last executing test programs: 38.799853549s ago: executing program 3 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00010324bd6722ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xf00}) bind$packet(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000440)=@qipcrtr, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/23, 0x17}], 0x1, &(0x7f0000000100)=""/6, 0x6}, 0x3}, {{&(0x7f0000000580)=@pppol2tpin6, 0x80, &(0x7f0000002880)=[{&(0x7f0000002fc0)=""/4097, 0x1001}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/79, 0x4f}, {&(0x7f0000002680)=""/195, 0xc3}, {&(0x7f0000002780)=""/218, 0xda}], 0x5, &(0x7f0000002900)=""/230, 0xe6}, 0x3}, {{&(0x7f0000002a00)=@phonet, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002a80)=""/149, 0x95}, {&(0x7f0000002b40)=""/185, 0xb9}, {&(0x7f0000002c00)=""/162, 0xa2}, {&(0x7f0000002cc0)=""/141, 0x8d}, {&(0x7f0000002d80)=""/185, 0xb9}, {&(0x7f0000002e40)=""/63, 0x3f}], 0x6}, 0xfffffffc}], 0x3, 0x1822b, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xbe, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @random="8ef8f321f3af"}, 0x10) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 38.668791045s ago: executing program 3 (id=246): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbb}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./my_configfs\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73797374656d2e636f6e6669676673005a6823f21d93ba52ec06f48d5161502146eb6726c1"], &(0x7f00000001c0)=""/242, 0xf2) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000700)={{r1, &(0x7f00000002c0)='vxcan1\x00', 0x40c100, &(0x7f0000000300)={@align=0x8, {0x1c00, 0x5, 0x74d, 0x7}}, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x3}, {[0x8000, 0x9, 0x1, 0x101]}, 0x0, 0x46, &(0x7f0000000680)=""/70}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000840)={0x2, 0x1000, 0x1, {0x7, @win={{0x2, 0x10000, 0x9, 0x7}, 0x2bad507cd7df1230, 0x8000, &(0x7f0000000780)={{0x8, 0xfffffff8, 0xcfd1, 0x6}}, 0xffff, &(0x7f00000007c0)="972b16a8b6989fae17bfbebb239faab4322794975d00980e69475b5d71f5c4dca0d798328a5dae1da1d17d67d82b2a11642913e25fb3ae99fe4babfd23a309aa130c7d6b5dc7afcca7ea6abbe3b310b49a15fa64a782ee6f932ec0e6f0cbf4", 0x3}}, 0x5}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)=@delqdisc={0x1b8, 0x25, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1, 0x10}, {0xfff3, 0x8}, {0x6, 0x10}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6e}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x34}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x35}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x43}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0xc080}, 0x28811) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000940)=@fd={0x0, 0xa, 0x4, 0x80, 0xfff, {0x0, 0xea60}, {0x4, 0x2, 0xf1, 0x2, 0x2, 0x6, '\"Lr_'}, 0x7, 0x4, {}, 0x6252, 0x0, r2}) rmdir(&(0x7f0000000180)='./my_configfs/target/usb_gadget\x00') mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbb}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) (async) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) (async) lgetxattr(&(0x7f0000000040)='./my_configfs\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73797374656d2e636f6e6669676673005a6823f21d93ba52ec06f48d5161502146eb6726c1"], &(0x7f00000001c0)=""/242, 0xf2) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000700)={{r1, &(0x7f00000002c0)='vxcan1\x00', 0x40c100, &(0x7f0000000300)={@align=0x8, {0x1c00, 0x5, 0x74d, 0x7}}, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x3}, {[0x8000, 0x9, 0x1, 0x101]}, 0x0, 0x46, &(0x7f0000000680)=""/70}) (async) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000840)={0x2, 0x1000, 0x1, {0x7, @win={{0x2, 0x10000, 0x9, 0x7}, 0x2bad507cd7df1230, 0x8000, &(0x7f0000000780)={{0x8, 0xfffffff8, 0xcfd1, 0x6}}, 0xffff, &(0x7f00000007c0)="972b16a8b6989fae17bfbebb239faab4322794975d00980e69475b5d71f5c4dca0d798328a5dae1da1d17d67d82b2a11642913e25fb3ae99fe4babfd23a309aa130c7d6b5dc7afcca7ea6abbe3b310b49a15fa64a782ee6f932ec0e6f0cbf4", 0x3}}, 0x5}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)=@delqdisc={0x1b8, 0x25, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1, 0x10}, {0xfff3, 0x8}, {0x6, 0x10}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6e}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x34}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x35}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x43}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0xc080}, 0x28811) (async) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) (async) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000940)=@fd={0x0, 0xa, 0x4, 0x80, 0xfff, {0x0, 0xea60}, {0x4, 0x2, 0xf1, 0x2, 0x2, 0x6, '\"Lr_'}, 0x7, 0x4, {}, 0x6252, 0x0, r2}) (async) rmdir(&(0x7f0000000180)='./my_configfs/target/usb_gadget\x00') (async) 38.587955616s ago: executing program 3 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, r3, &(0x7f0000000140)={0x7, 0x65b, 0x2, 0x8, 0x2, 0x8, 0x1cd, 0x8000, 0x9}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x400000, 0x8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) 38.587579924s ago: executing program 3 (id=249): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001060000000203040506070800000c0002000600200086dd00000c0003"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fddbdf250d00000008000300", @ANYRES32=r1, @ANYBLOB="08000c001249000008000c0002000000000000080003000000100000", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000"], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x40800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001060000000203040506070800000c0002000600200086dd00000c0003"], 0x58}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032dbd7000fddbdf250d00000008000300", @ANYRES32=r1, @ANYBLOB="08000c001249000008000c0002000000000000080003000000100000", @ANYRES32=0x0, @ANYBLOB="0c0006000100000001000000"], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x40800) (async) 38.439915381s ago: executing program 3 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) chroot(&(0x7f00000000c0)='my_sys/file0\x00') mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r1, @ANYBLOB="070001"], 0x38}}, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000081000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="184b0c96f1983a") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2202"], 