ee1e7c4a7197d838490f1984a5632197ed250fb06bc5cfbdbdf1b301dd13fa42a3bc07572ff59e935dcec1879637e42a209b58dd3e96a86698045ab67b7621fdb81ffd964211f02a", 0xa2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000280)="0c3778228b089051a95550c45de565aa70c5447442663e89293c45643443b76c91808f2cf821c2b312c1f9194722c64c9ab60df01391740221bedac85ce75d540edcf32057e84a1f540d0ca16dce2bcf6ee93cd558f2c8cc481d535cb8471c2e2813bb85d9a303c919eca55ba3c000fc2f58ea60273e553d9131766dec46d561199285ec094bbbc42c5d04df31852ec8ed4fd824e98e95c1a54b609dcde5223b4acfc335905c47e6a86e5010bc340b019fccd98e43846cf7bb5f05ac1216404551c525e7ddc9780647e5aad335bb11c2a264edaa842d8b9ba5b2a1143ff64be80ceb4f64526208", 0xe7}, {&(0x7f0000000380)="76cdfa133919655a67c9df2b07a21300b55a6c9639655b90a88f19f7dd2cdd0d05976c1731ea2d39fb8f1105936ba3fd14656eb389d121a7842d7ca39d9b70b50d9fd5dbc78ce3dd80", 0x49}, {&(0x7f0000000480)="7cadadbba807892f0cf235966c48dbc32554b33aaf7fa6d9982f99f52576676c1ea08a59fef4ac853ded0b3b060ab8f5fcbb852c696a6bb1b01a08c1010f502f9266d76a4ba1453b452cf9937667bc42bcbe51fd8057c28b6183c06aa960f7a543385fbafc3f9d97e035891d3ef9d5d01c3abe23d48b355b3db7dee3168ea24744", 0x81}, {&(0x7f0000000540)="286e6fdf1eb6dd5e2f9d3ec6aba607f716a5b454a0184060a63c6ef35279efb051526f1f7d451b3a800cf3380929c0659a3e08d93fdce37dbba8e9825026682bba0da6335d4932ea00cbeb76192db2c36b7b2a29542b185d6dbb895b9a9934343dfa36ff74ffabb5d033733c262fc3803cab0ed44b8d2bd722fa4e7a5cbd9807f71e8f002d5d111c17792006", 0x8c}, {&(0x7f0000000600)="5597ff279658c57151d341536d3708df10794dad48c1a5661218b07ef7bdc7f5db1d5bd91130adb350b04870f67e26f7ca909eae231d429a98eef93113e2a528d08492c40c88dfe206838af83144dd7d2bc5dc3e1fdf705fb48b014941c597456c5b690ec8664f1ec5f297eb9d9d6557127f8cd3528965cb9969f031a6115ea8b9e7cc2f70dc4e0fc7be57dc94033cd87e6402eb8ab6b9abc64cb0882ab87ed7f48f83d89de76a95f45e699b88f9ae75200367242b158aaca6b24b043068f995b93c7742b135fc160c784350576dd48db86f7d926a6ea5f03e454b850162e27fde0872b647c21764", 0xe8}, {&(0x7f00000008c0)="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", 0xc39}], 0x6}}], 0x2, 0x4c0c0) sendmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000700)="035f3f00fbb096a77bd5820fd8e8efff6b7f10af7ed038ab48a3836cc0d2d5ae0bf8438b6d9d419d55d1d5f8b6c5ab8592c288f4b7e3ea1455c03fa932bf9d2b5e976980a84d2efcac39c0164e6d3b7eb934639287b34db9fa9ec2533b033cf37d06716e51eaab0786d6d2345a2b4792354ce95158466efd8928161d31b728cf7275410c9a612d7d2183f56f6894ddd1f236b9abec0387", 0x97}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="45907a4cabe4d0df5c9ecd708f23776ff1d759607f46a85363c56f835f2d7f0c66426e2629a1a73df93b2ca2deb38ee7b6f4848c63ccac74d9100ceb0cf5f96cf719429bacd4734109a45f3050728b7cbc181de4b5de3e406c9de42e85f39d", 0x5f}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)="4ad04b281689811b79882c5f516e8e25fd758d1048ccd24f0492a3876d4c7162fc556e4bdad7aa030461233fb38f41325bacfc5335d315a9226960c52c84ccaaf8993b6254cf48823267f799dbc4f5ab84b84f4f6fc5947a42d4d5c7404403fbf226f17111f0acf1330603057f5007be348a914081ff2ca825a389fbfdfb036f", 0x80}, {&(0x7f0000002c40)="31380163e263c61874b6181d135e107b3fa1dc9a1a3049b9fc2e019517097e8b3956baa051aebc8032f3433ba94889f4099bfd484d6f3362a9dfc2fecd9a677132543918ed912f500dd1cb9e8241dfc9d3e399421c0c3a5767cf3475be57efe4ccc0dbb93c06832d689fb68f7e9e8341dc4667d4af193952b3c08a1b06f3f06d2fd9f7be041d6d1844644d98d4494fad6815804ee103ec958866e30dd7d27eaf0489696ef324b187b44d0adfa05bc45144be7018", 0xb4}], 0x6, &(0x7f0000002d80)}}, {{&(0x7f0000002dc0)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e40)="a4e21860d754922a788a7f46afad19dd7060d2e9598e2a0aa2f70ef46647f139b5741188", 0x24}, {&(0x7f0000002e80)="ce7efd0ea67f63", 0x7}, {&(0x7f0000002ec0)="d81f4ed1a94c8ad167b7d6edd187148753a31248358b8f9ba4500ab504261a1ceac9ec80ec7a991d7dad33f840decb0ffe2b7f8c5a277449cfe1ad212c7d1c10f2dc2da45493cb51181ce99cb4622bd4b0", 0x51}], 0x3, &(0x7f0000001500)=[{0xe0, 0x119, 0xfff, "c5a1e5ac7ac15fe908e2399a87498daa517fb817b2c68f1317b6624b7a67085566c9bde3eb61744e7ddfdfa9b6f7f826882a290c200a62af4654329f5d56eb8329d45ab38a763a7c8649e895b75f016feba28a0df347da844658bf11747664ed90a8a0f6e8b7b3149ccef6a4efc18b4e4bfadc50e71f14fd5d16e68d448ffdc23dc49c537ed4dcfac3b395d031c893669cc02357e8b4277f2f0756c13897f5cc59fb7fd4c95f0323ec48e97e2967197d7517d2dd12dba737cdbaeda9027aa97de819d09714e08428d6"}, {0xb8, 0x10f, 0x5, "b07597ff526ccc1cf98dbb20a0e5c56cc38f561a9a3b41f29dcd1db02213f85b7dab12c755e2589ee9c95c87cf5dabbe8c9c0b32c88e4c376f501da601e23957feca8e206f6548841534a17ad6644daeb9adc9cf0e9e510d1deccc16c4d699bc001e94aafd42877bddf204662b893109ec0beea4ca2078a96cb74be81bd436a625510db81946592c82d8d46b3cc65272bf82b29eca6812189bcab17de71af94856866655"}, {0x138, 0xff, 0x7, "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"}], 0x2d0}}], 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.139687731s ago: executing program 5 (id=2207): chdir(0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0x7, 0xffffffff, 0xfffffffd, 0x6, 0xffffffff, 0xffffffff, 0xffff7fff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0x1], [0xffffffff, 0xffffffff, 0xffefffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0x6]], '\x00', [{0x9, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x10001, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffd, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r2, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16=r0], 0x2c4}, 0x1, 0x0, 0x0, 0x20000840}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) mkdirat(r3, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0xb8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/SourceSink.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/SourceSink.usb0\x00') 969.642392ms ago: executing program 5 (id=2208): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000001040)) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x5, 0x3, 0x100000, 0x2000, &(0x7f0000fef000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e23, 0x8001, @private1, 0xfff}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="b23035fabb0080951c12ad92c98cc8750b0de4f4493b6308e047d6ffdf1b3710cf1bf5fcacfc319555caa49480e010e6495ea101991abe0f049cfd8abebc25c600c6fa04ce42f8af6e81721103155170e13e7ef321b89f4becf780c600b47b5b97917dee9a6d90172657803f712478", 0x6f}, {&(0x7f0000000280)="827193e33512f3fd9add711ffa15f10916a50783989baa1569ec1e83e39d6cb57ad871f8418f0cdd6d8687609cd50f5c78dd3b09a4b850061d82d361dce7378de2787f226444f84419dd2c307f05ce722f3a34649164416ba601084b9d37409eec4eacb5dd1c217ee217dd862e17461b878ce789a1b69d0e0174dd58d06f7b5a45c25f40e4be59b4f89201904b8506d7dfe361bf15e0a29489521b6e6fa87914adb442b8c1455162d50c14c52f738dc31a88eb246e184240bc5d321241ee90de3b1e675c20959c9c3dcecc34ab855c51361cc4b9e239b62f51a7440dd0d2", 0xde}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x100}, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0xd, 0x530f9803, 0x1, 0x80, 0x7}]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x9, 0x0, 0x9, 0x4, 0xff, 0xf, 0x6d, 0xff, 0x8, [0x5, 0x8, 0x100, 0x800, 0x5, 0x3, 0xffffffff, 0x5], [0xfffffffc, 0x140, 0x1, 0x3, 0x1]}}) 760.290672ms ago: executing program 6 (id=2209): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x81}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x58, r1, 0xb496be12fe179219, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0xc800) 759.371011ms ago: executing program 5 (id=2210): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x600000000000000, 0x20048054}, 0x0) 759.226322ms ago: executing program 6 (id=2211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0x9300}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) 759.083046ms ago: executing program 5 (id=2212): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x80000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r8, 0x0, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) write(r5, &(0x7f00000000c0)='1', 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000280)=[0x0, 0x0], 0x5, 0x3, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x1, 0x3, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000600)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x5, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000680)={&(0x7f0000000640)=[0x0, 0x0, r9, r10], 0x4, r8, 0x0, 0xc, 0x51, 0x401, 0x2, {0x755, 0xfffe, 0x2, 0xa6, 0x1, 0x400, 0x0, 0x7ff, 0x8, 0xc, 0x5, 0x5, 0x800, 0x3ff, "15c333e624eae939d971ba6862226eca63e775daa48f79d28d698ffb7651691b"}}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)="43210098") r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x800, 0x0, {0x9, 0x0, 0x80, 0x0, {0x0, 0x4e22, [], [], 0x0, [0x1]}, 0x0, 0x100000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) connect(r0, &(0x7f0000000080)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x80) 460.219832ms ago: executing program 5 (id=2213): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f00000000c0)=0x68) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000100)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x14) 459.89094ms ago: executing program 5 (id=2214): socket$nl_route(0x10, 0x3, 0x0) (async) setns(0xc9, 0x0) (async) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xe0000000, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000110001000000000000000000000000000000000000000000000000000800030068737230"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) (async, rerun: 64) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 64) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) (async) fcntl$addseals(r4, 0x409, 0x7) (async) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, 0x0) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x800) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=0x1000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb") (async) r8 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x40042) write$binfmt_aout(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3"], 0x125) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000000000000000000000000000000000000000000000008000300687372302800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) r11 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r11, 0x0) ftruncate(r11, 0x0) (async) ptrace$getregset(0x4205, r10, 0x202, 0x0) (async) mkdir(&(0x7f0000000280)='./file0\x00', 0x48) (async, rerun: 64) syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) 77.386121ms ago: executing program 6 (id=2215): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) 76.736523ms ago: executing program 6 (id=2216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@nullb, &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) pwrite64(r2, &(0x7f0000000000)="ff", 0x4f21f, 0x2200) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ce1bbcf4", @ANYRES16=r1, @ANYBLOB="000227bd7000fedbdf25060000001c000280080005008000000006000f00030000000800080000000070340001800600020006000000060004004e24000014000300000000000000000000000000000000000c00070026000000040000006000028006000b000200000014000100ac141439000000000000000000000000080005000b00000006000e004e210000080004000700000006000f00f9ff00000800090003000000080003000300000008000700ec7100000800030001000000"], 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f0000000040)) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000280)=0x1c, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000002c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x6f}) timer_settime(0x0, 0x1, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) 636.505µs ago: executing program 6 (id=2217): write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@llc, &(0x7f00000000c0)=0x80, 0x80800) sendfile(r0, r1, 0x0, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) ioctl$FICLONE(r0, 0x40049409, r0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) write$vhost_msg_v2(r2, &(0x7f0000001180)={0x2, 0x0, {&(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/37, 0x2, 0x3}}, 0x48) r3 = getpid() r4 = syz_open_procfs$namespace(r3, &(0x7f0000001200)='ns/net\x00') (async) read$msr(r2, &(0x7f0000001240)=""/79, 0x4f) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f00000013c0)=0xe8) quotactl_fd$Q_GETFMT(r4, 0xf72eb41a1b32786f, r5, &(0x7f0000001400)) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f0000001440)) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001480), 0x408401, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x406002, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001500)={{{@in=@empty, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000001600)=0xe8) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000001640)=0x10000, 0x4) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000001680)=r2, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000001740)={0x2, 0x0, 0x4f, &(0x7f00000016c0)=""/79}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001900)={{0x1, 0x1, 0x18, r1, {r5, 0xffffffffffffffff}}, './file0\x00'}) mount$fuseblk(&(0x7f0000001780), &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x2800, &(0x7f0000001940)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1600}}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@seclabel}, {@subj_user={'subj_user', 0x3d, '-@\'+'}}, {@uid_eq={'uid', 0x3d, r9}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_lt={'uid<', r5}}, {@obj_role={'obj_role', 0x3d, '\xd1'}}]}}) socket$nl_rdma(0x10, 0x3, 0x14) (async) r10 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0) r11 = syz_ublk_add_dev(r6, 0x0, 0x0, 0x0, &(0x7f0000001b80)={0x2e, 0x0, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xead6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001b40)=@any_dev={0x3, 0xcc2, 0x0, 0x0, 0x1000, 0xc, r3, 0x0, 0x101}}}, &(0x7f0000001c00)) ioctl$UBLK_U_CMD_START_DEV(r10, 0xc0207506, &(0x7f0000001c40)={r11, 0xffff, 0x0, 0x0, r3}) (async) signalfd(r2, &(0x7f0000001cc0)={[0x38000000000000]}, 0x8) (async) write$binfmt_elf64(r2, &(0x7f0000001d00)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x5, 0xff, 0x8, 0x753, 0x2, 0x3, 0x5, 0x0, 0x40, 0x2b, 0x80000001, 0x0, 0x38, 0x1, 0x5, 0x4, 0x4f}, [{0x70000000, 0x5, 0x2, 0x8, 0x7, 0xed5c, 0x9, 0x5}], "ff9b60e990b8631ae9afc3faaa61b1f38a388870a04c6c1a2a03b3cd77a80ace0504fbd6735bb4919772c7ead36f53ee6fb3a57e9c7aacb3e8e7dd9ee2246c171333e7c76926ba6b827eeee558700c46707c511373eb81d26ca2521000902866a9e181a764e0b661abf53b204cc73961316d96a1dde84d5e59b053117bea6793a2655d800d0908ecd076961bffe4be42708a9f63a9628dca3d4ca835dced4fba3d7f1baa92dda9924324383b6aa07e210966982b03baa72b00037a54dcf4052725d2df134cc402fb27f41cc76e78623311725503a2774459b31f56df9b0e37b2c156427d27a1344391685e3c9660cf5fa384b221583fd3a1c71a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x872) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000002600)={0x0, 0xffff, 0x40, &(0x7f00000025c0)=@ublk_ctrl_dev_info_existing}) 0s ago: executing program 6 (id=2218): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) restart_syscall() mkdir(&(0x7f00000002c0)='./file0\x00', 0xa0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.9.1634'. [ 193.790972][ T43] audit: type=1400 audit(2000000109.179:2826): avc: denied { mounton } for pid=13698 comm="syz.9.1634" path="/bus" dev="hugetlbfs" ino=65211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 193.791256][T13702] netlink: 'syz.8.1636': attribute type 1 has an invalid length. [ 193.796163][T13699] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 193.796180][T13699] overlayfs: failed to set xattr on upper [ 193.796185][T13699] overlayfs: ...falling back to redirect_dir=nofollow. [ 193.796190][T13699] overlayfs: ...falling back to index=off. [ 193.796194][T13699] overlayfs: ...falling back to uuid=null. [ 193.796205][T13699] overlayfs: maximum fs stacking depth exceeded [ 193.803857][T13702] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.814199][T13702] bond2: (slave veth0_to_bond): Releasing active interface [ 193.814217][T13702] veth0_to_bond: left promiscuous mode [ 193.814300][T13702] veth0_to_bond: left allmulticast mode [ 193.828332][T13702] bond4: (slave veth0_to_bond): making interface the new active one [ 193.829567][T13702] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 193.837235][T13702] bond4: entered promiscuous mode [ 193.837250][T13702] veth0_to_bond: entered promiscuous mode [ 193.837338][T13702] bond4: entered allmulticast mode [ 193.837347][T13702] veth0_to_bond: entered allmulticast mode [ 194.010004][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.010037][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.761126][T13722] syzkaller0: entered promiscuous mode [ 194.761150][T13722] syzkaller0: entered allmulticast mode [ 