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f0000000040)) pread64(r6, &(0x7f0000000540)=""/232, 0xe8, 0x101) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ppoll(&(0x7f0000000140)=[{r7, 0x404}], 0x1, 0x0, 0x0, 0x0) 38.360123627s ago: executing program 3 (id=251): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) ioctl(r1, 0x6, &(0x7f0000001b00)="6059e9b7a0999fbbc12d4b970d7117917bb4f6704df737d73d20618e92c457e495d721d0830b52243975c4219585a0bce0b046064e41a10371eef4bff5d238640d78988553ec067b67919687cd4ae4beed66477b46d6fa6aef5479b7e883dda1096cbe6f6983165abca2190c52b66a6e5041610d7d36b0eb9328a3b3836d8b13dfd5544ca961a27f90d383e6a38e1edd70eaf78e3cf05ca6a2a1899891b453ae8facc036108c1eba81595fae9dc8046e304efce4b3d96112a64b1353444dbeb2cbe42c74edc4c7866998c566aabd2b8ce7ef770bcc7a07c7f8cdff5f52b4c264eb8dc628a177b845f7d6dd17b82bc98ce1bd9dececc79cb39e6734615daf4859a4445d9c94e1d562eed8f58244b14bc5dd5de5c9c552c1e4bc7512afc14c84df7b0309c9e1a3b19969978803204d24ddab45a93b89eb0883a7d6d381a0b17491ceb736d69a8d06cb7cd46dadaba0253c05e6df6502b00cb0a2ccbb390bc0e223d71bff18e8da9194d5543c1e08158abbe2e5d783aed9d72e2b40c3cdee09472090a960253caa2b26f94110590e3417d34d3a2df55e4795523f49e99dfdc21d2319417a84e15f4da7e53d7eb2872667899e327f54fb7dbea8d89b022d81f862b84376ed7aa95a22b5beda6ac9de85c0a8c9ef38aa8a85dc6c640ff5513810472deaeac540f21d46640f4b55016beb427ed7c1485551c8d23ce6ffb1f487bf585c1617a2f1764d2dda0d05f98e1b94b3ee43b24816599badf6ace116e877536fbf6b32d66957ea6a0fe933904e259a21309b619bed3092def12081d0209c17c44ff8b625ab2738f366565bc19c940f2d10f88198bbfacc1199ef37692674475b8596ee9e80ffa16bcddded64c8aa22525ed7cd8b4d0f20b2ceb536e3cfe25ff91f9303b55b8f01fd11a4ef6258538ec628d1d7b0ae66dead9d14ee01052c4699254ce6c081e165c2fce3d6d1b7e8e2810b8960bdc15adbc93cfb5ef4663565c770f65da1e8d811d77a4af1a754e3ec67b2f9a5846ab15a45b5de618ded3769999f7e1e3be20c2d056c3fe8f599df56edb717e27801304fc3e80699e4e6b6bf9ad22b98f858e26f83549546ad4ebc8c2d89aa12fc56cad760d32521593edbda467ed3702635db2122168f7248c0a5a3df56afe23da2e35fb263dce893e202e8ff0dbd618a3c64e8d8d5c8fe99894b65a4a50d96a21273c3ec91ce8abc1e4bdd69d154561e2d9ccf2eff72e5baaed8c00d38e37bb764d3c0852843f09d25152e01cd62e1976cf1c1ba1c653d3a031c073da4653c3f3f469784a5e77770030ac82094df07ae4a3c6da92a71819bada651839e0c2b4bc231ee1565c99e0fdc78cb0558268979a69cec709f90377cfc7cc021aa56cde14fc2af4002bb0ebf965e2a0cf85c59cac115dc803ff7efbb9c214f3de6daab139a29a17f44b62986f35bfd7906f9926659617df6a826844b6c0c1d483904abecf3d6a0185bf097732f471f4471ff988ca5b0ec8d1eae8fea37c39c82106e0b1bb1bbb78e872684c480d0edd0c940742330bf29c3c2af31eafecd4566d7cf06b6db053725bed579f32048a4c1babdaf871960a09dfa97c719d8b2ffccac849d6d78c94ac5dbe088ce32014780786bb9e40f4e3dcf6e5bd33ec3bf365e9c2efdcec8ffd0b2da9e365ed61be056355b8ae8667739feda00a813051238d8191577c2a8174d069862daa810f401d7198daaac4a639dbbf3532d66b9ffca29dd26b2d689c74fba25d573065f5c75dfb4ae0b297050c0c1e4f21e6712252552ddd00c08319fc379952df8f4e7e3bb7489cc9a2df4ffeb9d621b87e06ed6dd080367b754c1352abaf1071aeb80d1d38e3e96a594c405ae1a634c98ec561bafd23e1684023d00f6a26b803c7d22a15c3b002ea9ed27dec124cd6f1c1da3d6bda4e7abb976537f8312ca5b9317a0be6817926fc75f984b888cbb0483c8b0ac762e6ccdb90552f0c074c31bf006f5b2f97e9f1daad34899eb61554e294873d5e09e2f5ba85cc86e00a1ab57efb641abbf431cfeb93a33b1d7a67bd937c0aa3cc08663cbfe9d5b2964cbcc65bdc65fe37b092d6f34a55f78464c787e1c8981d0023aba95440e7f0be9c5ffe3f0527ce701988cbebe1ec74a816b2063107723669a1a45f1ed4a6f08d565a85b632171da45ba31e47e57449e48edeb16c8a59b38665a80b5185c5ee3145166002a64593adc352f8ce15df0ada5c94a2884176840f37de40c77f5567445b0d6710c2e4b8128a82f97e045181a81359a5a3bd89f71df4315ac424316c85d06dbf6f60f79a14fc49e7a1212d7d1752c384ea6ff24bd06a11b3d5bbb353964e47c5377b210cff1e72e04595fb63f7ddf22530628c9913509ecaa385b8e00277287d912a91860a6aadfa47ed81bf231c350dc41ed838612961322b594406ad7967bf4cc58094efd7b43135317fdfcc75f62947e95795eaf288dcadcac6ea93e222d014c4e8ac8507ba57479535dbdda5721d322b312b2469dc7898d861e97fd5c0957c2e79303bdcf75d0da53c2a906af66506f6834a9b35ed0a9a7276f92a5e150c6bfd89a9d1080e72b6162c0fb9f08a49367e3632364b95ce1626a243f68cb9fbe2fe374dd20a82cf035e845163529a3f5d81e5370d405783ca012e4db941662934f22bb5ae6680fb0d937420266bf2163d764e656a9522c55ced347028b6633533a27d1f74c4538c0d220c0e353c7311440cecebfa22ffdb207975face2e95f5ed029c926cd363895985f3a5024f5e2a4f7b680d6058d55981ad2579f04fb1ee3f4e1acec9da405da814ee0c9f7929afebd7c057f7d6a48fc19a607be708b7b539a734872dc4e45389d25455a0b93705649c0246b6780d64ed041c25e5e86af1089635fd1f6629c80c3c037f63d783541186c23538a219b746d367d2775d3142317cf4cb0b3e0ce044f06a0b5de1e5f6c4f40a99dd7cb152b39e16da9c19eeb95e6e3ca64bcf0781a002ab5a5ab892faf36524a0ef8659a193ba5f01b7bdd8506164af9992a06eaf793e5b12cc87f2d2b39eb5b22b4661e270d381a5754cdc04bc7319fc28cd8df0db3be81edccd68fb76ba268c4753152b0b6289506942a393d428b50f668d1c7def71fb1e0e17c449a376f9ba869e2e27ad9af289756ffecd8b47158d09aa40868abf2a4cdcb3d4ac5e3189fb38eb9e26196b78744ad73e612b1cd4cf667ab6fa25bcfe5849d93de827b64057d7cc8f97e942c256dcc936c83006221ca1546255526ec33f321af62f0fe0dea716809855115032b0e8cb96d029921bb21cfcd35ee8b6b324586d76893b9912dfbd941abaab0beb0ded80c1fabbbda09fa187c3f8f7f969e4801e3720d49f8961002837905a01ec2b202b5e0f197c95607de6e36746cfe4ff6cae22ef56f4bf3acf8fab0911f0377560d1845ec04d3886ba29b91808acd34b95ff861282e2b55037be9b94177d7fee9b86b95bf9bdf80886ca1228898fc3eca30381f115c96fc24fbe10d67f1dbfa46f7441094bdf2ca81117993bcb11cb28e577762c43d9ac70123c6fad63bf3f43034fe9185ecb510ebf8c679b482579adb0cde8826e17f8dee26655d763abb7cc86efcf1afab458bd2b3b55e91ddce7c4a63af37643a813927586bde40277e8b38ef3f9357d2aaf987166ee4079ff5cc22a127b72b7f9fa1388b17ca4e949229a3d0022b030701040a491e7949cff618bb724962696bdf45707befcb10d141f5fdceb0f3fb71a8c98d739e043dc5d814002b38f6f85dba1de02979e2a3aaea26c4cadf0546c4bbfba68dc6feff98c0b956756d85942dae715f37b8c7cb61f877f5584b8e470bf98f11f3f403b96c2c7da972e71bcb11e6ed79ee06bb5d2e8817baa8b63e365b552f272ae6d8a14da208c3c52470497f18157ee72fa1a0f4cb73065c17c32af5dc5c54da02d4ad95bde0c107c3b6fc275479861d4b7630dd175d2f05451ccbb23176f5bfed445596eb9c5e44b297281f46eef5b5962f37410666d2494f87ebd59251d3cb60d38a32cc4c56763a04766f715d8740f8cf7bbe263a7a96873969f8cc9508e3faba261e7a17c736af84a6670c7e81d3439d0e75f564e54edfcc63cb8caa5ab7a044f1fc053516ad31a1f1085b1a3297f9f01941f1e6a1b9993a901919dbecae5e686d0fdd2fac9c3272bed8f2b7d4e83971afbd499f91629418406e36a889dc76474762004078d8ca59d83fa20a92956df9a4d82edf7f5e53d9b39568edcce7247b285c7e7ee19cd7abae814f022722db77f8a4c4f816dc0b11751d0784b81a79af2b6e2985d3ffbd40f1554adfd73d94444b8593a7992d9c8252dca8dde6283fd40e2c1ce28d6724567861af5672d7cd553530913193a25546541be9c7ff6f4852e153f395bd4aac13c4859d94759ac6370f7d27fc805507bff12b805d564ebaad52d2590146591eae1be986babb6e4171f4e29a4285c3275e2fecf3df323631d47adcf23fc794864307e404b302c696e06c70883d25564088739c02e330a07c00900f0d1388c871c4ba2fbb52670479acfd003880ffafc83579c0dcfc00f3618240a5d60511dac5fd8420b4a72379a786198857fe0e29ccc5cb80092f7e3199aabf7ced2e0bb8554c376db3491745cac82512824349c1a21e706a7df690ed21da10b85d1a6e83619f3e238e67bb71e1451123e51fdd1f8d044bebe55bd3cc404eb078033d198049689438ca21cbece39d039643d68b43a65bb2ce90d68158af6ea2d73954f7b8139ec56c3168af2f10e947adc7f9f1d50dd709a1e2f16e776e74cccc5de903440c04e745a5067aa2c4ea8a6a2f89078b75ea604c5f7c7aa9b29607e07ef987375a507e76dae994c86669158142c489171b71189a36d87f6399201338bcdfb45f5bb7f8e4f989242970f7bfb64a88a90f01dabd86c5c43662bf9fcb7817ffb6af336e9d863f5dd0449070f73609bc54f0a729c910cb0f5ec4bd99831ebe6dab3fcbbece269b3bc77721b3ebb0638ee7a4f2e5655049a0f775ad38d702412fe07b3461f6622151dec95ed0985957ee7d029ca20e75cb184432b828a811635ef8a7796544eef677f140c5e427df58839c6d5afcfdfc269609f0680bf98115257362ef55dc01d1b8f95ccfa81266d0503102c988bbcdf1e98229df3b5770329bf8ae15ff2c5380ba2f03bcbafa6073f716a0c75ee18f228b2eba77d317a64cbdf02ce2ee4b10a3d15348fee8c79812129cdc7dae6c673eda58dd1b47bd0816000f352be0f7b52eab73459aa89d3b353d34bc1f4ce2784250d8dfd7c2c918b890e1c8be1cc34341813277d3b38266ba9dc3de0e635b9065719301180b4de975d050da33ae0dcec4cdd5f4a5290a0b5ce3c4ebc83e5ad00acbdb4378b1c3f9c4eb575869ad1521a2b0a47122ab38108341dea8b0ae21d35f2245404b9f766f5f69c9420020c3c21cef91ecb9d2b1ff0f7287c46d44e64d1e74a98bea8561140e633bf1b99169b0453ddcd3b98d1e7bc55ee616805fbf59f761a51b37e06170813ed392a208ab4a34ac5a646ff05f3c8f10ba86b361eb11af54866f516d33fd9d8d785f085b97acb1ee7812577a6a5a7dd701968794bcdce7242903b6a0bf01ed09caaf7b431b9dd0ee0a68c663f5850207d51c0c3481d9a79d23e2ba6775fb24388141c00791887fbdf29cca612cf9a2c01b56b21f6922bfbc2ae50edb93005f42d51d2f8cda3579fa3af96b2e8c8faefee86c4c4c4844a644316e14b961c7eb10431fa2c023545a2ef54b3a37680d816efb58332633dae5d8126310ed") sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbcf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 33.949022961s ago: executing program 1 (id=298): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='pids.current\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002c40)={0x2020}, 0x2020) (async) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x4) 33.870120769s ago: executing program 1 (id=299): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1, 0x68, 0x0) (async) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200445ab6bd466f80928896ab40000102030109021f0001010200050904000001010330fe0905443bfbc4e2b181d11d8f235de8"], &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) 30.838715183s ago: executing program 1 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c000180"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) 30.398709338s ago: executing program 1 (id=329): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe490a060b483f2dd090fc6889ae6b84", 0xffeb}], 0x1}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc3, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @multicast1, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x0, 0x9, "00de091e8ab3a6"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x2, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "a2"}}}}}, 0x0) 30.349429003s ago: executing program 1 (id=331): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0xb320a000) (async) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) (async) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) (async, rerun: 32) semctl$IPC_RMID(0x0, 0x0, 0x0) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x20) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x50, r4, 0x2b8ee6cf79dab3f, 0x1, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x24001844) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001007564703a73797a32000000002c0004001400010002004e20e000000200000000000000001400020002004e21ac14140b00000000000000002e27ffad7fb871d6b8339c9bfd"], 0x54}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x1c}}, 0x40) (async) write(r0, &(0x7f0000000000)='3', 0x4e) (async) syz_emit_ethernet(0x32, &(0x7f0000000280)={@remote, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x14, 0x24, 0x66, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x3, "0e92d1", 0x0, "45f87f"}}}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000001540)=""/4096, 0x34, 0x1000, 0xa}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 30.29969374s ago: executing program 1 (id=333): gettid() r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0x202040) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x5, 0xffff, 0x9, 'syz0\x00', 0x1}, 0x5, 0x40, 0x4, r1, 0x5, 0x2, 'syz1\x00', &(0x7f0000000080)=['/^)\x00', '\x00', '@,\x00', '&-&{\xc5\x9a%v\x00', ',*\x00'], 0x14}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x4, 0x1, 0x3, 0x4, 'syz0\x00', 0x80}, 0x0, [0xf, 0x3, 0x2, 0x2, 0x7, 0x6, 0x3, 0x4, 0xc54, 0x1, 0x4, 0x4, 0x6, 0x8000000000000001, 0x6, 0x10000, 0x2, 0x40c7c44d, 0x4, 0x16a7a1cf, 0x337, 0x5, 0xffffffffffffffff, 0x815, 0xfffffffffffffffe, 0x2, 0x7fff, 0x9c11, 0x1, 0x0, 0x1, 0x1, 0x6, 0x2, 0x9cc4, 0xffffffffffff7fff, 0x5, 0xfffffffffffffffa, 0x7ff, 0x7ad, 0x7, 0x8, 0x10000, 0x1, 0x1, 0x4e, 0x4, 0x80000001, 0xffff, 0x8000, 0x4, 0xfffffffffffff382, 0x6, 0x145db4d0, 0x40, 0x8, 0x7e3a, 0xfffffffffffffffd, 0xe, 0xa, 0xd, 0x3, 0x0, 0x8, 0xc6f, 0x5, 0x4, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x7, 0x4, 0x0, 0x100, 0x40, 0x7, 0x7fffffffffffffff, 0x7, 0x8000000000000000, 0x700000000000000, 0x1, 0x7, 0x0, 0x5, 0x1, 0x5, 0x7, 0x1025, 0x7fff, 0x7ff, 0x7, 0x2, 0x8000000000000001, 0x5, 0x8000000000000000, 0xa, 0x5, 0x2, 0x7, 0x1, 0x4, 0x5f9d38fb, 0x0, 0x3, 0x80, 0x5, 0x8, 0x8, 0x2, 0x7, 0x6, 0xa5, 0x7, 0x9, 0x8001, 0x5, 0x8, 0x9, 0x0, 0x4, 0x100000001, 0xec3, 0x7f, 0x1, 0x8, 0xff, 0xffffffff7fffffff, 0x404, 0x1]}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r4, &(0x7f0000000740)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r5 = openat(r2, &(0x7f0000000780)='./file0\x00', 0x183000, 