194.772497][T13720] syzkaller0: entered promiscuous mode [ 194.772510][T13720] syzkaller0: entered allmulticast mode [ 194.777323][T13726] loop7: detected capacity change from 0 to 7 [ 194.858440][T13726] Dev loop7: unable to read RDB block 7 [ 194.858477][T13726] loop7: unable to read partition table [ 194.858653][T13726] loop7: partition table beyond EOD, truncated [ 194.858671][T13726] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 194.882023][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 194.882067][ C1] buffer_io_error: 11 callbacks suppressed [ 194.882074][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 194.882383][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'. [ 196.503809][T13742] block nbd1: server does not support multiple connections per device. [ 196.514094][T13742] block nbd1: shutting down sockets [ 196.537157][ T43] audit: type=1400 audit(2000000111.919:2827): avc: denied { remount } for pid=13747 comm="syz.6.1649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 196.538760][T13742] xt_ecn: cannot match TCP bits for non-tcp packets [ 196.556951][ T43] audit: type=1400 audit(2000000111.939:2828): avc: denied { write } for pid=13747 comm="syz.6.1649" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 196.559087][ T43] audit: type=1400 audit(2000000111.939:2829): avc: denied { ioctl } for pid=13747 comm="syz.6.1649" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 196.639238][ T5726] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 196.658530][ T43] audit: type=1400 audit(2000000112.049:2830): avc: denied { mounton } for pid=13753 comm="syz.9.1651" path="/198/file0" dev="tmpfs" ino=1150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 196.699340][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1656'. [ 196.710043][T13766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.712628][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1656'. [ 196.713351][T13766] bond5: entered promiscuous mode [ 196.736974][ T43] audit: type=1400 audit(2000000112.119:2831): avc: denied { unmount } for pid=11182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 196.784627][T13775] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1660'. [ 196.829587][ T5726] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 196.918114][T13790] ip_tables: iptables: counters copy to user failed while replacing table [ 196.923273][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1667'. [ 196.947733][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1668'. [ 196.947749][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1668'. [ 197.055646][T13808] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1672'. [ 197.470801][T13826] fuse: fd is not a fuse device [ 197.480140][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 197.510301][T13828] veth0_to_batadv: left allmulticast mode [ 197.519392][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1681'. [ 197.548580][T13828] comedi comedi4: comedi_config --init_data is deprecated [ 197.604899][ T5726] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 197.620591][ T65] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 197.784086][T13846] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1688'. [ 197.946897][ T5726] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 198.026221][T13860] CIFS: VFS: UNC: path must begin with // or \\ [ 198.026238][T13860] Malformed UNC in devname [ 198.026238][T13860] [ 198.026333][T13860] CIFS: VFS: Malformed UNC in devname [ 198.326184][ T5726] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 199.212240][ T7115] smc: removing ib device syz1 [ 199.278332][ T7115] smbdirect: ib_dev[syz1] removed [ 199.640466][T13905] device-mapper: ioctl: populate_table: no targets specified [ 199.669234][T13909] fuse: fd is not a fuse device [ 199.774656][T13916] tmpfs: Unknown parameter '' [ 199.782670][T13919] netlink: 'syz.6.1712': attribute type 2 has an invalid length. [ 199.782683][T13919] netlink: 'syz.6.1712': attribute type 7 has an invalid length. [ 199.818774][T13919] Uý: entered promiscuous mode [ 199.907545][ T5726] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 200.184862][T13949] netlink: 'syz.6.1718': attribute type 12 has an invalid length. [ 200.519425][ T5837] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 200.697453][ T5837] usb 11-1: Using ep0 maxpacket: 8 [ 200.698810][ T5837] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.699706][ T5837] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.699737][ T5837] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.705704][ T5837] usb 11-1: config 0 descriptor?? [ 200.861138][ T43] audit: type=1400 audit(2000000116.249:2832): avc: denied { write } for pid=13982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.916692][ T43] audit: type=1400 audit(2000000116.299:2833): avc: denied { write } for pid=13986 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.939005][T12076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.939028][T12076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.940246][ T5837] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 200.966863][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.973952][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.974618][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.975022][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.975281][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.043787][T12076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.043808][T12076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.171459][ T5837] usb 11-1: USB disconnect, device number 6 [ 201.211974][T12076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.211996][T12076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.418204][ T43] audit: type=1400 audit(2000000116.809:2834): avc: denied { map } for pid=14018 comm="syz.9.1729" path="socket:[67543]" dev="sockfs" ino=67543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 201.545251][T12076] bond0 (unregistering): Released all slaves [ 201.598210][T12076] tipc: Disabling bearer [ 201.599881][T12076] tipc: Left network mode [ 201.615809][T13990] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.615853][T13990] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.615926][T13990] bridge_slave_0: entered allmulticast mode [ 201.623426][T13990] bridge_slave_0: entered promiscuous mode [ 201.626959][T13990] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.627069][T13990] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.627134][T13990] bridge_slave_1: entered allmulticast mode [ 201.628060][T13990] bridge_slave_1: entered promiscuous mode [ 201.648441][T14029] netlink: 'syz.9.1731': attribute type 2 has an invalid length. [ 201.648456][T14029] netlink: 'syz.9.1731': attribute type 7 has an invalid length. [ 201.659085][T13990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.667255][T14029] Uý: entered promiscuous mode [ 201.669738][T13990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.699552][T13990] team0: Port device team_slave_0 added [ 201.701005][ T43] audit: type=1400 audit(2000000117.089:2835): avc: denied { write } for pid=14030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.716845][T13990] team0: Port device team_slave_1 added [ 201.760695][T13990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.760708][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.760722][T13990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.761682][T13990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.761691][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.761704][T13990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.765411][ T43] audit: type=1400 audit(2000000117.149:2836): avc: denied { write } for pid=14039 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.791799][T13990] hsr_slave_0: entered promiscuous mode [ 201.792230][T13990] hsr_slave_1: entered promiscuous mode [ 201.792588][T13990] debugfs: 'hsr0' already exists in 'hsr' [ 201.792600][T13990] Cannot create hsr debugfs directory [ 201.816635][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 201.862080][ T43] audit: type=1800 audit(2000000117.249:2837): pid=14049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1737" name="file0" dev="overlay" ino=1201 res=0 errno=0 [ 201.867118][T14049] FAULT_INJECTION: forcing a failure. [ 201.867118][T14049] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.867142][T14049] CPU: 2 UID: 0 PID: 14049 Comm: syz.6.1737 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.867158][T14049] Tainted: [L]=SOFTLOCKUP [ 201.867162][T14049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.867169][T14049] Call Trace: [ 201.867173][T14049] [ 201.867178][T14049] dump_stack_lvl+0x100/0x190 [ 201.867210][T14049] should_fail_ex.cold+0x5/0xa [ 201.867225][T14049] ? prepare_alloc_pages+0x16d/0x5b0 [ 201.867243][T14049] should_fail_alloc_page+0xeb/0x140 [ 201.867258][T14049] prepare_alloc_pages+0x1f0/0x5b0 [ 201.867274][T14049] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 201.867293][T14049] ? __kernel_text_address+0xd/0x30 [ 201.867310][T14049] ? unwind_get_return_address+0x59/0xa0 [ 201.867327][T14049] ? arch_stack_walk+0xa6/0xf0 [ 201.867364][T14049] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.867385][T14049] ? __pfx_stack_trace_save+0x10/0x10 [ 201.867406][T14049] ? stack_depot_save_flags+0x27/0x9f0 [ 201.867420][T14049] ? kasan_quarantine_put+0x104/0x240 [ 201.867432][T14049] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.867451][T14049] ? kasan_save_stack+0x3f/0x50 [ 201.867464][T14049] ? kasan_save_stack+0x30/0x50 [ 201.867475][T14049] ? kasan_save_track+0x14/0x30 [ 201.867487][T14049] ? __kasan_kmalloc+0xaa/0xb0 [ 201.867498][T14049] ? __kmalloc_noprof+0x32f/0x840 [ 201.867509][T14049] ? copy_splice_read+0x1a3/0xbb0 [ 201.867523][T14049] ? do_splice_read+0x2bd/0x370 [ 201.867536][T14049] ? splice_direct_to_actor+0x2a1/0xa30 [ 201.867550][T14049] ? do_splice_direct+0x174/0x240 [ 201.867563][T14049] ? do_sendfile+0xadc/0xe20 [ 201.867589][T14049] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 201.867613][T14049] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 201.867631][T14049] ? rcu_is_watching+0x13/0xc0 [ 201.867647][T14049] ? __kmalloc_noprof+0x350/0x840 [ 201.867658][T14049] ? ovl_splice_write+0x360/0x610 [ 201.867671][T14049] ? copy_splice_read+0x1a3/0xbb0 [ 201.867688][T14049] copy_splice_read+0x1e1/0xbb0 [ 201.867703][T14049] ? ovl_splice_write+0x360/0x610 [ 201.867717][T14049] ? __pfx_copy_splice_read+0x10/0x10 [ 201.867730][T14049] ? __pfx_ovl_splice_write+0x10/0x10 [ 201.867744][T14049] ? __pfx_ovl_file_end_write+0x10/0x10 [ 201.867759][T14049] ? find_held_lock+0x2b/0x80 [ 201.867776][T14049] ? __pfx_ovl_splice_read+0x10/0x10 [ 201.867789][T14049] do_splice_read+0x2bd/0x370 [ 201.867805][T14049] splice_direct_to_actor+0x2a1/0xa30 [ 201.867821][T14049] ? __pfx_direct_splice_actor+0x10/0x10 [ 201.867838][T14049] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 201.867854][T14049] ? lock_acquire+0x1d1/0x380 [ 201.867867][T14049] do_splice_direct+0x174/0x240 [ 201.867882][T14049] ? __pfx_do_splice_direct+0x10/0x10 [ 201.867896][T14049] ? avc_policy_seqno+0x9/0x20 [ 201.867912][T14049] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 201.867928][T14049] ? rw_verify_area+0xce/0x6d0 [ 201.867946][T14049] do_sendfile+0xadc/0xe20 [ 201.867965][T14049] ? __pfx_do_sendfile+0x10/0x10 [ 201.867987][T14049] __x64_sys_sendfile64+0x154/0x220 [ 201.868002][T14049] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 201.868020][T14049] do_syscall_64+0x123/0x790 [ 201.868035][T14049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.868047][T14049] RIP: 0033:0x7fa4bcb9e159 [ 201.868057][T14049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.868067][T14049] RSP: 002b:00007fa4bdb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 201.868079][T14049] RAX: ffffffffffffffda RBX: 00007fa4bce25fa0 RCX: 00007fa4bcb9e159 [ 201.868086][T14049] RDX: 0000200000000080 RSI: 0000000000000004 RDI: 0000000000000004 [ 201.868092][T14049] RBP: 00007fa4bdb37090 R08: 0000000000000000 R09: 0000000000000000 [ 201.868099][T14049] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 201.868106][T14049] R13: 00007fa4bce26038 R14: 00007fa4bce25fa0 R15: 00007ffea83a5ba8 [ 201.868120][T14049] [ 201.968804][ T43] audit: type=1400 audit(2000000117.359:2838): avc: denied { write } for pid=14053 comm="syz.6.1738" name="/" dev="9p" ino=73941761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.094210][ T43] audit: type=1400 audit(2000000117.479:2839): avc: denied { write } for pid=14058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.110485][T12076] hsr_slave_0: left promiscuous mode [ 202.111257][T12076] hsr_slave_1: left promiscuous mode [ 202.115372][T12076] veth1_macvtap: left promiscuous mode [ 202.115392][T12076] veth0_macvtap: left promiscuous mode [ 202.115439][T12076] veth1_vlan: left promiscuous mode [ 202.115470][T12076] veth0_vlan: left promiscuous mode [ 202.151428][ T43] audit: type=1400 audit(2000000117.539:2840): avc: denied { write } for pid=14063 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.331499][T14079] FAULT_INJECTION: forcing a failure. [ 202.331499][T14079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 202.331522][T14079] CPU: 3 UID: 0 PID: 14079 Comm: syz.6.1744 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.331539][T14079] Tainted: [L]=SOFTLOCKUP [ 202.331543][T14079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.331549][T14079] Call Trace: [ 202.331554][T14079] [ 202.331559][T14079] dump_stack_lvl+0x100/0x190 [ 202.331579][T14079] should_fail_ex.cold+0x5/0xa [ 202.331593][T14079] ? prepare_alloc_pages+0x16d/0x5b0 [ 202.331610][T14079] should_fail_alloc_page+0xeb/0x140 [ 202.331625][T14079] prepare_alloc_pages+0x1f0/0x5b0 [ 202.331652][T14079] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 202.331674][T14079] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 202.331693][T14079] ? stack_trace_save+0x8e/0xc0 [ 202.331711][T14079] ? __pfx_stack_trace_save+0x10/0x10 [ 202.331729][T14079] ? stack_depot_save_flags+0x27/0x9f0 [ 202.331744][T14079] ? stack_depot_save_flags+0x27/0x9f0 [ 202.331759][T14079] ? kasan_save_stack+0x3f/0x50 [ 202.331770][T14079] ? kasan_save_stack+0x30/0x50 [ 202.331782][T14079] ? kasan_save_track+0x14/0x30 [ 202.331794][T14079] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 202.331811][T14079] ? mmu_topup_memory_caches+0xbc/0x170 [ 202.331824][T14079] ? vcpu_run+0x395d/0x5e80 [ 202.331837][T14079] ? kvm_vcpu_ioctl+0x730/0x1700 [ 202.331851][T14079] ? __x64_sys_ioctl+0x18e/0x210 [ 202.331861][T14079] ? do_syscall_64+0x123/0x790 [ 202.331879][T14079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.331903][T14079] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.331918][T14079] ? policy_nodemask+0xed/0x4f0 [ 202.331935][T14079] alloc_pages_mpol+0x201/0x550 [ 202.331952][T14079] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 202.331968][T14079] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 202.331984][T14079] alloc_pages_noprof+0x1a/0x160 [ 202.332002][T14079] get_free_pages_noprof+0x10/0xb0 [ 202.332015][T14079] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 202.332035][T14079] mmu_topup_memory_caches+0xbc/0x170 [ 202.332048][T14079] kvm_mmu_load+0xe8/0x2580 [ 202.332060][T14079] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 202.332077][T14079] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 202.332095][T14079] ? __pfx_kvm_mmu_load+0x10/0x10 [ 202.332107][T14079] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 202.332118][T14079] ? kvm_check_and_inject_events+0x896/0x1050 [ 202.332133][T14079] vcpu_run+0x395d/0x5e80 [ 202.332146][T14079] ? vmx_vcpu_load_vmcs+0x21d/0x760 [ 202.332167][T14079] ? __pfx_vcpu_run+0x10/0x10 [ 202.332182][T14079] ? lock_acquire+0x1d1/0x380 [ 202.332193][T14079] ? kvm_arch_vcpu_ioctl_run+0x2e9/0x1dd0 [ 202.332209][T14079] ? fpu_swap_kvm_fpstate+0x217/0x460 [ 202.332224][T14079] ? __local_bh_enable_ip+0xa5/0x120 [ 202.332238][T14079] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 202.332252][T14079] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 202.332269][T14079] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 202.332282][T14079] ? lock_acquire+0x1d1/0x380 [ 202.332294][T14079] ? do_raw_write_lock+0x11e/0x260 [ 202.332307][T14079] ? find_held_lock+0x2b/0x80 [ 202.332322][T14079] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 202.332337][T14079] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 202.332354][T14079] kvm_vcpu_ioctl+0x730/0x1700 [ 202.332371][T14079] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 202.332389][T14079] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.332402][T14079] ? do_vfs_ioctl+0x226/0x13e0 [ 202.332413][T14079] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 202.332423][T14079] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 202.332437][T14079] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 202.332452][T14079] ? __fget_files+0x34/0x3d0 [ 202.332471][T14079] ? selinux_file_ioctl+0x13b/0x290 [ 202.332482][T14079] ? selinux_file_ioctl+0xb6/0x290 [ 202.332494][T14079] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 202.332510][T14079] __x64_sys_ioctl+0x18e/0x210 [ 202.332522][T14079] do_syscall_64+0x123/0x790 [ 202.332538][T14079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.332550][T14079] RIP: 0033:0x7fa4bcb9e159 [ 202.332560][T14079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.332571][T14079] RSP: 002b:00007fa4bdb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.332583][T14079] RAX: ffffffffffffffda RBX: 00007fa4bce25fa0 RCX: 00007fa4bcb9e159 [ 202.332591][T14079] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 202.332597][T14079] RBP: 00007fa4bcc3503b R08: 0000000000000000 R09: 0000000000000000 [ 202.332604][T14079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.332611][T14079] R13: 00007fa4bce26038 R14: 00007fa4bce25fa0 R15: 00007ffea83a5ba8 [ 202.332626][T14079] [ 202.430780][ T43] audit: type=1400 audit(2000000117.819:2841): avc: denied { create } for pid=14081 comm="syz.9.