0x108) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'dvmrp0\x00'}) close(0xffffffffffffffff) bind(r3, &(0x7f0000000800)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x80) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000880)={0x0, 0x0, 0xd6cc, 0x9}) r6 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x10000, 0x20880) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000900)={{0x1, 0x5, 0x5, 0x6, 'syz0\x00', 0x9}, 0x0, [0x5e, 0x9, 0x2, 0xeb, 0x6, 0x1ff, 0x6, 0x2, 0x0, 0x8, 0x3, 0x0, 0x7fffffff, 0x7, 0xca, 0xf, 0x1000, 0xfff, 0x0, 0x92b, 0x1, 0xc23d1cc, 0x1000, 0xc0000000000000, 0x7fffffffffffffff, 0xffffffff, 0x7fff, 0x7, 0x9, 0x7, 0x753, 0x3, 0x9, 0x5, 0x74, 0xa351, 0x2, 0x6, 0x4, 0xfffffffffffffe9a, 0xc60, 0xff, 0x8, 0x3ff, 0x6, 0x0, 0xc69e, 0x60000000000, 0x9, 0xab, 0xbeb, 0x6, 0x6, 0x1ff, 0x200, 0x80, 0x80, 0xe, 0x1000, 0x362, 0x7, 0x3, 0xad7, 0x8, 0x2, 0xff, 0x2, 0xbc, 0x0, 0x40, 0x8, 0x8, 0x0, 0x1, 0x3, 0x0, 0xb, 0xffffffffffffff01, 0x3cce244a, 0xffffffff, 0x1, 0xffff, 0x0, 0x6, 0x9, 0xffffffff7fffffff, 0x2, 0x8000000000000001, 0x10001, 0x7f, 0x7, 0x80000000, 0x83d2, 0x9, 0x4, 0x4, 0xff, 0x1, 0x8, 0x6, 0x1, 0x4, 0xffff, 0x2, 0x800, 0x2, 0x2, 0x7, 0xfed, 0x4, 0xa96, 0xffffffffb9bf75c5, 0x30f59297, 0x3, 0xfffffffffffffffe, 0x4, 0x6, 0x6, 0xe, 0x7, 0x0, 0x8, 0x101, 0x4, 0x2, 0x8, 0x80000000, 0xffffffffffffffff]}) mount(&(0x7f0000000e00)=@md0, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='exofs\x00', 0x1020000, &(0x7f0000000ec0)=',*\x00') r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000f40)={0x4, 0x8, 0x7, 0x9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) sendmsg$nl_xfrm(r5, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)=@updpolicy={0xf4, 0x19, 0x200, 0x70bd27, 0x25dfdbfe, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0xf, 0xa, 0xe0, 0xa0, 0x4e, 0x0, r9}, {0x7, 0x0, 0x6, 0x3, 0xfd2, 0x78ac, 0x0, 0xe53}, {0xa, 0x80000001, 0x148, 0x7}, 0xc, 0x6e6bbf, 0x1, 0x0, 0x2, 0x3}, [@proto={0x5, 0x19, 0x33}, @iptfs_init_delay={0x8, 0x27, 0x8}, @etimer_thresh={0x8, 0xc, 0x7fffffff}, @iptfs_pkt_size={0x8, 0x29, 0x20}, @coaddr={0x14, 0xe, @in6=@private0}, @tfcpad={0x8, 0x16, 0x3ff}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000080}, 0x6d98f9382d91c052) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x9}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x18c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x54, 0x6, "1ac97ca95e2162dee9685b03a3630d3840eb2d76c47f70db75f8b8028c78d2f6d1622df3a9e1adf1d55a0dda35be4c60df91f66179b5bd5691d2641e2fbb2fc019062f9449320e65fab7e8036276890b"}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "fd10422528ce6b169b4e8582767d6f4592d1608c99e10312a88545af350981efd1879d997bd9c91119cbd6a22657cd96ee5dc8e2366489ab2b07bb9a3a3f94d57ea0db08e806db5b83dd477b9e36d562cd228b8ba65e845307b2b14df13c10768fc36b7d7eba4589bbbfd7611c18e4def31cae608eee96b2f92173c0642ea7597310e092770fea93ae57a57f499ef398a1d0c51e9d7c584c69d9621f0b9e077a2276a16946da7433c1b21762dff3f19fb38209722d3e6b806ac329f714847d11827a885472ec5df2a0327ddccb011f79fe82b1c01846a1868c39a6505a9fae612168b3c31c21c222a16d7d6f812c53a000c65de129fe4372de"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x8, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0xbc, 0xb, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3b}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x300}, 0x1, 0x0, 0x0, 0x804}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000016c0), 0xed3d60e48b96691, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000001640)='last\x00', &(0x7f0000001680)='./file0\x00', r10) bind$tipc(r10, 0x0, 0x0) futex_waitv(&(0x7f0000002e40)=[{0x0, &(0x7f0000001700)=0x80000001, 0x82}, {0x7a8, &(0x7f0000001740)=0x555, 0x2}, {0x5, &(0x7f0000001780)=0xba3, 0x82}, {0x1, &(0x7f00000017c0)=0x2, 0x82}, {0x2, &(0x7f0000001800)=0xffff, 0x2}, {0x6, &(0x7f0000001840)=0x5, 0x2}, {0x100000000, &(0x7f0000001880)=0xfffffffffffeffff, 0x2}, {0x200, &(0x7f00000018c0)=0x8, 0x82}, {0x2, &(0x7f0000001900)=0x9, 0x2}, {0x4, &(0x7f0000001940)=0x5, 0x2}, {0x5, &(0x7f0000001980)=0x9, 0x82}, {0x8, &(0x7f00000019c0)=0x3, 0x2}, {0x4, &(0x7f0000001a00)=0x7, 0x82}, {0x2, &(0x7f0000001a40)=0x6, 0x2}, {0x3, &(0x7f0000001a80)=0x5, 0x2}, {0x4, &(0x7f0000001ac0)=0xcc7, 0x82}, {0x31, &(0x7f0000001b00)=0x1ff, 0x2}, {0x7, &(0x7f0000001b40)=0x10001, 0x82}, {0x6, &(0x7f0000001b80)=0x1, 0x82}, {0xf, &(0x7f0000001bc0)=0x6}, {0xb, &(0x7f0000001c00)=0x8, 0x82}, {0x10001, &(0x7f0000001c40)=0xf65, 0x82}, {0x2, &(0x7f0000001c80)=0x6}, {0xffffffff, &(0x7f0000001cc0)=0x4, 0x82}, {0x5, &(0x7f0000001d00)=0x2, 0x43}, {0x800, &(0x7f0000001d40)=0x200, 0x2}, {0x5, &(0x7f0000001d80)=0x6, 0x2}, {0x5a1, &(0x7f0000001dc0)=0x4e, 0x2}, {0x7fffffffffffffff, &(0x7f0000001e00)=0xe, 0x2}, {0x6, &(0x7f0000001e40)=0x4e, 0x42}, {0x1, &(0x7f0000001e80)=0x1, 0x82}, {0x811, &(0x7f0000001ec0)=0x1ac7, 0x82}, {0x8000000000000001, &(0x7f0000001f00), 0x82}, {0x9, &(0x7f0000001f40)=0x3, 0x2}, {0x7f, &(0x7f0000001f80)=0x3, 0x2}, {0xfa7f, &(0x7f0000001fc0)=0x5, 0x4}, {0xe, &(0x7f0000002000)=0x1, 0x82}, {0x6, &(0x7f0000002040)=0xa, 0x2}, {0x5, &(0x7f0000002080)=0x80000001, 0x2}, {0x7fffffff, &(0x7f00000020c0)=0x8b4, 0x82}, {0x8, &(0x7f0000002100)=0x4, 0x82}, {0x4, &(0x7f0000002140)=0x8, 0x82}, {0x80000001, &(0x7f0000002180)=0xffffffffffff8000, 0x2}, {0x6, &(0x7f00000021c0)=0xffffffffffffff80, 0x2}, {0x2, &(0x7f0000002200)=0xe063, 0x2}, {0x4, &(0x7f0000002240)=0x9, 0x2}, {0x8, &(0x7f0000002280)=0xb, 0x2}, {0x2, &(0x7f00000022c0)=0x8, 0x82}, {0x55ec, &(0x7f0000002300)=0x2, 0x2}, {0x401, &(0x7f0000002340)=0xb, 0x2}, {0x5, &(0x7f0000002380)=0x8, 0x82}, {0x3, &(0x7f00000023c0)=0x2, 0x2}, {0x5, &(0x7f0000002400)=0x1ff, 0x82}, {0x1, &(0x7f0000002440)=0x1, 0x2}, {0x9, &(0x7f0000002480)=0x6, 0x82}, {0x2, &(0x7f00000024c0)=0x41d, 0x82}, {0x1ff, &(0x7f0000002500), 0x82}, {0x296ccfca, &(0x7f0000002540)=0xa, 0x2}, {0x5, &(0x7f0000002580)=0x9, 0x82}, {0x40, &(0x7f00000025c0)=0x5, 0x82}, {0x6e, &(0x7f0000002600)=0xffffffff, 0x82}, {0x4, &(0x7f0000002640)=0x5, 0x2}, {0xffff, &(0x7f0000002680)=0x6be3, 0x80}, {0x2, &(0x7f00000026c0)=0x3, 0x82}, {0x6, &(0x7f0000002700)=0x4, 0x82}, {0x4b, &(0x7f0000002740)=0x80, 0x2}, {0x9, &(0x7f0000002780), 0x2}, {0x2, &(0x7f00000027c0)=0x6}, {0x4, &(0x7f0000002800)=0x8, 0x82}, {0x7, &(0x7f0000002840)=0x1000, 0x82}, {0x7, &(0x7f0000002880)=0x80000000, 0x2}, {0xae08, &(0x7f00000028c0)=0x9, 