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.501007][T14090] fuse: Unknown parameter 'ÿÿ' [ 202.621363][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 202.624549][T14092] lo: entered allmulticast mode [ 202.801964][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 202.819634][T14115] __nla_validate_parse: 2 callbacks suppressed [ 202.819647][T14115] netlink: 196 bytes leftover after parsing attributes in process `syz.9.1754'. [ 202.820402][T14115] netlink: 196 bytes leftover after parsing attributes in process `syz.9.1754'. [ 202.820415][T14115] netlink: 19 bytes leftover after parsing attributes in process `syz.9.1754'. [ 202.946864][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18 [ 203.026662][T14133] syz_tun: entered allmulticast mode [ 203.048571][ T5726] Bluetooth: hci0: command tx timeout [ 203.111302][T12076] IPVS: stop unused estimator thread 0... [ 203.184997][T14157] netlink: 'syz.6.1761': attribute type 29 has an invalid length. [ 203.214936][T14157] netlink: 'syz.6.1761': attribute type 29 has an invalid length. [ 203.459320][T13990] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.463053][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.464170][T13990] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.466913][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.468231][T13990] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.480315][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.480706][T13990] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.482779][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.542020][T13990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.556824][T13990] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.572986][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.573082][ T7105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.583313][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.583367][ T7105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.861909][T13990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.917004][T13990] veth0_vlan: entered promiscuous mode [ 203.920687][T13990] veth1_vlan: entered promiscuous mode [ 203.943908][T13990] veth0_macvtap: entered promiscuous mode [ 203.945954][T13990] veth1_macvtap: entered promiscuous mode [ 203.955956][T13990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.961330][T13990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.042866][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.042882][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.048672][T12073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.049045][ T9723] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.049085][ T9723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.049104][ T9723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.108755][ T7118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.108769][ T7118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.273402][T14241] kAFS: No cell specified [ 205.047664][ T5726] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.085338][T14285] tipc: Started in network mode [ 205.085357][T14285] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 205.085495][T14285] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 205.085875][T14285] tipc: Enabled bearer , priority 10 [ 205.127706][ T5726] Bluetooth: hci0: command tx timeout [ 205.447646][T14297] befs: (loop3): No write support. Marking filesystem read-only [ 205.462294][T14297] befs: (loop3): unable to read superblock [ 205.741306][ T5726] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 206.117523][ T8431] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 206.209473][ T9] tipc: Node number set to 1 [ 206.267694][ T8431] usb 8-1: Using ep0 maxpacket: 8 [ 206.268252][ T8431] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 206.269165][ T8431] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 206.269183][ T8431] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 206.269201][ T8431] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 206.269214][ T8431] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.269227][ T8431] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.269240][ T8431] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.269252][ T8431] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 206.269265][ T8431] usb 8-1: config 168 interface 0 has no altsetting 0 [ 206.270143][ T8431] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 206.270160][ T8431] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 206.270177][ T8431] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 206.270190][ T8431] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.270203][ T8431] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.270215][ T8431] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.270228][ T8431] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 206.270241][ T8431] usb 8-1: config 168 interface 0 has no altsetting 0 [ 206.271061][ T8431] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 206.271077][ T8431] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 206.271096][ T8431] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 206.271109][ T8431] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.271121][ T8431] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 206.271133][ T8431] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.271147][ T8431] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 206.271160][ T8431] usb 8-1: config 168 interface 0 has no altsetting 0 [ 206.273676][ T8431] usb 8-1: string descriptor 0 read error: -22 [ 206.273732][ T8431] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.282114][ T8431] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 206.479646][ T6643] usb 8-1: USB disconnect, device number 6 [ 206.677766][T14327] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1792'. [ 206.678214][T14327] netlink: 'syz.6.1792': attribute type 1 has an invalid length. [ 206.678227][T14327] netlink: 'syz.6.1792': attribute type 2 has an invalid length. [ 206.684873][ T43] kauditd_printk_skb: 34 callbacks suppressed [ 206.684885][ T43] audit: type=1400 audit(2000000122.069:2876): avc: denied { setattr } for pid=14320 comm="syz.3.1791" name="/" dev="configfs" ino=2107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.107676][ T50] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 207.209098][ T5726] Bluetooth: hci0: command tx timeout [ 207.239019][ T50] usb 11-1: device descriptor read/64, error -71 [ 207.273494][T14343] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 207.274418][T14343] program syz.3.1797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.276079][T14343] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 207.487653][ T50] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 207.513856][ T43] audit: type=1400 audit(2000000122.899:2877): avc: denied { bind } for pid=14352 comm="syz.3.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 207.514039][ T43] audit: type=1400 audit(2000000122.899:2878): avc: denied { name_bind } for pid=14352 comm="syz.3.1801" src=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 207.514178][ T43] audit: type=1400 audit(2000000122.899:2879): avc: denied { node_bind } for pid=14352 comm="syz.3.1801" saddr=f2ff:ffff:f2ff:ffff:f2ff:ffff:f2ff:ffff src=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 207.637782][ T50] usb 11-1: device descriptor read/64, error -71 [ 207.664882][ T43] audit: type=1400 audit(2000000123.049:2880): avc: denied { read } for pid=14365 comm="syz.3.1806" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.665039][ T43] audit: type=1400 audit(2000000123.049:2881): avc: denied { open } for pid=14365 comm="syz.3.1806" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.665660][ T43] audit: type=1400 audit(2000000123.049:2882): avc: denied { ioctl } for pid=14365 comm="syz.3.1806" path="/dev/loop-control" dev="devtmpfs" ino=655 ioctlcmd=0x9410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.721948][T14371] hfs: can't find a HFS filesystem on dev sr0 [ 207.758291][ T50] usb usb11-port1: attempt power cycle [ 207.772894][T14374] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1807'. [ 207.856457][T14375] cgroup: fork rejected by pids controller in /syz3 [ 208.107691][ T50] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 208.138567][ T50] usb 11-1: device descriptor read/8, error -71 [ 208.377448][ T50] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 208.416233][ T50] usb 11-1: device descriptor read/8, error -71 [ 208.510288][T14382] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 208.518242][ T50] usb usb11-port1: unable to enumerate USB device [ 208.887586][ T43] audit: type=1400 audit(2000000124.269:2883): avc: denied { node_bind } for pid=14399 comm="syz.9.1816" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 208.917119][T14402] overlayfs: failed to clone lowerpath [ 208.921989][T14402] overlayfs: failed to clone upperpath [ 208.922370][T14403] overlayfs: failed to clone upperpath [ 209.007336][T14407] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 209.030718][T14407] CIFS: VFS: Error connecting to socket. Aborting operation. [ 209.030745][T14407] CIFS: VFS: cifs_mount failed w/return code = -111 [ 209.031584][ T9723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.106999][ T9723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.143097][T14414] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1822'. [ 209.145062][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.145954][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.147659][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.153418][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.154064][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.184645][T14418] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 209.213436][ T9723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.255292][T14425] futex_wake_op: syz.9.1825 tries to shift op by 32; fix this program [ 209.326349][ T9723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.531884][ T9723] bridge_slave_1: left allmulticast mode [ 209.531902][ T9723] bridge_slave_1: left promiscuous mode [ 209.532015][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.534136][ T9723] bridge_slave_0: left allmulticast mode [ 209.534149][ T9723] bridge_slave_0: left promiscuous mode [ 209.534249][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.542402][ T43] audit: type=1400 audit(2000000124.929:2884): avc: denied { write } for pid=14443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.587298][ T43] audit: type=1400 audit(2000000124.969:2885): avc: denied { write } for pid=14447 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.654296][ T9723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.656235][ T9723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.657193][ T9723] bond0 (unregistering): Released all slaves [ 209.674120][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14 [ 209.753545][ T9723] tipc: Disabling bearer [ 209.753618][ T9723] tipc: Left network mode [ 209.760165][T14412] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.760252][T14412] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.760314][T14412] bridge_slave_0: entered allmulticast mode [ 209.761066][T14412] bridge_slave_0: entered promiscuous mode [ 209.762298][T14412] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.762367][T14412] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.762460][T14412] bridge_slave_1: entered allmulticast mode [ 209.763167][T14412] bridge_slave_1: entered promiscuous mode [ 209.778713][T14412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.780112][T14412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.815682][T14412] team0: Port device team_slave_0 added [ 209.817220][T14412] team0: Port device team_slave_1 added [ 209.835172][T14412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.835183][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.835196][T14412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.836046][T14412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.836054][T14412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.836067][T14412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.920756][T14412] hsr_slave_0: entered promiscuous mode [ 209.921253][T14412] hsr_slave_1: entered promiscuous mode [ 209.921562][T14412] debugfs: 'hsr0' already exists in 'hsr' [ 209.921573][T14412] Cannot create hsr debugfs directory [ 209.968848][ T5444] 8021q: adding VLAN 0 to HW filter on device eth15 [ 210.050159][ T9723] hsr_slave_0: left promiscuous mode [ 210.050604][ T9723] hsr_slave_1: left promiscuous mode [ 210.050967][ T9723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.050978][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.051514][ T9723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.051523][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.055737][ T9723] veth1_macvtap: left promiscuous mode [ 210.055758][ T9723] veth0_macvtap: left promiscuous mode [ 210.055833][ T9723] veth1_vlan: left promiscuous mode [ 210.055886][ T9723] veth0_vlan: left promiscuous mode [ 210.076905][T14487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.077801][T14487] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1836'. [ 210.100139][ T5521] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 210.215964][ T9723] team0 (unregistering): Port device team_slave_1 removed [ 210.223347][ T9723] team0 (unregistering): Port device team_slave_0 removed [ 210.891884][T14523] fuse: Unknown parameter '0x00000000000000000x0000000000000004' [ 210.962687][T14529] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(15728644.50.0), cmd(9) [ 211.090087][T14412] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.094450][T14412] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.095017][T14412] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.105766][T14412] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.106277][T14412] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.113308][T14412] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.113716][T14412] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.115439][T14412] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.161411][T14558] fuse: fd is not a fuse device [ 211.163108][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1848'. [ 211.170642][T14412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.177768][T14412] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.180503][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.180549][ T7105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.183288][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.183332][ T7107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.217510][ T65] Bluetooth: hci0: command tx timeout [ 211.337169][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1851'. [ 211.367493][ T8028] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 211.387871][T14412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.405508][T14412] veth0_vlan: entered promiscuous mode [ 211.410053][T14412] veth1_vlan: entered promiscuous mode [ 211.421666][T14412] veth0_macvtap: entered promiscuous mode [ 211.423673][T14412] veth1_macvtap: entered promiscuous mode [ 211.430835][T14412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.432756][T14412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.477600][T12087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.477643][T12087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.477662][T12087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.477679][T12087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.517468][ T8028] usb 11-1: Using ep0 maxpacket: 32 [ 211.517933][ T8028] usb 11-1: New USB device found, idVendor=046d, idProduct=c704, bcdDevice= 0.40 [ 211.518801][ T8028] usb 11-1: config 1 interface 0 has no altsetting 0 [ 211.520309][ T8028] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.520322][ T8028] usb 11-1: Product:  [ 211.520330][ T8028] usb 11-1: Manufacturer: ä Š [ 211.520337][ T8028] usb 11-1: SerialNumber: à ” [ 211.521918][ T7105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.521931][ T7105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.537591][ T7105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.537604][ T7105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.727673][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 211.727687][ T43] audit: type=1400 audit(2000000127.119:2896): avc: denied { map } for pid=14547 comm="syz.6.1846" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 211.750089][ T8028] usbhid 11-1:1.0: can't add hid device: -71 [ 211.750141][ T8028] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 211.754323][ T8028] usb 11-1: USB disconnect, device number 11 [ 212.031197][T14600] usb usb8: check_ctrlrecip: process 14600 (syz.3.1857) requesting ep 01 but needs 81 [ 212.031216][T14600] usb usb8: usbfs: process 14600 (syz.3.1857) did not claim interface 0 before use [ 212.204702][T14610] tipc: Started in network mode [ 212.204720][T14610] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 212.204849][T14610] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 212.205317][T14610] tipc: Enabled bearer , priority 10 [ 212.267709][T14616] netlink: Conntrack attr has 12 unknown bytes [ 212.267727][T14616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.305583][T14622] tipc: New replicast peer: 172.20.20.187 [ 212.305777][T14622] tipc: Enabled bearer , priority 10 [ 212.325753][T14623] tipc: Enabling of bearer rejected, already enabled [ 212.370169][T14630] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1868'. [ 212.834993][T14659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48405 sclass=netlink_route_socket pid=14659 comm=syz.6.1881 [ 212.836254][T14659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48405 sclass=netlink_route_socket pid=14659 comm=syz.6.1881 [ 212.946443][T14666] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1883'. [ 213.289269][ T65] Bluetooth: hci0: command tx timeout [ 213.330989][ T6642] tipc: Node number set to 1 [ 213.356043][T14669] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1885'. [ 213.375261][ T5726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.381605][ T5726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.382862][ T5726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.385465][ T5726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.386432][ T5726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.676328][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.676410][T14671] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.676568][T14671] bridge_slave_0: entered allmulticast mode [ 213.677319][T14671] bridge_slave_0: entered promiscuous mode [ 213.678703][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.678774][T14671] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.678838][T14671] bridge_slave_1: entered allmulticast mode [ 213.679513][T14671] bridge_slave_1: entered promiscuous mode [ 213.694579][T14671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.695859][T14671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.707812][T14671] team0: Port device team_slave_0 added [ 213.709032][T14671] team0: Port device team_slave_1 added [ 213.721499][T14671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.721510][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.721523][T14671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.722306][T14671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.722313][T14671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.722326][T14671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.744090][T14671] hsr_slave_0: entered promiscuous mode [ 213.744538][T14671] hsr_slave_1: entered promiscuous mode [ 213.744858][T14671] debugfs: 'hsr0' already exists in 'hsr' [ 213.744869][T14671] Cannot create hsr debugfs directory [ 213.794414][T14691] Bluetooth: MGMT ver 1.23 [ 213.860005][ T43] audit: type=1400 audit(2000000129.249:2897): avc: denied { write } for pid=14692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.870028][ T43] audit: type=1400 audit(2000000129.259:2898): avc: denied { map } for pid=14689 comm="syz.6.1886" path="socket:[69395]" dev="sockfs" ino=69395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 213.905627][ T43] audit: type=1400 audit(2000000129.289:2899): avc: denied { write } for pid=14696 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.997342][ T43] audit: type=1400 audit(2000000129.379:2900): avc: denied { write } for pid=14698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.047970][ T43] audit: type=1400 audit(2000000129.439:2901): avc: denied { write } for pid=14705 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.068922][T14709] tipc: Can't bind to reserved service type 1 [ 214.079280][T14712] jffs2: notice: (14712) jffs2_build_xattr_subsystem: complete building xattr subsystem, 9 of xdatum (0 unchecked, 9 orphan) and 15 of xref (1 dead, 14 orphan) found. [ 214.119778][ T43] audit: type=1400 audit(2000000129.509:2902): avc: denied { write } for pid=14714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.165478][ T43] audit: type=1400 audit(2000000129.549:2903): avc: denied { write } for pid=14717 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.257131][T14671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.261799][T14671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.262351][T14671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.264015][T14671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.264542][T14671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.266494][T14671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.266950][T14671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.273624][ T43] audit: type=1400 audit(2000000129.659:2904): avc: denied { write } for pid=14724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.291595][T14671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.306697][T14671] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.306744][T14671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.306850][T14671] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.306894][T14671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.323457][ T43] audit: type=1400 audit(2000000129.709:2905): avc: denied { write } for pid=14733 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.355977][T14671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.364130][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.364785][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.378859][T14671] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.382351][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.382397][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.385316][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.385361][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.632696][T14671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.788316][T14671] veth0_vlan: entered promiscuous mode [ 214.793237][T14671] veth1_vlan: entered promiscuous mode [ 214.806021][T14671] veth0_macvtap: entered promiscuous mode [ 214.808706][T14671] veth1_macvtap: entered promiscuous mode [ 214.816725][T14671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.820168][T14671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.930691][T12073] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.938667][ T7118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.938680][ T7118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.947713][ T9723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.947751][ T9723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.947778][ T9723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.130672][ T7118] rpcbind: server 127.0.0.1 not responding, timed out [ 215.367586][ T5726] Bluetooth: hci0: command tx timeout [ 215.457780][ T5726] Bluetooth: hci2: command tx timeout [ 217.447520][ T5726] Bluetooth: hci0: command tx timeout [ 217.527538][ T5726] Bluetooth: hci2: command tx timeout [ 217.915011][T14795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.968440][ T7107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.968461][ T7107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.154600][T14874] netlink: 'syz.6.1908': attribute type 21 has an invalid length. [ 218.154615][T14874] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1908'. [ 218.154659][T14874] netlink: 'syz.6.1908': attribute type 4 has an invalid length. [ 218.154667][T14874] netlink: 'syz.6.1908': attribute type 5 has an invalid length. [ 218.154673][T14874] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1908'. [ 218.368653][T14877] binder: 14876:14877 ioctl 80045432 200000000080 returned -22 [ 218.390976][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'. [ 218.390990][T14886] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1911'. [ 218.423646][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 218.423658][ T43] audit: type=1400 audit(2000000133.809:2933): avc: denied { remount } for pid=14887 comm="syz.6.1912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 218.474752][T14895] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 219.230991][ T43] audit: type=1400 audit(2000000134.619:2934): avc: denied { setopt } for pid=14946 comm="syz.6.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 219.536559][ T43] audit: type=1400 audit(2000000134.919:2935): avc: denied { write } for pid=14984 comm="syz.9.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 219.553368][T14985] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 219.559794][T14985] bond2 (unregistering): Released all slaves [ 219.604278][T14987] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 219.613340][T14987] bond2 (unregistering): Released all slaves [ 219.619825][ T5726] Bluetooth: hci2: command tx timeout [ 219.728589][T14996] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1935'. [ 219.730089][T14996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.807322][T15005] macvtap1: entered promiscuous mode [ 219.815327][T15005] vlan1: entered promiscuous mode [ 219.816484][T15005] team0: Device macvtap1 failed to register rx_handler [ 219.817014][T15005] vlan1: left promiscuous mode [ 220.063840][T15017] FAULT_INJECTION: forcing a failure. [ 220.063840][T15017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.063862][T15017] CPU: 2 UID: 0 PID: 15017 Comm: syz.5.1942 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.063878][T15017] Tainted: [L]=SOFTLOCKUP [ 220.063883][T15017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.063890][T15017] Call Trace: [ 220.063894][T15017] [ 220.063899][T15017] dump_stack_lvl+0x100/0x190 [ 220.063929][T15017] should_fail_ex.cold+0x5/0xa [ 220.063946][T15017] _copy_to_user+0x32/0xd0 [ 220.063962][T15017] simple_read_from_buffer+0xcb/0x170 [ 220.063978][T15017] proc_fail_nth_read+0x1af/0x230 [ 220.063992][T15017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.064007][T15017] ? rw_verify_area+0xce/0x6d0 [ 220.064023][T15017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.064037][T15017] vfs_read+0x1e4/0xb40 [ 220.064049][T15017] ? lock_acquire+0x1d1/0x380 [ 220.064060][T15017] ? __fget_files+0x34/0x3d0 [ 220.064073][T15017] ? __pfx_vfs_read+0x10/0x10 [ 220.064083][T15017] ? find_held_lock+0x2b/0x80 [ 220.064099][T15017] ? __fget_files+0x215/0x3d0 [ 220.064115][T15017] ? __fget_files+0x21f/0x3d0 [ 220.064132][T15017] ksys_read+0x12a/0x250 [ 220.064143][T15017] ? __pfx_ksys_read+0x10/0x10 [ 220.064158][T15017] do_syscall_64+0x123/0x790 [ 220.064188][T15017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.064200][T15017] RIP: 0033:0x7f3d4795e98e [ 220.064210][T15017] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.064225][T15017] RSP: 002b:00007f3d45bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.064237][T15017] RAX: ffffffffffffffda RBX: 00007f3d45bf66c0 RCX: 00007f3d4795e98e [ 220.064245][T15017] RDX: 000000000000000f RSI: 00007f3d45bf60a0 RDI: 0000000000000004 [ 220.064251][T15017] RBP: 00007f3d45bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.064258][T15017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.064265][T15017] R13: 00007f3d47c26038 R14: 00007f3d47c25fa0 R15: 00007ffcb5eed2a8 [ 220.064280][T15017] [ 220.167727][T15024] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1944'. [ 220.193841][T15024] qnx6: unable to set blocksize [ 220.371728][ T43] audit: type=1400 audit(2000000135.759:2936): avc: denied { write } for pid=15055 comm="syz.5.1957" name="rt6_stats" dev="proc" ino=4026534360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 220.523765][T15068] syz.5.1961 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 220.523790][T15068] CPU: 0 UID: 0 PID: 15068 Comm: syz.5.1961 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.523806][T15068] Tainted: [L]=SOFTLOCKUP [ 220.523811][T15068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.523819][T15068] Call Trace: [ 220.523824][T15068] [ 220.523829][T15068] dump_stack_lvl+0x100/0x190 [ 220.523851][T15068] dump_header+0xfb/0x606 [ 220.523866][T15068] oom_kill_process.cold+0xd/0x380 [ 220.523881][T15068] out_of_memory+0x340/0x14f0 [ 220.523900][T15068] ? __pfx_out_of_memory+0x10/0x10 [ 220.523919][T15068] mem_cgroup_out_of_memory+0xc6/0x130 [ 220.523933][T15068] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 220.523944][T15068] ? find_held_lock+0x2b/0x80 [ 220.523962][T15068] ? do_raw_spin_unlock+0x145/0x1e0 [ 220.523977][T15068] ? _raw_spin_unlock+0x28/0x50 [ 220.523991][T15068] try_charge_memcg+0x783/0xf60 [ 220.524011][T15068] ? __pfx_try_charge_memcg+0x10/0x10 [ 220.524026][T15068] ? find_held_lock+0x2b/0x80 [ 220.524042][T15068] ? rcu_read_unlock+0x17/0x60 [ 220.524058][T15068] ? rcu_read_unlock+0x17/0x60 [ 220.524078][T15068] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 220.524100][T15068] ? kasan_unpoison+0x27/0x60 [ 220.524112][T15068] __kvmalloc_node_noprof+0x750/0x9b0 [ 220.524127][T15068] ? __pfx_try_to_wake_up+0x10/0x10 [ 220.524141][T15068] ? traverse.part.0.constprop.0+0x397/0x650 [ 220.524158][T15068] traverse.part.0.constprop.0+0x397/0x650 [ 220.524189][T15068] seq_read_iter+0x93f/0x1270 [ 220.524202][T15068] ? fdget_pos+0x2aa/0x380 [ 220.524224][T15068] kernfs_fop_read_iter+0x46c/0x610 [ 220.524238][T15068] ? rw_verify_area+0xce/0x6d0 [ 220.524255][T15068] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 220.524268][T15068] vfs_read+0x82e/0xb40 [ 220.524281][T15068] ? __pfx_vfs_read+0x10/0x10 [ 220.524290][T15068] ? find_held_lock+0x2b/0x80 [ 220.524316][T15068] ksys_read+0x12a/0x250 [ 220.524327][T15068] ? __pfx_ksys_read+0x10/0x10 [ 220.524343][T15068] do_syscall_64+0x123/0x790 [ 220.524359][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.524371][T15068] RIP: 0033:0x7f3d4799e159 [ 220.524387][T15068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.524398][T15068] RSP: 002b:00007f3d45bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.524411][T15068] RAX: ffffffffffffffda RBX: 00007f3d47c25fa0 RCX: 00007f3d4799e159 [ 220.524419][T15068] RDX: 0000000000002020 RSI: 0000200000008080 RDI: 0000000000000003 [ 220.524426][T15068] RBP: 