0x82}, {0x1, &(0x7f0000002900)=0x100000000, 0x2}, {0xc85f, &(0x7f0000002940)=0x7, 0x2}, {0x7, &(0x7f0000002980)=0x7, 0x186}, {0x2, &(0x7f00000029c0)=0x2, 0x82}, {0x8, &(0x7f0000002a00)=0x100000000, 0x2}, {0x9, &(0x7f0000002a40)=0x1, 0x82}, {0x5, &(0x7f0000002a80)=0xf85b, 0x2}, {0xffff, &(0x7f0000002ac0)=0x9d22, 0x82}, {0x81, &(0x7f0000002b00)=0x1, 0x2}, {0xfa0, &(0x7f0000002b40)=0x8, 0x2}, {0x8, &(0x7f0000002b80)=0xef7c, 0x2}, {0x8, &(0x7f0000002bc0)=0x2, 0x82}, {0x1, &(0x7f0000002c00)=0x8000, 0x82}, {0x9, &(0x7f0000002c40)=0x1, 0x2}, {0x5, &(0x7f0000002c80)=0x101, 0x2}, {0xffffffffffffffff, &(0x7f0000002cc0)=0x1, 0x82}, {0xfffffffffffffff7, &(0x7f0000002d00)=0x8, 0x2}, {0x9, &(0x7f0000002d40)=0x2b, 0x82}, {0xffffffffffffffff, &(0x7f0000002d80)=0x5}, {0x0, &(0x7f0000002dc0)=0xffff, 0x2}, {0x3, &(0x7f0000002e00)=0x9, 0x2}], 0x5d, 0x0, &(0x7f0000003700), 0x1) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003740), 0x0, 0x0) close_range(r11, r6, 0x0) 26.54695934s ago: executing program 2 (id=348): socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x7, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x80, 0x7, 0x58}}) r2 = syz_open_dev$vcsa(&(0x7f0000000240), 0x4, 0x407440) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0xeef4, 0xd, 0x20400, r0, 0x8, '\x00', r1, r2, 0x3, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[]) rmdir(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) inotify_init1(0x800) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\b\x00\t\x00\r'], 0x30}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) socket$l2tp(0x2, 0x2, 0x73) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x7, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x80, 0x7, 0x58}}) (async) syz_open_dev$vcsa(&(0x7f0000000240), 0x4, 0x407440) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0xeef4, 0xd, 0x20400, r0, 0x8, '\x00', r1, r2, 0x3, 0x1}, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[]) (async) rmdir(0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) inotify_init1(0x800) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\b\x00\t\x00\r'], 0x30}], 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) (async) 26.545407978s ago: executing program 2 (id=349): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xcf) setns(0xffffffffffffffff, 0x20000000) syncfs(r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf3f9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x884) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f00000002c0)=0x3, 0x4) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x10002, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2c4, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}, @NL80211_ATTR_REG_RULES={0x1b0, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ca}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ddfe90e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1200000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6e}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6aaa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3be}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x86}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3d4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x96f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3fffc00}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffff8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4044400}, 0x8001) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000740)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x3, 0x0, 0x3a}, @flat=@binder={0x73622a85, 0x110b, 0x1}}, &(0x7f00000007c0)={0x0, 0x18, 0x38}}, 0x2440}], 0x4b, 0x0, &(0x7f0000000880)="0372cdd16b6bd12e0e3d12e487c5ea1744bd1b7459c1f3c26fd7bd34f7eb42b193c866fcb22bd46f1685dd998644143bdc020f173ad5f0e682a130e47c16d7579c3e0b90cacc387fc913b1"}) recvmmsg$unix(r4, &(0x7f0000003000)=[{{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f00000009c0)=""/204, 0xcc}, {&(0x7f0000000ac0)=""/108, 0x6c}, {&(0x7f0000000b40)=""/134, 0x86}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/136, 0x88}, {&(0x7f0000000d40)=""/9, 0x9}], 0x6, &(0x7f0000000e00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000000ec0)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/132, 0x84}, {&(0x7f0000001000)=""/223, 0xdf}], 0x2, &(0x7f0000001140)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/251, 0xfb}, {&(0x7f0000001300)=""/138, 0x8a}, {&(0x7f00000013c0)=""/206, 0xce}], 0x3}}, {{&(0x7f0000001500), 0x6e, &(0x7f0000002880)=[{&(0x7f0000001580)=""/85, 0x55}, {&(0x7f0000001600)=""/2, 0x2}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000001740)=""/94, 0x5e}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/181, 0xb5}], 0x6, &(0x7f0000002900)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002940)=""/65, 0x41}], 0x1, &(0x7f0000002a00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x88}}, {{&(0x7f0000002ac0)=@abs, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002b40)=""/242, 0xf2}, {&(0x7f0000002c40)=""/180, 0xb4}, {&(0x7f0000002d00)=""/112, 0x70}, {&(0x7f0000002d80)=""/165, 0xa5}, {&(0x7f0000002e40)=""/105, 0x69}], 0x5, &(0x7f0000002f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}], 0x6, 0x0, 0x0) ioctl$SIOCGSTAMP(r13, 0x8906, &(0x7f0000003180)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000031c0)={r7, 0x0, 0x3ff, 0xfffffffffffffeff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000003300)={'sit0\x00', &(0x7f0000003240)={'gre0\x00', r3, 0x7, 0x97, 0x6, 0xfffffffb, {{0x24, 0x4, 0x0, 0x2, 0x90, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xfb, 0x1, 0x5, [{@remote, 0x3}]}, @lsrr={0x83, 0x1b, 0x75, [@empty, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x14}]}, @cipso={0x86, 0x55, 0xffffffffffffffff, [{0x5, 0x7, "b6e21dff7f"}, {0x1, 0x8, "2b3f53168657"}, {0x1, 0xe, "983b74d4d01bbe2ffa7be93c"}, {0x5, 0xf, "ae5b484df7c1858b855194e021"}, {0x7, 0x7, "eb7c9acaa2"}, {0x7, 0x2}, {0x7, 0x8, "e08fd0e27b03"}, {0x7, 0x12, "5a871beef512027a068bbadf23a1ce1f"}]}]}}}}}) sendmsg$nl_route(r15, &(0x7f0000003400)={&(0x7f0000003200), 0xc, &(0x7f00000033c0)={&(0x7f0000003340)=@delneigh={0x64, 0x1d, 0x20, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, r16, 0x20, 0x42, 0xa}, [@NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xa}}, @NDA_DST_MAC={0xa, 0x1, @random="6a15b4d3db16"}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_PROTOCOL={0x5, 