00007f3d47a3503b R08: 0000000000000000 R09: 0000000000000000 [ 220.524434][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.524443][T15068] R13: 00007f3d47c26038 R14: 00007f3d47c25fa0 R15: 00007ffcb5eed2a8 [ 220.524459][T15068] [ 220.524464][T15068] memory: usage 4kB, limit 8kB, failcnt 39 [ 220.524471][T15068] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 220.524478][T15068] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 220.524485][T15068] Memory cgroup stats for /syz5/test: [ 220.524547][T15068] cache 0 [ 220.524552][T15068] rss 0 [ 220.524556][T15068] rss_huge 0 [ 220.524560][T15068] shmem 0 [ 220.524565][T15068] mapped_file 0 [ 220.524570][T15068] dirty 0 [ 220.524574][T15068] writeback 0 [ 220.524578][T15068] workingset_refault_anon 0 [ 220.524583][T15068] workingset_refault_file 0 [ 220.524588][T15068] swap 0 [ 220.524592][T15068] swapcached 0 [ 220.524596][T15068] pgpgin 0 [ 220.524600][T15068] pgpgout 0 [ 220.524605][T15068] pgfault 0 [ 220.524609][T15068] pgmajfault 0 [ 220.524613][T15068] inactive_anon 0 [ 220.524617][T15068] active_anon 0 [ 220.524622][T15068] inactive_file 0 [ 220.524626][T15068] active_file 0 [ 220.524630][T15068] unevictable 0 [ 220.524634][T15068] hierarchical_memory_limit 8192 [ 220.524638][T15068] hierarchical_memsw_limit 9223372036854771712 [ 220.524643][T15068] total_cache 0 [ 220.524669][T15068] total_rss 0 [ 220.524674][T15068] total_rss_huge 0 [ 220.524679][T15068] total_shmem 0 [ 220.524684][T15068] total_mapped_file 0 [ 220.524688][T15068] total_dirty 0 [ 220.524692][T15068] total_writeback 0 [ 220.524697][T15068] total_workingset_refault_anon 0 [ 220.524702][T15068] total_workingset_refault_file 0 [ 220.524707][T15068] total_swap 0 [ 220.524711][T15068] total_swapcached 0 [ 220.524715][T15068] total_pgpgin 0 [ 220.524720][T15068] total_pgpgout 0 [ 220.524724][T15068] total_pgfault 0 [ 220.524729][T15068] total_pgmajfault 0 [ 220.524734][T15068] total_inactive_anon 0 [ 220.524738][T15068] total_active_anon 0 [ 220.524743][T15068] total_inactive_file 0 [ 220.524748][T15068] total_active_file 0 [ 220.524753][T15068] total_unevictable 0 [ 220.524757][T15068] anon_cost 0 [ 220.524761][T15068] file_cost 0 [ 220.524765][T15068] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1961,pid=15067,uid=0 [ 220.525412][T15068] Memory cgroup out of memory: Killed process 15067 (syz.5.1961) total-vm:102252kB, anon-rss:1420kB, file-rss:22864kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 220.631892][T15075] bond0: invalid NS target ff00:: specified for addition [ 220.631911][T15075] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 220.657466][ T5816] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 220.759466][T15081] netlink: 17 bytes leftover after parsing attributes in process `syz.9.1967'. [ 220.808939][ T5816] usb 11-1: Using ep0 maxpacket: 32 [ 220.809757][T15087] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 220.810850][ T5816] usb 11-1: unable to get BOS descriptor or descriptor too short [ 220.810874][ T5816] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 220.811680][ T5816] usb 11-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 220.813509][ T5816] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.813521][ T5816] usb 11-1: Product: syz [ 220.813529][ T5816] usb 11-1: Manufacturer: syz [ 220.813537][ T5816] usb 11-1: SerialNumber: syz [ 220.955725][T15097] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 221.020234][T15059] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1958'. [ 221.052161][ T43] audit: type=1400 audit(2000000136.439:2937): avc: denied { setopt } for pid=15098 comm="syz.9.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.147942][ T43] audit: type=1400 audit(2000000136.539:2938): avc: denied { ioctl } for pid=15110 comm="syz.9.1980" path="socket:[73947]" dev="sockfs" ino=73947 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 221.151857][ T5816] usb 11-1: USB disconnect, device number 12 [ 221.175640][T15111] FAULT_INJECTION: forcing a failure. [ 221.175640][T15111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.175662][T15111] CPU: 0 UID: 0 PID: 15111 Comm: syz.5.1979 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.175678][T15111] Tainted: [L]=SOFTLOCKUP [ 221.175683][T15111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.175689][T15111] Call Trace: [ 221.175694][T15111] [ 221.175699][T15111] dump_stack_lvl+0x100/0x190 [ 221.175719][T15111] should_fail_ex.cold+0x5/0xa [ 221.175736][T15111] __kvm_read_guest_page+0x186/0x250 [ 221.175753][T15111] kvm_fetch_guest_virt+0x10d/0x180 [ 221.175770][T15111] __do_insn_fetch_bytes+0x5e2/0x7b0 [ 221.175786][T15111] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 221.175805][T15111] x86_decode_insn+0x3ca/0x6da0 [ 221.175827][T15111] ? vmx_segment_cache_test_set+0x151/0x400 [ 221.175842][T15111] ? __pfx_x86_decode_insn+0x10/0x10 [ 221.175859][T15111] ? vmx_cache_reg+0x535/0x700 [ 221.175875][T15111] ? init_decode_cache+0xd/0x2b0 [ 221.175892][T15111] ? init_emulate_ctxt+0x3fb/0x6b0 [ 221.175905][T15111] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 221.175917][T15111] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 221.175934][T15111] ? kvm_multiple_exception+0x3b1/0x6d0 [ 221.175949][T15111] x86_emulate_instruction+0x1047/0x1d50 [ 221.175961][T15111] ? trace_sched_exit_tp+0x120/0x160 [ 221.175976][T15111] ? __schedule+0x126b/0x6920 [ 221.175991][T15111] handle_ud+0xfd/0x560 [ 221.176001][T15111] ? __pfx_handle_ud+0x10/0x10 [ 221.176014][T15111] ? vmx_vcpu_enter_exit+0x130/0x1e0 [ 221.176030][T15111] ? rcu_is_watching+0x13/0xc0 [ 221.176045][T15111] ? __vmx_complete_interrupts+0x129/0x570 [ 221.176059][T15111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.176075][T15111] handle_exception_nmi+0xd11/0x1af0 [ 221.176090][T15111] ? __pfx_handle_exception_nmi+0x10/0x10 [ 221.176104][T15111] vmx_handle_exit+0x4c8/0x1d30 [ 221.176119][T15111] vcpu_run+0x34b8/0x5e80 [ 221.176138][T15111] ? __pfx_vcpu_run+0x10/0x10 [ 221.176156][T15111] ? complete_emulated_mmio+0x102/0x710 [ 221.176170][T15111] ? kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 221.176184][T15111] kvm_arch_vcpu_ioctl_run+0xf8a/0x1dd0 [ 221.176202][T15111] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 221.176223][T15111] ? tomoyo_path_number_perm+0x188/0x580 [ 221.176244][T15111] kvm_vcpu_ioctl+0x730/0x1700 [ 221.176261][T15111] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 221.176277][T15111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.176290][T15111] ? do_vfs_ioctl+0x226/0x13e0 [ 221.176302][T15111] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 221.176312][T15111] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 221.176327][T15111] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 221.176341][T15111] ? __fget_files+0x34/0x3d0 [ 221.176361][T15111] ? selinux_file_ioctl+0x13b/0x290 [ 221.176372][T15111] ? selinux_file_ioctl+0xb6/0x290 [ 221.176385][T15111] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 221.176401][T15111] __x64_sys_ioctl+0x18e/0x210 [ 221.176413][T15111] do_syscall_64+0x123/0x790 [ 221.176429][T15111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.176441][T15111] RIP: 0033:0x7f3d4799e159 [ 221.176451][T15111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.176462][T15111] RSP: 002b:00007f3d45bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.176473][T15111] RAX: ffffffffffffffda RBX: 00007f3d47c25fa0 RCX: 00007f3d4799e159 [ 221.176494][T15111] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 221.176500][T15111] RBP: 00007f3d45bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.176507][T15111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.176514][T15111] R13: 00007f3d47c26038 R14: 00007f3d47c25fa0 R15: 00007ffcb5eed2a8 [ 221.176529][T15111] [ 221.271038][T15115] xt_hashlimit: size too large, truncated to 1048576 [ 221.362663][T15121] bonding: unable to delete non-existent b [ 221.362999][T15121] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1983'. [ 221.396596][ T43] audit: type=1400 audit(2000000136.779:2939): avc: denied { create } for pid=15128 comm="syz.9.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 221.501143][ T43] audit: type=1400 audit(2000000136.889:2940): avc: denied { write } for pid=15128 comm="syz.9.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 221.535534][T15121] nvme_tcp: queue 0: failed to receive icresp, error -4 [ 221.678800][T15143] syz.5.1991 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 221.678825][T15143] CPU: 0 UID: 0 PID: 15143 Comm: syz.5.1991 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.678843][T15143] Tainted: [L]=SOFTLOCKUP [ 221.678847][T15143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.678855][T15143] Call Trace: [ 221.678859][T15143] [ 221.678865][T15143] dump_stack_lvl+0x100/0x190 [ 221.678885][T15143] dump_header+0xfb/0x606 [ 221.678899][T15143] oom_kill_process.cold+0xd/0x380 [ 221.678914][T15143] out_of_memory+0x340/0x14f0 [ 221.678935][T15143] ? __pfx_out_of_memory+0x10/0x10 [ 221.678953][T15143] mem_cgroup_out_of_memory+0xc6/0x130 [ 221.678966][T15143] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 221.678978][T15143] ? find_held_lock+0x2b/0x80 [ 221.678996][T15143] ? do_raw_spin_unlock+0x145/0x1e0 [ 221.679011][T15143] ? _raw_spin_unlock+0x28/0x50 [ 221.679024][T15143] try_charge_memcg+0x783/0xf60 [ 221.679044][T15143] ? __pfx_try_charge_memcg+0x10/0x10 [ 221.679059][T15143] ? find_held_lock+0x2b/0x80 [ 221.679074][T15143] ? rcu_read_unlock+0x17/0x60 [ 221.679089][T15143] ? rcu_read_unlock+0x17/0x60 [ 221.679110][T15143] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 221.679133][T15143] ? kasan_unpoison+0x27/0x60 [ 221.679146][T15143] __kvmalloc_node_noprof+0x750/0x9b0 [ 221.679160][T15143] ? __pfx_try_to_wake_up+0x10/0x10 [ 221.679173][T15143] ? traverse.part.0.constprop.0+0x397/0x650 [ 221.679190][T15143] traverse.part.0.constprop.0+0x397/0x650 [ 221.679208][T15143] seq_read_iter+0x93f/0x1270 [ 221.679220][T15143] ? fdget_pos+0x2aa/0x380 [ 221.679240][T15143] kernfs_fop_read_iter+0x46c/0x610 [ 221.679253][T15143] ? rw_verify_area+0xce/0x6d0 [ 221.679269][T15143] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 221.679282][T15143] vfs_read+0x82e/0xb40 [ 221.679295][T15143] ? __pfx_vfs_read+0x10/0x10 [ 221.679305][T15143] ? find_held_lock+0x2b/0x80 [ 221.679329][T15143] ksys_read+0x12a/0x250 [ 221.679340][T15143] ? __pfx_ksys_read+0x10/0x10 [ 221.679355][T15143] do_syscall_64+0x123/0x790 [ 221.679377][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.679390][T15143] RIP: 0033:0x7f3d4799e159 [ 221.679402][T15143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.679414][T15143] RSP: 002b:00007f3d45bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.679427][T15143] RAX: ffffffffffffffda RBX: 00007f3d47c25fa0 RCX: 00007f3d4799e159 [ 221.679436][T15143] RDX: 0000000000002020 RSI: 0000200000008080 RDI: 0000000000000004 [ 221.679443][T15143] RBP: 00007f3d47a3503b R08: 0000000000000000 R09: 0000000000000000 [ 221.679450][T15143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.679457][T15143] R13: 00007f3d47c26038 R14: 00007f3d47c25fa0 R15: 00007ffcb5eed2a8 [ 221.679473][T15143] [ 221.679479][T15143] memory: usage 4kB, limit 8kB, failcnt 95 [ 221.679486][T15143] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 221.679494][T15143] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 221.679501][T15143] Memory cgroup stats for /syz5/test: [ 221.679643][T15143] cache 0 [ 221.679650][T15143] rss 0 [ 221.679654][T15143] rss_huge 0 [ 221.679659][T15143] shmem 0 [ 221.679664][T15143] mapped_file 0 [ 221.679668][T15143] dirty 0 [ 221.679672][T15143] writeback 0 [ 221.679676][T15143] workingset_refault_anon 0 [ 221.679681][T15143] workingset_refault_file 0 [ 221.679686][T15143] swap 0 [ 221.679689][T15143] swapcached 0 [ 221.679693][T15143] pgpgin 0 [ 221.679697][T15143] pgpgout 0 [ 221.679701][T15143] pgfault 2 [ 221.679705][T15143] pgmajfault 0 [ 221.679709][T15143] inactive_anon 0 [ 221.679713][T15143] active_anon 0 [ 221.679717][T15143] inactive_file 0 [ 221.679721][T15143] active_file 0 [ 221.679725][T15143] unevictable 0 [ 221.679729][T15143] hierarchical_memory_limit 8192 [ 221.679733][T15143] hierarchical_memsw_limit 9223372036854771712 [ 221.679738][T15143] total_cache 0 [ 221.679742][T15143] total_rss 0 [ 221.679746][T15143] total_rss_huge 0 [ 221.679750][T15143] total_shmem 0 [ 221.679754][T15143] total_mapped_file 0 [ 221.679758][T15143] total_dirty 0 [ 221.679762][T15143] total_writeback 0 [ 221.679766][T15143] total_workingset_refault_anon 0 [ 221.679770][T15143] total_workingset_refault_file 0 [ 221.679775][T15143] total_swap 0 [ 221.679779][T15143] total_swapcached 0 [ 221.679783][T15143] total_pgpgin 0 [ 221.679787][T15143] total_pgpgout 0 [ 221.679791][T15143] total_pgfault 2 [ 221.679796][T15143] total_pgmajfault 0 [ 221.679801][T15143] total_inactive_anon 0 [ 221.679805][T15143] total_active_anon 0 [ 221.679810][T15143] total_inactive_file 0 [ 221.679815][T15143] total_active_file 0 [ 221.679820][T15143] total_unevictable 0 [ 221.679824][T15143] anon_cost 0 [ 221.679829][T15143] file_cost 0 [ 221.679834][T15143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1991,pid=15142,uid=0 [ 221.679895][T15143] Memory cgroup out of memory: Killed process 15142 (syz.5.1991) total-vm:102252kB, anon-rss:1420kB, file-rss:22928kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 221.884219][T15151] Bluetooth: ISO socket layer initialized [ 221.887147][ T5726] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 222.057626][ T35] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 222.187822][ T35] usb 10-1: device descriptor read/64, error -71 [ 222.199269][T15158] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 222.380611][T15162] netlink: 'syz.9.1999': attribute type 11 has an invalid length. [ 222.380625][T15162] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1999'. [ 222.437501][ T35] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 222.463469][ T43] audit: type=1400 audit(2000000137.849:2941): avc: denied { shutdown } for pid=15167 comm="syz.9.