0xc, 0x59}, @NDA_PROTOCOL={0x5, 0xc, 0x1}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000003480)=@generic={&(0x7f0000003440)='./file0\x00', r11}, 0x18) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f00000034c0), &(0x7f0000003500)={0x0, 0xfb, 0x6b, 0x2, 0x9, "555c1866e57d1fc53a008f485b3dcc1f", "08553e2d258e86852ecfe9fffc01ebd6739b820872a1a02a6b75a142e4f97361e9052eb874fa66e751eeae84353987edd81fe0a30514f70582c8509d7d6baa315c3da1fad373bc8f82c9276fcde413b52b2f78ea8b82"}, 0x6b, 0x1) listen(r0, 0x1) read$FUSE(r8, &(0x7f0000003580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r10, &(0x7f00000055c0)={0x18, 0x0, r17, {0x8}}, 0x18) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000005600)=@nullb, r12, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000005640)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r13, 0x84, 0x73, &(0x7f0000006880)={0x0, 0x100, 0x0, 0x2, 0x1}, &(0x7f00000068c0)=0x18) sendmsg$inet_sctp(r14, &(0x7f00000069c0)={&(0x7f0000005680)=@in6={0xa, 0xffff, 0x2, @private2, 0xfff}, 0x1c, &(0x7f0000006840)=[{&(0x7f00000056c0)="11f44a342bb2a4de235371e7bcd71cd361773eb55430ca92590498a3ba", 0x1d}, {&(0x7f0000005700)="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", 0x1000}, {&(0x7f0000006700)="b67742da5b9faf1a9e03dfc616d40ce79175b01dfd7b14f40be966b7a51e8eab90b77ba302b2859e74c9378a15f5c50ddd90853e53ce7c101d7e44ecc4a99782709c52b7ea9f1432cb50c99e8846d8d01f746369808f6383b56d592e4fb57137393f39cbc4d32f6051efa2399df7ec29e094c3f9edb417962f6ba5df46fc743909c9e5d94efa658735b423c35f4405b77925a50a73196f31877c9da83aee40c7d7159b78968c557847ff75eddab73f0027727918cff5017414f09fe1221379b9e8df3b9f1dc1c320215a082456745e8bbedbce43b0d1911e21580104df2e0a52569a444a52f8a25ffc5f35455624bc440f8a", 0xf2}, {&(0x7f0000006800)="8d74", 0x2}], 0x4, &(0x7f0000006900)=[@init={0x18, 0x84, 0x0, {0x7, 0x0, 0x6, 0xd}}, @init={0x18, 0x84, 0x0, {0x2, 0x1ff, 0xfe4a, 0xf800}}, @dstaddrv6={0x20, 0x84, 0x8, @private0}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8000, 0x1fc00, 0x6, r18}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x80000001}}], 0xc0, 0x40084}, 0x400) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r9, 0xc0805841, &(0x7f0000006a00)={0x6, 0x7, 0xc8f, 0xd2, 0x6}) 26.449493445s ago: executing program 2 (id=350): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x36eac49ec043b62f, 0x0, 0x25dfdbbf, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x8, 0x2, 0xd, 0xe}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x48000) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write$char_usb(r2, &(0x7f0000000480)="d710", 0x2) (async) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="f51baa10b13ebb9f650bd10e63d4d23c9ee9", 0x12}, {&(0x7f0000000180)="dcf0c996b38e9d859ee9ee121fd0f84741ae62aba3cf3c6924074ddd7b1ceb449b173be1ff1b0c3c180e29930b0e3e31b0662dbe3e74a758c71cd5262d4ab589dbba4a68360ca7d013cf42401400ebad91429b0979c3e338f49ff4d48bfe5ab8dcc4bb91febb967e4e1e5e277fb55ed95fb1d7213609c0810a5482c66bc7d09d951eed44df7e38ebc6ad3733261d7c95a460637ced0f84205b8211582f3f948c", 0xa0}, {&(0x7f0000000240)="68fcd945806575263959c24ae56c7349403c1f63d02ea0d4202fd073e819d12d9a536151631c679a41b88f3baf823bd290b9dfc1d4ff24f1942c694b4c7bd0be8f92e4bfe335d15a67dfa03ce65c2d17d456481e40efec0fb1f4be3fab86bb23218f11e3dde37a707db328a0c44c7d40579d0f55c8e6ffae3404", 0x7a}, {&(0x7f00000002c0)="05e41cdcfe28bd3a04e7e18a0b96bd87a2f3dd1714715634ebd3bde09e6c825b0421639181a717b09d612fd7492eeec17455213e8e5c02619bc3a724d10bce75c9ad0fd16eda17b4628a2c8857fc", 0x4e}, {&(0x7f0000000340)="b82224fb813f9a116e35f2d8f032384db3ea79b575586be746c35e563a4c5c899273419dd61155821d77579eee1db5ff5adbb1dab05c8fa28277ef01ea866390169ffcd33830a8e091e7eb051e512a2688c3007db5869c2fff8c51b88249b2867dfbf614da038f09c3aace0d5c2281b582733c509a9b8596dc9227b17a4e0247bc46ac0996ad923fc8647641337d38b61f4bd62c2e1c6bf45a6c", 0x9a}, {&(0x7f0000000400)="ed7e9d74ff6c86d44164e8321dfcf766a2d8cbed90401384b60adc016593010fd940d0", 0x23}, {&(0x7f0000000440)="da78f555136671e89d19a3dbab9a8829d082a46674fdc9d88bae1dc116a3876e638f0aec83daff19e084cecbb13eebd5cc2be2a04a8ad6c7f5c9530f232c58b2a1aa443cbbb067a7a543402174d699213f07bd57a83a0140001722e29e7a7128ed5ccd1f87bd6cf1a90bc32717d3fbaa4e45a62424c45e8c58899baef89a635475bde8512f965702ee5ca263284ba79eb86ab77fc63eb967a163f8b1dbfdaaf9093e3791f0b1", 0xa6}], 0x7, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x50}, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) syz_ublk_setup_io_uring(0x7cca, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x37, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) fsopen(&(0x7f00000004c0)='hpfs\x00', 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x0, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x84, r4, 0x5, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x84}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x24, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x53}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 26.37721208s ago: executing program 2 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004884) r1 = socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005200010000000000000000001c000015140001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040014) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) futex(&(0x7f0000000140)=0x4, 0x8, 0xfffffffe, 0x0, 0x0, 0x2) 26.256319251s ago: executing program 2 (id=355): r0 = open(&(0x7f0000000180)='./file0/file1\x00', 0x76d283, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x610e00, 0x20) r2 = openat(r1, &(0x7f0000000140)='./trace\x00', 0x302, 0x8) write(r2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0/file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x4161, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080), &(0x7f0000000100)={'U-', 0x8}, 0x16, 0xdd91045d95f72538) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file2\x00', 0x0) 25.829960287s ago: executing program 2 (id=359): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0x111, 0x4b4, 0x1e8, 0xd4feffff, 0x300, 0x20a, 0x278, 0x300, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [0xff000000, 0x0, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'wg2\x00', 'veth0_macvtap\x00', {0xff}, {0x7f}, 0x51, 0x7, 0x0, 0x22}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x9, [0x4e22, 0x4e23, 0x4e22, 0x4e21, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e24, 0x4e20, 0x4e20, 0x4e24], [0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [0xffffffff, 0x0, 0x0, 0xffffff00], @ipv6=@remote, [0x0, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], @ipv6=@local, [0xffffffff, 0xffffffff, 0xff, 0xff000000], 0x1, 0x2, 0x32, 0x4e24, 0x4e21, 0x4e22, 0x4e22, 0x1000, 0x22}, 0x100, 0x1, 0x4e22, 0x4e20, 0x4e20, 0x4e21}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2, 0x4}, {0x3, 0x5, 0x6}}}}, {{@ipv6={@remote, @private0, [0x0, 0x0, 0xff000000], [0xff, 0x0, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {}, {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}}, 0x20004800) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0x111, 0x4b4, 0x1e8, 0xd4feffff, 0x300, 0x20a, 0x278, 0x300, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [0xff000000, 0x0, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'wg2\x00', 'veth0_macvtap\x00', {0xff}, {0x7f}, 0x51, 0x7, 0x0, 0x22}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x9, [0x4e22, 0x4e23, 0x4e22, 0x4e21, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e24, 0x4e20, 0x4e20, 0x4e24], [0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [0xffffffff, 0x0, 0x0, 0xffffff00], @ipv6=@remote, [0x0, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], @ipv6=@local, [0xffffffff, 0xffffffff, 0xff, 0xff000000], 0x1, 0x2, 0x32, 0x4e24, 0x4e21, 0x4e22, 0x4e22, 0x1000, 0x22}, 0x100, 0x1, 0x4e22, 0x4e20, 0x4e20, 0x4e21}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2, 0x4}, {0x3, 0x5, 0x6}}}}, {{@ipv6={@remote, @private0, [0x0, 0x0, 0xff000000], [0xff, 0x0, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {}, {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}}, 0x20004800) (async) 25.771557437s ago: executing program 32 (id=359): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0x111, 0x4b4, 0x1e8, 0xd4feffff, 0x300, 0x20a, 0x278, 0x300, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [0xff000000, 0x0, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'wg2\x00', 'veth0_macvtap\x00', {0xff}, {0x7f}, 0x51, 0x7, 0x0, 0x22}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x9, [0x4e22, 0x4e23, 0x4e22, 0x4e21, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e24, 0x4e20, 0x4e20, 0x4e24], [0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [0xffffffff, 0x0, 0x0, 0xffffff00], @ipv6=@remote, [0x0, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], @ipv6=@local, [0xffffffff, 0xffffffff, 0xff, 0xff000000], 0x1, 0x2, 0x32, 0x4e24, 0x4e21, 0x4e22, 0x4e22, 0x1000, 0x22}, 0x100, 0x1, 0x4e22, 0x4e20, 0x4e20, 0x4e21}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2, 0x4}, {0x3, 0x5, 0x6}}}}, {{@ipv6={@remote, @private0, [0x0, 0x0, 0xff000000], [0xff, 0x0, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {}, {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}}, 0x20004800) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x0, 0x111, 0x4b4, 0x1e8, 0xd4feffff, 0x300, 0x20a, 0x278, 0x300, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [0xff000000, 0x0, 0xffffffff, 0xff000000], [0x0, 0xffffffff, 0xffffff00, 0xff000000], 'wg2\x00', 'veth0_macvtap\x00', {0xff}, {0x7f}, 0x51, 0x7, 0x0, 0x22}, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x9, [0x4e22, 0x4e23, 0x4e22, 0x4e21, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e24, 0x4e20, 0x4e20, 0x4e24], [0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [0xffffffff, 0x0, 0x0, 0xffffff00], @ipv6=@remote, [0x0, 0x0, 0x0, 0xff], @ipv4=@remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], @ipv6=@local, [0xffffffff, 0xffffffff, 0xff, 0xff000000], 0x1, 0x2, 0x32, 0x4e24, 0x4e21, 0x4e22, 0x4e22, 0x1000, 0x22}, 0x100, 0x1, 0x4e22, 0x4e20, 0x4e20, 0x4e21}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2, 0x4}, {0x3, 0x5, 0x6}}}}, {{@ipv6={@remote, @private0, [0x0, 0x0, 0xff000000], [0xff, 0x0, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00', {}, {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}}, 0x20004800) (async) 23.103732708s ago: executing program 33 (id=251): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) ioctl(r1, 0x6, &(0x7f0000001b00)="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") sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004005) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbcf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 15.286507431s ago: executing program 34 (id=333): gettid() r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80, 0x202040) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x5, 0xffff, 0x9, 'syz0\x00', 0x1}, 0x5, 0x40, 0x4, r1, 0x5, 0x2, 'syz1\x00', &(0x7f0000000080)=['/^)\x00', '\x00', '@,\x00', '&-&{\xc5\x9a%v\x00', ',*\x00'], 0x14}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000200)={{0x4, 0x1, 0x3, 0x4, 'syz0\x00', 0x80}, 0x0, [0xf, 0x3, 0x2, 0x2, 0x7, 0x6, 0x3, 0x4, 0xc54, 0x1, 0x4, 0x4, 0x6, 0x8000000000000001, 0x6, 0x10000, 0x2, 0x40c7c44d, 0x4, 0x16a7a1cf, 0x337, 0x5, 0xffffffffffffffff, 0x815, 0xfffffffffffffffe, 0x2, 0x7fff, 0x9c11, 0x1, 0x0, 0x1, 0x1, 0x6, 0x2, 0x9cc4, 0xffffffffffff7fff, 0x5, 0xfffffffffffffffa, 0x7ff, 0x7ad, 0x7, 0x8, 0x10000, 0x1, 0x1, 0x4e, 0x4, 0x80000001, 0xffff, 0x8000, 0x4, 0xfffffffffffff382, 0x6, 0x145db4d0, 0x40, 0x8, 0x7e3a, 0xfffffffffffffffd, 0xe, 0xa, 0xd, 0x3, 0x0, 0x8, 0xc6f, 0x5, 0x4, 0xfffffffffffffff9, 0x7fffffffffffffff, 0x7, 0x4, 0x0, 0x100, 0x40, 0x7, 0x7fffffffffffffff, 0x7, 0x8000000000000000, 0x700000000000000, 0x1, 0x7, 0x0, 0x5, 0x1, 0x5, 0x7, 0x1025, 0x7fff, 0x7ff, 0x7, 0x2, 0x8000000000000001, 0x5, 0x8000000000000000, 0xa, 0x5, 0x2, 0x7, 0x1, 0x4, 0x5f9d38fb, 0x0, 0x3, 0x80, 0x5, 0x8, 0x8, 0x2, 0x7, 0x6, 0xa5, 0x7, 0x9, 0x8001, 0x5, 0x8, 0x9, 0x0, 0x4, 0x100000001, 0xec3, 0x7f, 0x1, 0x8, 0xff, 0xffffffff7fffffff, 0x404, 0x1]}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r4, &(0x7f0000000740)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r5 = openat(r2, &(0x7f0000000780)='./file0\x00', 0x183000, 0x108) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'dvmrp0\x00'}) close(0xffffffffffffffff) bind(r3, &(0x7f0000000800)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x80) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000880)={0x0, 0x0, 0xd6cc, 0x9}) r6 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0x10000, 