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.522262][T15177] IPv6: NLM_F_REPLACE set, but no existing node found! [ 222.581368][ T35] usb 10-1: device descriptor read/64, error -71 [ 222.621251][ T43] audit: type=1326 audit(2000000138.009:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15190 comm="syz.6.2006" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa4bcb9e159 code=0x0 [ 222.697763][ T35] usb usb10-port1: attempt power cycle [ 223.047723][ T35] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 223.068368][ T35] usb 10-1: device descriptor read/8, error -71 [ 223.264663][T15203] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 223.290219][T15205] netlink: 'syz.9.2012': attribute type 5 has an invalid length. [ 223.328825][ T35] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 223.348168][ T35] usb 10-1: device descriptor read/8, error -71 [ 223.457615][ T35] usb usb10-port1: unable to enumerate USB device [ 224.291165][T15257] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2030'. [ 224.291188][T15257] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2030'. [ 224.341883][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2032'. [ 224.608579][T15266] tipc: Started in network mode [ 224.608596][T15266] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 224.608938][T15266] tipc: Enabling of bearer rejected, failed to enable media [ 224.614690][ T43] audit: type=1800 audit(2000000139.999:2943): pid=15266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2033" name="TIPCv2" dev="sda1" ino=2072 res=0 errno=0 [ 224.802340][T15270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2035'. [ 224.811795][T15270] bond1: entered promiscuous mode [ 224.811808][T15270] bond1: entered allmulticast mode [ 224.815258][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2035'. [ 224.897490][ T6641] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 224.933964][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2036'. [ 225.057498][ T6641] usb 11-1: Using ep0 maxpacket: 32 [ 225.058059][ T6641] usb 11-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 225.058951][ T6641] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.058970][ T6641] usb 11-1: config 0 has no interface number 0 [ 225.060738][ T6641] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.060756][ T6641] usb 11-1: Product: syz [ 225.060767][ T6641] usb 11-1: Manufacturer: syz [ 225.060774][ T6641] usb 11-1: SerialNumber: syz [ 225.063512][ T6641] usb 11-1: config 0 descriptor?? [ 225.065843][ T6641] usb 11-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 225.065859][ T6641] usb 11-1: selecting invalid altsetting 1 [ 225.065872][ T6641] usb 11-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 225.068793][ T6641] usb 11-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.068996][ T6641] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 225.069026][ T6641] usb 11-1: media controller created [ 225.076807][ T6641] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.170213][T15284] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2039'. [ 225.227189][ T43] audit: type=1400 audit(2000000140.609:2944): avc: denied { bind } for pid=15285 comm="syz.5.2041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.234219][T15286] kAFS: No cell specified [ 225.243865][ T43] audit: type=1400 audit(2000000140.629:2945): avc: denied { create } for pid=15288 comm="syz.9.2040" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 225.246818][ T43] audit: type=1400 audit(2000000140.629:2946): avc: denied { write } for pid=15288 comm="syz.9.2040" name="file0" dev="tmpfs" ino=2181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 225.247197][ T43] audit: type=1400 audit(2000000140.629:2947): avc: denied { open } for pid=15288 comm="syz.9.2040" path="/380/file0" dev="tmpfs" ino=2181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 225.248372][ T43] audit: type=1400 audit(2000000140.639:2948): avc: denied { ioctl } for pid=15288 comm="syz.9.2040" path="/380/file0" dev="tmpfs" ino=2181 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 225.268536][T15291] syzkaller0: entered promiscuous mode [ 225.268549][T15291] syzkaller0: entered allmulticast mode [ 225.277870][ T43] audit: type=1400 audit(2000000140.669:2949): avc: denied { unlink } for pid=10266 comm="syz-executor" name="file0" dev="tmpfs" ino=2181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 225.394809][T15295] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 225.433615][ T1166] IPVS: starting estimator thread 0... [ 225.465231][T15300] netlink: 'syz.5.2046': attribute type 101 has an invalid length. [ 225.479404][T15300] netlink: 'syz.5.2046': attribute type 1 has an invalid length. [ 225.488899][T15300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.499466][T15300] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 225.527481][T15298] IPVS: using max 43 ests per chain, 103200 per kthread [ 225.841513][T15312] trusted_key: encrypted_key: keyword 'ne­æ_t ­Œt' not recognized [ 225.870748][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2051'. [ 226.182136][ T6641] usb 11-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 226.182178][ T6641] zl10353_read_register: readreg error (reg=127, ret==-110) [ 226.216988][ T6641] usb 11-1: USB disconnect, device number 13 [ 226.795162][ T43] audit: type=1400 audit(2000000142.179:2950): avc: denied { ioctl } for pid=15321 comm="syz.6.2054" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 227.165338][ T65] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.171958][ T65] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.178297][ T65] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.182218][ T65] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.182557][ T65] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.539692][ T9723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.649645][ T9723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.704669][ T9723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.769209][T15330] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.769471][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.769946][T15330] bridge_slave_0: entered allmulticast mode [ 227.770779][T15330] bridge_slave_0: entered promiscuous mode [ 227.780929][T15330] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.781006][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.781072][T15330] bridge_slave_1: entered allmulticast mode [ 227.781816][T15330] bridge_slave_1: entered promiscuous mode [ 227.860608][ T9723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.892776][T15330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.894515][T15330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.918611][T15330] team0: Port device team_slave_0 added [ 227.919835][T15330] team0: Port device team_slave_1 added [ 227.932054][T15330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.932065][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.932078][T15330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.932890][T15330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.932898][T15330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.932911][T15330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.959528][T15330] hsr_slave_0: entered promiscuous mode [ 227.959988][T15330] hsr_slave_1: entered promiscuous mode [ 227.960330][T15330] debugfs: 'hsr0' already exists in 'hsr' [ 227.960342][T15330] Cannot create hsr debugfs directory [ 228.105767][ T9723] bridge_slave_1: left allmulticast mode [ 228.105783][ T9723] bridge_slave_1: left promiscuous mode [ 228.105881][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.108343][ T9723] bridge_slave_0: left allmulticast mode [ 228.108357][ T9723] bridge_slave_0: left promiscuous mode [ 228.108449][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.227651][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2060'. [ 228.255692][ T9723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.262432][ T9723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.265346][ T9723] bond0 (unregistering): Released all slaves [ 228.274457][T15355] bridge_slave_1: left allmulticast mode [ 228.274475][T15355] bridge_slave_1: left promiscuous mode [ 228.274636][T15355] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.276288][T15355] bridge_slave_0: left allmulticast mode [ 228.276300][T15355] bridge_slave_0: left promiscuous mode [ 228.276397][T15355] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.394514][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2061'. [ 228.421472][T15358] bond3: entered promiscuous mode [ 228.421685][T15358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.474379][T15363] MPI: mpi too large (16392 bits) [ 228.518711][ T43] audit: type=1400 audit(2000000143.899:2951): avc: denied { write } for pid=15368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.562649][ T43] audit: type=1400 audit(2000000143.949:2952): avc: denied { write } for pid=15372 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.574306][T15374] evm: overlay not supported [ 228.725854][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 228.808683][ T5726] Bluetooth: hci4: unexpected event for opcode 0x2019 [ 228.813927][T15382] netlink: 'syz.6.2065': attribute type 1 has an invalid length. [ 228.823041][ T9723] hsr_slave_0: left promiscuous mode [ 228.824906][ T9723] hsr_slave_1: left promiscuous mode [ 228.825308][ T9723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.825320][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.827863][ T9723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.827875][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.842749][ T9723] veth1_macvtap: left promiscuous mode [ 228.842781][ T9723] veth0_macvtap: left promiscuous mode [ 228.842827][ T9723] veth1_vlan: left promiscuous mode [ 228.842858][ T9723] veth0_vlan: left promiscuous mode [ 228.997439][ T5900] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 229.001289][ T9723] team0 (unregistering): Port device team_slave_1 removed [ 229.006118][ T9723] team0 (unregistering): Port device team_slave_0 removed [ 229.088669][T15382] bond2: option mode: invalid value (7) [ 229.099234][T15382] bond2 (unregistering): Released all slaves [ 229.124234][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 229.149121][ T5900] usb 10-1: Using ep0 maxpacket: 32 [ 229.149597][ T5900] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 229.151957][ T5900] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.151971][ T5900] usb 10-1: config 0 has no interface number 0 [ 229.154477][ T5900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.154491][ T5900] usb 10-1: Product: syz [ 229.154500][ T5900] usb 10-1: Manufacturer: syz [ 229.154508][ T5900] usb 10-1: SerialNumber: syz [ 229.160805][ T5900] usb 10-1: config 0 descriptor?? [ 229.165275][ T5900] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 229.165290][ T5900] usb 10-1: selecting invalid altsetting 1 [ 229.165299][ T5900] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 229.184583][ T5900] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 229.184783][ T5900] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 229.184819][ T5900] usb 10-1: media controller created [ 229.212429][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.218208][ T5726] Bluetooth: hci3: command tx timeout [ 229.322162][T15418] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.2072'. [ 229.322179][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2072'. [ 229.330952][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 229.363160][ T1166] Bluetooth: (null): Invalid header checksum [ 229.370510][ T5900] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 229.370538][ T5900] zl10353_read_register: readreg error (reg=127, ret==-71) [ 229.372034][ T5900] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 229.400696][ T5900] usb 10-1: USB disconnect, device number 6 [ 229.467835][ T7118] Bluetooth: (null): Invalid header checksum [ 229.500311][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14 [ 229.578278][ T7115] Bluetooth: (null): Invalid header checksum [ 229.650076][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 229.650089][ T43] audit: type=1400 audit(2000000145.039:2962): avc: denied { write } for pid=15430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.689124][ T7115] Bluetooth: (null): Invalid header checksum [ 229.691553][ T43] audit: type=1400 audit(2000000145.079:2963): avc: denied { write } for pid=15433 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.762659][ T43] audit: type=1400 audit(2000000145.149:2964): avc: denied { write } for pid=15435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.802109][ T43] audit: type=1400 audit(2000000145.189:2965): avc: denied { write } for pid=15438 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.812155][ T7105] Bluetooth: (null): Invalid header checksum [ 229.877888][ T43] audit: type=1400 audit(2000000145.259:2966): avc: denied { write } for pid=15440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.914720][ T43] audit: type=1400 audit(2000000145.299:2967): avc: denied { write } for pid=15443 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.918529][ T7105] Bluetooth: (null): Invalid header checksum [ 229.981453][ T43] audit: type=1400 audit(2000000145.369:2968): avc: denied { write } for pid=15447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.029128][ T7115] Bluetooth: (null): Invalid header checksum [ 230.032492][ T43] audit: type=1400 audit(2000000145.419:2969): avc: denied { write } for pid=15451 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.103176][ T43] audit: type=1400 audit(2000000145.489:2970): avc: denied { write } for pid=15456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.163375][ T43] audit: type=1400 audit(2000000145.549:2971): avc: denied { write } for pid=15461 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.182748][T15330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.184645][T15330] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.185114][T15330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.186844][T15330] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.187310][T15330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.199028][T15330] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.199452][T15330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.204098][T15330] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 230.257103][T15330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.268709][T15330] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.272144][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.272197][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.280821][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.280868][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.288679][T15480] netlink: 'syz.9.2078': attribute type 1 has an invalid length. [ 230.329495][T15484] usb usb8: usbfs: process 15484 (syz.6.2077) did not claim interface 0 before use [ 230.514676][T15330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.534884][T15330] veth0_vlan: entered promiscuous mode [ 230.538426][T15330] veth1_vlan: entered promiscuous mode [ 230.555749][T15330] veth0_macvtap: entered promiscuous mode [ 230.558207][T15330] veth1_macvtap: entered promiscuous mode [ 230.565051][T15330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.569729][T15330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.617995][T12073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.618021][T12073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.618039][T12073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.618056][T12073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.640597][ T7105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.640630][ T7105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.678602][ T7105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.678617][ T7105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.751320][ T1347] libceph: connect (1)[c::]:6789 error -101 [ 230.751418][ T1347] libceph: mon0 (1)[c::]:6789 connect error [ 230.812090][T15518] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 230.838453][T15518] comedi comedi0: aio_aio12_8: I/O base address or length out of range [ 230.848711][T15512] ceph: No mds server is up or the cluster is laggy [ 230.855653][T15526] overlayfs: failed to clone upperpath [ 231.066045][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2085'. [ 231.161349][T15550] FAULT_INJECTION: forcing a failure. [ 231.161349][T15550] name fail_futex, interval 1, probability 0, space 0, times 0 [ 231.161374][T15550] CPU: 1 UID: 0 PID: 15550 Comm: syz.5.2086 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.161392][T15550] Tainted: [L]=SOFTLOCKUP [ 231.161397][T15550] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 231.161404][T15550] Call Trace: [ 231.161409][T15550] [ 231.161415][T15550] dump_stack_lvl+0x100/0x190 [ 231.161437][T15550] should_fail_ex.cold+0x5/0xa [ 231.161468][T15550] get_futex_key+0x1d0/0x14f0 [ 231.161486][T15550] ? __pfx_get_futex_key+0x10/0x10 [ 231.161500][T15550] ? fixup_exception+0x119/0xff0 [ 231.161518][T15550] ? __pfx___up_read+0x10/0x10 [ 231.161535][T15550] futex_wake+0xf4/0x5e0 [ 231.161555][T15550] ? __pfx_futex_wake+0x10/0x10 [ 231.161580][T15550] do_futex+0x2b2/0x440 [ 231.161598][T15550] ? __pfx_do_futex+0x10/0x10 [ 231.161612][T15550] ? __sys_socketpair+0x493/0x5b0 [ 231.161640][T15550] ? do_raw_spin_unlock+0x145/0x1e0 [ 231.161657][T15550] __x64_sys_futex+0x34f/0x4d0 [ 231.161675][T15550] ? __pfx___x64_sys_futex+0x10/0x10 [ 231.161697][T15550] do_syscall_64+0x123/0x790 [ 231.161714][T15550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.161726][T15550] RIP: 0033:0x7f3d4799e159 [ 231.161736][T15550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.161747][T15550] RSP: 002b:00007f3d45bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 231.161760][T15550] RAX: ffffffffffffffda RBX: 00007f3d47c25fa8 RCX: 00007f3d4799e159 [ 231.161768][T15550] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3d47c25fac [ 231.161776][T15550] RBP: 00007f3d47c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 231.161784][T15550] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 231.161791][T15550] R13: 00007f3d47c26038 R14: 00007ffcb5eed1c0 R15: 00007ffcb5eed2a8 [ 231.161807][T15550] [ 231.161959][T15547] infiniband syz1: set down [ 231.161999][ T35] syz1: Port: 1 Link DOWN [ 231.162073][T15547] infiniband syz1: added syz_tun [ 231.181612][T15547] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 231.181634][T15547] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 231.181656][T15547] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 231.206624][T15547] RDS/IB: syz1: added [ 231.206650][T15547] smc: adding ib device syz1 with port count 1 [ 231.206661][T15547] smc: ib device syz1 port 1 has no pnetid [ 231.297474][ T5726] Bluetooth: hci3: command tx timeout [ 231.378926][T15563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2088'. [ 231.378947][T15563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.379114][T15562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2088'. [ 231.379128][T15562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.522160][T15571] gre1: entered promiscuous mode [ 231.522176][T15571] gre1: entered allmulticast mode [ 231.643390][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2093'. [ 231.649833][T15576] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2093'. [ 231.657915][T12073] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.658013][T12073] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.658086][T12073] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.658104][T12073] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.751764][T15583] usb usb8: check_ctrlrecip: process 15583 (syz.6.2095) requesting ep 01 but needs 81 [ 231.751783][T15583] usb usb8: usbfs: process 15583 (syz.6.2095) did not claim interface 0 before use [ 231.782851][T15585] fuse: Bad value for 'fd' [ 231.854396][T15589] gadgetfs: bound to dummy_udc driver [ 231.883985][T15589] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2098'. [ 231.885033][T15589] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2098'. [ 231.973570][T15595] netlink: 'syz.6.2101': attribute type 5 has an invalid length. [ 231.983723][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2100'. [ 232.098349][T15600] netlink: 'syz.6.2101': attribute type 5 has an invalid length. [ 232.201676][T15609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=15609 comm=syz.6.2103 [ 232.247796][ T7115] smc: removing ib device syz1 [ 232.271619][ T7115] smbdirect: ib_dev[syz1] removed [ 232.306575][T15613] netlink: 'syz.6.2105': attribute type 28 has an invalid length. [ 232.306589][T15613] netlink: 'syz.6.2105': attribute type 3 has an invalid length. [ 232.347773][ T5816] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 232.410483][T15621] FAULT_INJECTION: forcing a failure. [ 232.410483][T15621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.410505][T15621] CPU: 3 UID: 0 PID: 15621 Comm: syz.6.2109 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.410521][T15621] Tainted: [L]=SOFTLOCKUP [ 232.410526][T15621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.410533][T15621] Call Trace: [ 232.410537][T15621] [ 232.410542][T15621] dump_stack_lvl+0x100/0x190 [ 232.410561][T15621] should_fail_ex.cold+0x5/0xa [ 232.410596][T15621] _copy_to_user+0x32/0xd0 [ 232.410609][T15621] kvm_arch_vcpu_ioctl+0x19c2/0x3a10 [ 232.410627][T15621] ? tomoyo_path_number_perm+0x46d/0x580 [ 232.410646][T15621] ? stack_trace_save+0x8e/0xc0 [ 232.410667][T15621] ? __pfx_stack_trace_save+0x10/0x10 [ 232.410684][T15621] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 232.410700][T15621] ? stack_depot_save_flags+0x27/0x9f0 [ 232.410714][T15621] ? __lock_acquire+0x5c0/0x1f40 [ 232.410727][T15621] ? tomoyo_path_number_perm+0x46d/0x580 [ 232.410745][T15621] ? kasan_save_stack+0x3f/0x50 [ 232.410759][T15621] ? __lock_acquire+0x5c0/0x1f40 [ 232.410776][T15621] ? lock_acquire+0x1d1/0x380 [ 232.410787][T15621] ? kvm_vcpu_ioctl+0x322/0x1700 [ 232.410806][T15621] ? trace_contention_end+0x126/0x160 [ 232.410820][T15621] ? __mutex_lock+0x26c/0x1bd0 [ 232.410835][T15621] ? kvm_vcpu_ioctl+0x322/0x1700 [ 232.410852][T15621] ? __pfx___mutex_lock+0x10/0x10 [ 232.410866][T15621] ? kasan_quarantine_put+0x104/0x240 [ 232.410878][T15621] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.410893][T15621] ? tomoyo_path_number_perm+0x28f/0x580 [ 232.410914][T15621] ? tomoyo_path_number_perm+0x188/0x580 [ 232.410934][T15621] ? kvm_vcpu_ioctl+0x8a0/0x1700 [ 232.410948][T15621] kvm_vcpu_ioctl+0x8a0/0x1700 [ 232.410964][T15621] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.410982][T15621] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 232.411003][T15621] ? do_vfs_ioctl+0x226/0x13e0 [ 232.411020][T15621] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 232.411033][T15621] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 232.411050][T15621] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 232.411071][T15621] ? __fget_files+0x34/0x3d0 [ 232.411095][T15621] ? selinux_file_ioctl+0x13b/0x290 [ 232.411106][T15621] ? selinux_file_ioctl+0xb6/0x290 [ 232.411118][T15621] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 232.411134][T15621] __x64_sys_ioctl+0x18e/0x210 [ 232.411147][T15621] do_syscall_64+0x123/0x790 [ 232.411162][T15621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.411175][T15621] RIP: 0033:0x7fa4bcb9e159 [ 232.411185][T15621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.411195][T15621] RSP: 002b:00007fa4bdb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.411211][T15621] RAX: ffffffffffffffda RBX: 00007fa4bce25fa0 RCX: 00007fa4bcb9e159 [ 232.411218][T15621] RDX: 00002000000004c0 RSI: 00000000c048aeca RDI: 0000000000000005 [ 232.411225][T15621] RBP: 00007fa4bdb37090 R08: 0000000000000000 R09: 0000000000000000 [ 232.411232][T15621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.411239][T15621] R13: 00007fa4bce26038 R14: 00007fa4bce25fa0 R15: 00007ffea83a5ba8 [ 232.411254][T15621] [ 232.507478][ T5816] usb 10-1: Using ep0 maxpacket: 32 [ 232.508081][ T5816] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 232.508872][ T5816] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 232.508886][ T5816] usb 10-1: config 0 has no interface number 0 [ 232.508903][ T5816] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.508915][ T5816] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 232.508929][ T5816] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 232.508943][ T5816] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.510754][ T5816] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.510768][ T5816] usb 10-1: Product: syz [ 232.510776][ T5816] usb 10-1: Manufacturer: syz [ 232.510784][ T5816] usb 10-1: SerialNumber: syz [ 232.519800][ T5816] usb 10-1: config 0 descriptor?? [ 232.540018][ T5816] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input34 [ 232.615706][ C2] bcm5974 10-1:0.119: trackpad urb failed: -1 [ 232.730569][ T35] usb 10-1: USB disconnect, device number 7 [ 232.809065][ T5726] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 232.809103][ T5726] Bluetooth: hci4: Injecting HCI hardware error event [ 232.809960][ T5726] Bluetooth: hci4: hardware error 0x00 [ 233.056147][T15658] ip_tables: iptables: counters copy to user failed while replacing table [ 233.174381][T15664] netlink: 'syz.9.2122': attribute type 1 has an invalid length. [ 233.189966][T15664] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 233.377641][ T65] Bluetooth: hci3: command tx timeout [ 233.469680][T15691] tipc: Invalid UDP bearer configuration [ 233.469707][T15691] tipc: Enabling of bearer rejected, failed to enable media [ 233.523342][T15699] 9pnet_virtio: no channels available for device  [ 234.343112][T15714] __nla_validate_parse: 5 callbacks suppressed [ 234.343125][T15714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2131'. [ 234.362458][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.381828][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.397225][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.415561][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.432630][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.451243][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.469949][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.485931][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.498008][T15709] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input35 [ 234.498014][ T35] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 234.506877][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.531739][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.550058][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.574830][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.599785][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.623428][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.626695][T15748] FAULT_INJECTION: forcing a failure. [ 234.626695][T15748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.626716][T15748] CPU: 1 UID: 0 PID: 15748 Comm: syz.5.2139 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.626732][T15748] Tainted: [L]=SOFTLOCKUP [ 234.626736][T15748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.626743][T15748] Call Trace: [ 234.626747][T15748] [ 234.626752][T15748] dump_stack_lvl+0x100/0x190 [ 234.626772][T15748] should_fail_ex.cold+0x5/0xa [ 234.626790][T15748] _copy_from_user+0x2e/0xd0 [ 234.626803][T15748] memdup_user+0x6b/0xe0 [ 234.626821][T15748] strndup_user+0x78/0xe0 [ 234.626837][T15748] __x64_sys_mount+0x136/0x310 [ 234.626854][T15748] ? __pfx___x64_sys_mount+0x10/0x10 [ 234.626875][T15748] do_syscall_64+0x123/0x790 [ 234.626893][T15748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.626905][T15748] RIP: 0033:0x7f3d4799e159 [ 234.626915][T15748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.626925][T15748] RSP: 002b:00007f3d45bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.626937][T15748] RAX: ffffffffffffffda RBX: 00007f3d47c25fa0 RCX: 00007f3d4799e159 [ 234.626944][T15748] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 234.626951][T15748] RBP: 00007f3d47a3503b R08: 0000200000000380 R09: 0000000000000000 [ 234.626958][T15748] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 234.626965][T15748] R13: 00007f3d47c26038 R14: 00007f3d47c25fa0 R15: 00007ffcb5eed2a8 [ 234.626994][T15748] [ 234.642647][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.659874][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.684570][T15753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15753 comm=syz.5.2140 [ 234.686251][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.697052][ T35] usb 11-1: Using ep0 maxpacket: 8 [ 234.697692][ T35] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 234.698508][ T35] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.698525][ T35] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.698536][ T35] usb 11-1: config 0 interface 0 has no altsetting 0 [ 234.698552][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.699768][ T35] usb 11-1: config 0 descriptor?? [ 234.705467][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.743179][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.766546][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.785866][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.805027][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.832038][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.849964][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.876044][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.891663][ T5726] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 234.893853][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.905748][T15710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.906046][T15710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.911071][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.930770][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.945875][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.962096][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.980174][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 234.994931][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.011899][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.027436][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.042758][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.061931][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.080847][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.093082][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 235.093094][ T43] audit: type=1400 audit(2000000150.479:2991): avc: denied { recv } for pid=15795 comm="modprobe" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 235.116501][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.121839][ T35] usbhid 11-1:0.0: can't add hid device: -71 [ 235.121892][ T35] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 235.127215][ T35] usb 11-1: USB disconnect, device number 14 [ 235.135796][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.151435][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.168409][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.174613][T15716] nvme_fabrics: missing parameter 'traddr=%s' [ 235.202735][T15803] lo: entered allmulticast mode [ 235.204099][T15802] lo: left allmulticast mode [ 235.386066][ T43] audit: type=1400 audit(2000000150.769:2992): avc: denied { write } for pid=15807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.424766][ T43] audit: type=1400 audit(2000000150.809:2993): avc: denied { write } for pid=15810 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.447883][ T5726] Bluetooth: hci3: command tx timeout [ 235.666019][T15818] Bluetooth: MGMT ver 1.23 [ 235.923907][T15842] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 235.927687][T15842] netlink: 'syz.6.2159': attribute type 1 has an invalid length. [ 235.927698][T15842] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2159'. [ 235.955209][ T7115] IPVS: starting estimator thread 0... [ 235.991473][T15855] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2164'. [ 236.047463][T15849] IPVS: using max 41 ests per chain, 98400 per kthread [ 236.327686][ T5521] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 236.477461][ T5521] usb 5-1: Using ep0 maxpacket: 32 [ 236.477915][ T5521] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 236.478706][ T5521] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 236.478723][ T5521] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 236.478741][ T5521] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 236.478754][ T5521] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 236.478765][ T5521] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 236.478778][ T5521] usb 5-1: config 0 interface 0 has no altsetting 0 [ 236.480281][ T5521] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 236.480293][ T5521] usb 5-1: Product: syz [ 236.480300][ T5521] usb 5-1: Manufacturer: syz [ 236.480308][ T5521] usb 5-1: SerialNumber: syz [ 236.481742][ T5521] usb 5-1: config 0 descriptor?? [ 236.485489][ T5521] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 236.486247][ T5521] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 236.684055][T15866] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 236.685340][ T5816] usb 5-1: USB disconnect, device number 16 [ 236.688747][ T5816] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 236.817526][ T35] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 236.967768][ T35] usb 10-1: Using ep0 maxpacket: 32 [ 236.968363][ T35] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 236.969353][ T35] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.969368][ T35] usb 10-1: config 0 has no interface number 0 [ 236.973098][ T35] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.973118][ T35] usb 10-1: Product: syz [ 236.973129][ T35] usb 10-1: Manufacturer: syz [ 236.973140][ T35] usb 10-1: SerialNumber: syz [ 236.974768][ T35] usb 10-1: config 0 descriptor?? [ 236.981085][ T35] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 236.981115][ T35] usb 10-1: selecting invalid altsetting 1 [ 236.981129][ T35] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 236.987061][ T35] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 236.987211][ T35] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 236.987233][ T35] usb 10-1: media controller created [ 236.993719][ T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.021495][ T8926] hid_parser_main: 5 callbacks suppressed [ 237.021509][ T8926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 237.022535][ T8926] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 237.326051][T15910] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.326419][T15910] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.364133][T15910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.366328][T15910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.385558][T15910] v: left promiscuous mode [ 237.441266][T15912] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 237.445012][T15915] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 237.482559][T15910] bond1: left promiscuous mode [ 237.482613][T15910] veth0_to_bond: left promiscuous mode [ 237.482705][T15910] bond1: left allmulticast mode [ 237.482713][T15910] veth0_to_bond: left allmulticast mode [ 237.488084][T12087] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.488104][T12087] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.488122][T12087] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.488136][T12087] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.488154][T12087] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.488168][T12087] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.488185][T12087] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.488198][T12087] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.525302][ T43] audit: type=1400 audit(2000000152.909:2994): avc: denied { write } for pid=15921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.568421][ T43] audit: type=1400 audit(2000000152.959:2995): avc: denied { write } for pid=15928 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.639680][ T43] audit: type=1400 audit(2000000153.029:2996): avc: denied { write } for pid=15932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.694010][ T43] audit: type=1400 audit(2000000153.079:2997): avc: denied { write } for pid=15935 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.765284][ T43] audit: type=1400 audit(2000000153.149:2998): avc: denied { write } for pid=15937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.797551][ T30] usb 11-1: new low-speed USB device number 15 using dummy_hcd [ 237.809669][ T43] audit: type=1400 audit(2000000153.199:2999): avc: denied { write } for pid=15940 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.927494][ T30] usb 11-1: device descriptor read/64, error -71 [ 238.087664][ T35] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 238.087704][ T35] zl10353_read_register: readreg error (reg=127, ret==-110) [ 238.107802][T15870] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 238.134947][ T35] usb 10-1: USB disconnect, device number 8 [ 238.167635][ T30] usb 11-1: new low-speed USB device number 16 using dummy_hcd [ 238.255587][T15945] fuse: root generation should be zero [ 238.297523][ T30] usb 11-1: device descriptor read/64, error -71 [ 238.407831][ T30] usb usb11-port1: attempt power cycle [ 238.599078][ T5900] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 238.759302][ T30] usb 11-1: new low-speed USB device number 17 using dummy_hcd [ 238.778074][ T30] usb 11-1: device descriptor read/8, error -71 [ 238.778401][ T5900] usb 5-1: not running at top speed; connect to a high speed hub [ 238.778419][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 238.779870][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.779884][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.779912][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.784654][ T5900] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 238.784681][ T5900] uvcvideo 5-1:1.0: No valid video chain found. [ 238.881758][T15981] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 239.017496][ T30] usb 11-1: new low-speed USB device number 18 using dummy_hcd [ 239.049180][ T30] usb 11-1: device descriptor read/8, error -71 [ 239.158593][ T30] usb usb11-port1: unable to enumerate USB device [ 239.336157][T15982] x_tables: unsorted entry at hook 2 [ 239.336527][T15982] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2192'. [ 239.387036][ T43] audit: type=1400 audit(2000000154.769:3000): avc: denied { write } for pid=15983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.968328][T16011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2204'. [ 240.205671][T16014] netlink: 'syz.5.2206': attribute type 12 has an invalid length. [ 240.258155][T16020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.258171][T16020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.259051][T16020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.259063][T16020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.539828][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 240.539841][ T43] audit: type=1400 audit(2000000155.929:3002): avc: denied { write } for pid=16025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.580713][ T43] audit: type=1400 audit(2000000155.969:3003): avc: denied { write } for pid=16028 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.632230][T16036] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 240.632246][T16036] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 240.632341][T16036] vhci_hcd vhci_hcd.0: Device attached [ 240.636307][T16036] vhci_hcd vhci_hcd.0: port 0 already used [ 240.636715][T16039] vhci_hcd: connection closed [ 240.642251][ T9723] vhci_hcd vhci_hcd.6: stop threads [ 240.642266][ T9723] vhci_hcd vhci_hcd.6: release socket [ 240.642277][ T9723] vhci_hcd vhci_hcd.6: disconnect device [ 240.721331][T16038] Console: switching to colour dummy device 80x25 [ 240.953982][T16047] gretap0: entered promiscuous mode [ 240.961735][T16047] debugfs: 'hsr0' already exists in 'hsr' [ 240.961755][T16047] Cannot create hsr debugfs directory [ 241.030753][ T43] audit: type=1400 audit(2000000156.419:3004): avc: denied { write } for pid=16054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.079231][ T43] audit: type=1400 audit(2000000156.469:3005): avc: denied { write } for pid=16057 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.126037][ T5444] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 241.126052][ T5444] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 241.219237][ T43] audit: type=1400 audit(2000000156.609:3006): avc: denied { write } for pid=16061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.257203][ T43] audit: type=1400 audit(2000000156.639:3007): avc: denied { write } for pid=16064 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.297000][T16069] netlink: 'syz.6.2216': attribute type 4 has an invalid length. [ 241.298426][T16069] netlink: 'syz.6.2216': attribute type 4 has an invalid length. [ 241.376295][ T43] audit: type=1400 audit(2000000156.759:3008): avc: denied { write } for pid=16075 comm="syz.6.2218" name="/" dev="9p" ino=73941761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.376904][T15952] ------------[ cut here ]------------ [ 241.376912][T15952] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 241.376917][T15952] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#1: syz.0.2192/15952 [ 241.392134][T15952] Modules linked in: [ 241.393710][T15952] CPU: 1 UID: 0 PID: 15952 Comm: syz.0.2192 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 241.395592][ T43] audit: type=1400 audit(2000000156.779:3009): avc: denied { write } for pid=5673 comm="syz-executor" path="pipe:[6661]" dev="pipefs" ino=6661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 241.405185][T15952] Tainted: [L]=SOFTLOCKUP [ 241.406553][T15952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.410083][T15952] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 241.411788][T15952] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 0e 73 05 45 85 c0 75 13 48 8d 3d 4c 19 76 05 48 c7 c6 20 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 241.417809][T15952] RSP: 0018:ffffc9000506f800 EFLAGS: 00010246 [ 241.419779][T15952] RAX: 0000000000000003 RBX: ffff8880284151c0 RCX: 1ffffffff228aa80 [ 241.422285][T15952] RDX: 0000000000000000 RSI: ffffffff8beff620 RDI: ffffffff91485ed0 [ 241.424781][T15952] RBP: ffffc9000506f970 R08: 0000000000000000 R09: 0000000000000000 [ 241.427296][T15952] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 241.429964][T15952] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802767c360 [ 241.432437][T15952] FS: 0000000000000000(0000) GS:ffff8880d5c5c000(0000) knlGS:0000000000000000 [ 241.435248][T15952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.437331][T15952] CR2: 0000560e12a47da8 CR3: 000000002e8f5000 CR4: 0000000000352ef0 [ 241.439941][T15952] Call Trace: [ 241.441020][T15952] [ 241.441961][T15952] ? virtio_gpu_free_object+0xec/0x280 [ 241.443673][T15952] ? drm_gem_fb_destroy+0x1a1/0x210 [ 241.445325][T15952] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 241.447115][T15952] ? __pfx___mutex_lock+0x10/0x10 [ 241.448927][T15952] ? drm_mode_object_put+0x41/0x50 [ 241.450539][T15952] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 241.452276][T15952] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 241.454064][T15952] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 241.456021][T15952] ? virtio_gpu_free_object+0xec/0x280 [ 241.458030][T15952] virtio_gpu_free_object+0xec/0x280 [ 241.459812][T15952] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 241.461668][T15952] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 241.464091][T15952] drm_gem_object_free+0x60/0xa0 [ 241.465846][T15952] drm_client_buffer_delete+0x1d8/0x270 [ 241.467803][T15952] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 241.469585][T15952] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 241.471533][T15952] put_fb_info+0xb8/0xf0 [ 241.472884][T15952] fb_release+0x13e/0x190 [ 241.474245][T15952] ? __pfx_fb_release+0x10/0x10 [ 241.475771][T15952] __fput+0x3ff/0xb50 [ 241.477045][T15952] task_work_run+0x150/0x240 [ 241.478641][T15952] ? __pfx_task_work_run+0x10/0x10 [ 241.480250][T15952] ? do_raw_spin_unlock+0x145/0x1e0 [ 241.481905][T15952] do_exit+0x951/0x2ae0 [ 241.483223][T15952] ? find_held_lock+0x2b/0x80 [ 241.484724][T15952] ? __pfx_do_exit+0x10/0x10 [ 241.486183][T15952] ? do_raw_spin_lock+0x128/0x260 [ 241.487820][T15952] ? find_held_lock+0x2b/0x80 [ 241.489344][T15952] ? get_signal+0x7e0/0x21e0 [ 241.490803][T15952] do_group_exit+0xd5/0x2a0 [ 241.492246][T15952] get_signal+0x1ec7/0x21e0 [ 241.493697][T15952] ? __asan_memset+0x23/0x50 [ 241.495166][T15952] ? __hrtimer_setup+0x208/0x330 [ 241.496732][T15952] ? __pfx_get_signal+0x10/0x10 [ 241.498316][T15952] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 241.500033][T15952] arch_do_signal_or_restart+0x91/0x7e0 [ 241.501773][T15952] ? get_timespec64+0x147/0x240 [ 241.503305][T15952] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 241.505248][T15952] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 241.507069][T15952] exit_to_user_mode_loop+0x139/0x700 [ 241.508840][T15952] ? rcu_is_watching+0x13/0xc0 [ 241.510349][T15952] do_syscall_64+0x661/0x790 [ 241.511802][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.513652][T15952] RIP: 0033:0x7f501295e98e [ 241.515056][T15952] Code: Unable to access opcode bytes at 0x7f501295e964. [ 241.517220][T15952] RSP: 002b:00007fff440996d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 241.519869][T15952] RAX: fffffffffffffdfc RBX: 000055558c685500 RCX: 00007f501295e98e [ 241.522362][T15952] RDX: 00007fff44099730 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.524831][T15952] RBP: 00007f5012c27da0 R08: 0000000000000000 R09: 0000000000000000 [ 241.527296][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003b239 [ 241.529818][T15952] R13: 00007f5012c2609c R14: 000000000003a6b3 R15: 00007f5012c26090 [ 241.532270][T15952] [ 241.533262][T15952] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 241.535518][T15952] CPU: 1 UID: 0 PID: 15952 Comm: syz.0.2192 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.538896][T15952] Tainted: [L]=SOFTLOCKUP [ 241.540254][T15952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 241.543376][T15952] Call Trace: [ 241.544441][T15952] [ 241.545390][T15952] dump_stack_lvl+0x100/0x190 [ 241.546876][T15952] vpanic+0x553/0x970 [ 241.548142][T15952] ? __pfx_vpanic+0x10/0x10 [ 241.549579][T15952] ? lock_release+0x24d/0x310 [ 241.551052][T15952] panic+0xd1/0xe0 [ 241.552246][T15952] ? __pfx_panic+0x10/0x10 [ 241.553656][T15952] check_panic_on_warn.cold+0x19/0x34 [ 241.555330][T15952] ? __mutex_lock+0x944/0x1bd0 [ 241.556829][T15952] __warn.cold+0x191/0x318 [ 241.558231][T15952] __report_bug+0x30f/0x440 [ 241.559669][T15952] ? __mutex_lock+0x944/0x1bd0 [ 241.561185][T15952] ? __pfx___report_bug+0x10/0x10 [ 241.562759][T15952] ? fb_release+0x13e/0x190 [ 241.564198][T15952] ? __fput+0x3ff/0xb50 [ 241.565513][T15952] ? task_work_run+0x150/0x240 [ 241.567024][T15952] report_bug_entry+0xe2/0x290 [ 241.568542][T15952] ? __mutex_lock+0x94b/0x1bd0 [ 241.570058][T15952] handle_bug+0x1cd/0x2a0 [ 241.571424][T15952] exc_invalid_op+0x17/0x50 [ 241.572865][T15952] asm_exc_invalid_op+0x1a/0x20 [ 241.574391][T15952] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 241.576069][T15952] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 0e 73 05 45 85 c0 75 13 48 8d 3d 4c 19 76 05 48 c7 c6 20 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 241.581986][T15952] RSP: 0018:ffffc9000506f800 EFLAGS: 00010246 [ 241.583874][T15952] RAX: 0000000000000003 RBX: ffff8880284151c0 RCX: 1ffffffff228aa80 [ 241.586332][T15952] RDX: 0000000000000000 RSI: ffffffff8beff620 RDI: ffffffff91485ed0 [ 241.588787][T15952] RBP: ffffc9000506f970 R08: 0000000000000000 R09: 0000000000000000 [ 241.591230][T15952] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 241.593678][T15952] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802767c360 [ 241.596135][T15952] ? virtio_gpu_free_object+0xec/0x280 [ 241.597828][T15952] ? drm_gem_fb_destroy+0x1a1/0x210 [ 241.599461][T15952] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 241.601245][T15952] ? __pfx___mutex_lock+0x10/0x10 [ 241.602817][T15952] ? drm_mode_object_put+0x41/0x50 [ 241.604428][T15952] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 241.606114][T15952] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 241.607881][T15952] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 241.609838][T15952] ? virtio_gpu_free_object+0xec/0x280 [ 241.611532][T15952] virtio_gpu_free_object+0xec/0x280 [ 241.613193][T15952] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 241.615028][T15952] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 241.616971][T15952] drm_gem_object_free+0x60/0xa0 [ 241.618565][T15952] drm_client_buffer_delete+0x1d8/0x270 [ 241.620305][T15952] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 241.622062][T15952] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 241.623999][T15952] put_fb_info+0xb8/0xf0 [ 241.625368][T15952] fb_release+0x13e/0x190 [ 241.626721][T15952] ? __pfx_fb_release+0x10/0x10 [ 241.628245][T15952] __fput+0x3ff/0xb50 [ 241.629540][T15952] task_work_run+0x150/0x240 [ 241.630999][T15952] ? __pfx_task_work_run+0x10/0x10 [ 241.632608][T15952] ? do_raw_spin_unlock+0x145/0x1e0 [ 241.634237][T15952] do_exit+0x951/0x2ae0 [ 241.635548][T15952] ? find_held_lock+0x2b/0x80 [ 241.637041][T15952] ? __pfx_do_exit+0x10/0x10 [ 241.638505][T15952] ? do_raw_spin_lock+0x128/0x260 [ 241.640079][T15952] ? find_held_lock+0x2b/0x80 [ 241.641574][T15952] ? get_signal+0x7e0/0x21e0 [ 241.643024][T15952] do_group_exit+0xd5/0x2a0 [ 241.644466][T15952] get_signal+0x1ec7/0x21e0 [ 241.645901][T15952] ? __asan_memset+0x23/0x50 [ 241.647351][T15952] ? __hrtimer_setup+0x208/0x330 [ 241.648926][T15952] ? __pfx_get_signal+0x10/0x10 [ 241.650451][T15952] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 241.652154][T15952] arch_do_signal_or_restart+0x91/0x7e0 [ 241.653882][T15952] ? get_timespec64+0x147/0x240 [ 241.655412][T15952] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 241.657338][T15952] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 241.659180][T15952] exit_to_user_mode_loop+0x139/0x700 [ 241.660856][T15952] ? rcu_is_watching+0x13/0xc0 [ 241.662358][T15952] do_syscall_64+0x661/0x790 [ 241.663810][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.665663][T15952] RIP: 0033:0x7f501295e98e [ 241.667068][T15952] Code: Unable to access opcode bytes at 0x7f501295e964. [ 241.669251][T15952] RSP: 002b:00007fff440996d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 241.671809][T15952] RAX: fffffffffffffdfc RBX: 000055558c685500 RCX: 00007f501295e98e [ 241.674270][T15952] RDX: 00007fff44099730 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.676736][T15952] RBP: 00007f5012c27da0 R08: 0000000000000000 R09: 0000000000000000 [ 241.679207][T15952] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000003b239 [ 241.681681][T15952] R13: 00007f5012c2609c R14: 000000000003a6b3 R15: 00007f5012c26090 [ 241.684164][T15952] [ 241.685913][T15952] Kernel Offset: disabled [ 241.687277][T15952] Rebooting in 86400 seconds..