0x20880) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000900)={{0x1, 0x5, 0x5, 0x6, 'syz0\x00', 0x9}, 0x0, [0x5e, 0x9, 0x2, 0xeb, 0x6, 0x1ff, 0x6, 0x2, 0x0, 0x8, 0x3, 0x0, 0x7fffffff, 0x7, 0xca, 0xf, 0x1000, 0xfff, 0x0, 0x92b, 0x1, 0xc23d1cc, 0x1000, 0xc0000000000000, 0x7fffffffffffffff, 0xffffffff, 0x7fff, 0x7, 0x9, 0x7, 0x753, 0x3, 0x9, 0x5, 0x74, 0xa351, 0x2, 0x6, 0x4, 0xfffffffffffffe9a, 0xc60, 0xff, 0x8, 0x3ff, 0x6, 0x0, 0xc69e, 0x60000000000, 0x9, 0xab, 0xbeb, 0x6, 0x6, 0x1ff, 0x200, 0x80, 0x80, 0xe, 0x1000, 0x362, 0x7, 0x3, 0xad7, 0x8, 0x2, 0xff, 0x2, 0xbc, 0x0, 0x40, 0x8, 0x8, 0x0, 0x1, 0x3, 0x0, 0xb, 0xffffffffffffff01, 0x3cce244a, 0xffffffff, 0x1, 0xffff, 0x0, 0x6, 0x9, 0xffffffff7fffffff, 0x2, 0x8000000000000001, 0x10001, 0x7f, 0x7, 0x80000000, 0x83d2, 0x9, 0x4, 0x4, 0xff, 0x1, 0x8, 0x6, 0x1, 0x4, 0xffff, 0x2, 0x800, 0x2, 0x2, 0x7, 0xfed, 0x4, 0xa96, 0xffffffffb9bf75c5, 0x30f59297, 0x3, 0xfffffffffffffffe, 0x4, 0x6, 0x6, 0xe, 0x7, 0x0, 0x8, 0x101, 0x4, 0x2, 0x8, 0x80000000, 0xffffffffffffffff]}) mount(&(0x7f0000000e00)=@md0, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='exofs\x00', 0x1020000, &(0x7f0000000ec0)=',*\x00') r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000f40)={0x4, 0x8, 0x7, 0x9}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) sendmsg$nl_xfrm(r5, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)=@updpolicy={0xf4, 0x19, 0x200, 0x70bd27, 0x25dfdbfe, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0xf, 0xa, 0xe0, 0xa0, 0x4e, 0x0, r9}, {0x7, 0x0, 0x6, 0x3, 0xfd2, 0x78ac, 0x0, 0xe53}, {0xa, 0x80000001, 0x148, 0x7}, 0xc, 0x6e6bbf, 0x1, 0x0, 0x2, 0x3}, [@proto={0x5, 0x19, 0x33}, @iptfs_init_delay={0x8, 0x27, 0x8}, @etimer_thresh={0x8, 0xc, 0x7fffffff}, @iptfs_pkt_size={0x8, 0x29, 0x20}, @coaddr={0x14, 0xe, @in6=@private0}, @tfcpad={0x8, 0x16, 0x3ff}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20000080}, 0x6d98f9382d91c052) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x9}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x18c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x54, 0x6, "1ac97ca95e2162dee9685b03a3630d3840eb2d76c47f70db75f8b8028c78d2f6d1622df3a9e1adf1d55a0dda35be4c60df91f66179b5bd5691d2641e2fbb2fc019062f9449320e65fab7e8036276890b"}, @NFTA_TABLE_USERDATA={0xfd, 0x6, "fd10422528ce6b169b4e8582767d6f4592d1608c99e10312a88545af350981efd1879d997bd9c91119cbd6a22657cd96ee5dc8e2366489ab2b07bb9a3a3f94d57ea0db08e806db5b83dd477b9e36d562cd228b8ba65e845307b2b14df13c10768fc36b7d7eba4589bbbfd7611c18e4def31cae608eee96b2f92173c0642ea7597310e092770fea93ae57a57f499ef398a1d0c51e9d7c584c69d9621f0b9e077a2276a16946da7433c1b21762dff3f19fb38209722d3e6b806ac329f714847d11827a885472ec5df2a0327ddccb011f79fe82b1c01846a1868c39a6505a9fae612168b3c31c21c222a16d7d6f812c53a000c65de129fe4372de"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x8, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0xbc, 0xb, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x50, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x3b}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x300}, 0x1, 0x0, 0x0, 0x804}, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000016c0), 0xed3d60e48b96691, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r8, 0x4, &(0x7f0000001640)='last\x00', &(0x7f0000001680)='./file0\x00', r10) bind$tipc(r10, 0x0, 0x0) futex_waitv(&(0x7f0000002e40)=[{0x0, &(0x7f0000001700)=0x80000001, 0x82}, {0x7a8, &(0x7f0000001740)=0x555, 0x2}, {0x5, &(0x7f0000001780)=0xba3, 0x82}, {0x1, &(0x7f00000017c0)=0x2, 0x82}, {0x2, &(0x7f0000001800)=0xffff, 0x2}, {0x6, &(0x7f0000001840)=0x5, 0x2}, {0x100000000, &(0x7f0000001880)=0xfffffffffffeffff, 0x2}, {0x200, &(0x7f00000018c0)=0x8, 0x82}, {0x2, &(0x7f0000001900)=0x9, 0x2}, {0x4, &(0x7f0000001940)=0x5, 0x2}, {0x5, &(0x7f0000001980)=0x9, 0x82}, {0x8, &(0x7f00000019c0)=0x3, 0x2}, {0x4, &(0x7f0000001a00)=0x7, 0x82}, {0x2, &(0x7f0000001a40)=0x6, 0x2}, {0x3, &(0x7f0000001a80)=0x5, 0x2}, {0x4, &(0x7f0000001ac0)=0xcc7, 0x82}, {0x31, &(0x7f0000001b00)=0x1ff, 0x2}, {0x7, &(0x7f0000001b40)=0x10001, 0x82}, {0x6, &(0x7f0000001b80)=0x1, 0x82}, {0xf, &(0x7f0000001bc0)=0x6}, {0xb, &(0x7f0000001c00)=0x8, 0x82}, {0x10001, &(0x7f0000001c40)=0xf65, 0x82}, {0x2, &(0x7f0000001c80)=0x6}, {0xffffffff, &(0x7f0000001cc0)=0x4, 0x82}, {0x5, &(0x7f0000001d00)=0x2, 0x43}, {0x800, &(0x7f0000001d40)=0x200, 0x2}, {0x5, &(0x7f0000001d80)=0x6, 0x2}, {0x5a1, &(0x7f0000001dc0)=0x4e, 0x2}, {0x7fffffffffffffff, &(0x7f0000001e00)=0xe, 0x2}, {0x6, &(0x7f0000001e40)=0x4e, 0x42}, {0x1, &(0x7f0000001e80)=0x1, 0x82}, {0x811, &(0x7f0000001ec0)=0x1ac7, 0x82}, {0x8000000000000001, &(0x7f0000001f00), 0x82}, {0x9, &(0x7f0000001f40)=0x3, 0x2}, {0x7f, &(0x7f0000001f80)=0x3, 0x2}, {0xfa7f, &(0x7f0000001fc0)=0x5, 0x4}, {0xe, &(0x7f0000002000)=0x1, 0x82}, {0x6, &(0x7f0000002040)=0xa, 0x2}, {0x5, &(0x7f0000002080)=0x80000001, 0x2}, {0x7fffffff, &(0x7f00000020c0)=0x8b4, 0x82}, {0x8, &(0x7f0000002100)=0x4, 0x82}, {0x4, &(0x7f0000002140)=0x8, 0x82}, {0x80000001, &(0x7f0000002180)=0xffffffffffff8000, 0x2}, {0x6, &(0x7f00000021c0)=0xffffffffffffff80, 0x2}, {0x2, &(0x7f0000002200)=0xe063, 0x2}, {0x4, &(0x7f0000002240)=0x9, 0x2}, {0x8, &(0x7f0000002280)=0xb, 0x2}, {0x2, &(0x7f00000022c0)=0x8, 0x82}, {0x55ec, &(0x7f0000002300)=0x2, 0x2}, {0x401, &(0x7f0000002340)=0xb, 0x2}, {0x5, &(0x7f0000002380)=0x8, 0x82}, {0x3, &(0x7f00000023c0)=0x2, 0x2}, {0x5, &(0x7f0000002400)=0x1ff, 0x82}, {0x1, &(0x7f0000002440)=0x1, 0x2}, {0x9, &(0x7f0000002480)=0x6, 0x82}, {0x2, &(0x7f00000024c0)=0x41d, 0x82}, {0x1ff, &(0x7f0000002500), 0x82}, {0x296ccfca, &(0x7f0000002540)=0xa, 0x2}, {0x5, &(0x7f0000002580)=0x9, 0x82}, {0x40, &(0x7f00000025c0)=0x5, 0x82}, {0x6e, &(0x7f0000002600)=0xffffffff, 0x82}, {0x4, &(0x7f0000002640)=0x5, 0x2}, {0xffff, &(0x7f0000002680)=0x6be3, 0x80}, {0x2, &(0x7f00000026c0)=0x3, 0x82}, {0x6, &(0x7f0000002700)=0x4, 0x82}, {0x4b, &(0x7f0000002740)=0x80, 0x2}, {0x9, &(0x7f0000002780), 0x2}, {0x2, &(0x7f00000027c0)=0x6}, {0x4, &(0x7f0000002800)=0x8, 0x82}, {0x7, &(0x7f0000002840)=0x1000, 0x82}, {0x7, &(0x7f0000002880)=0x80000000, 0x2}, {0xae08, &(0x7f00000028c0)=0x9, 0x82}, {0x1, &(0x7f0000002900)=0x100000000, 0x2}, {0xc85f, &(0x7f0000002940)=0x7, 0x2}, {0x7, &(0x7f0000002980)=0x7, 0x186}, {0x2, &(0x7f00000029c0)=0x2, 0x82}, {0x8, &(0x7f0000002a00)=0x100000000, 0x2}, {0x9, &(0x7f0000002a40)=0x1, 0x82}, {0x5, &(0x7f0000002a80)=0xf85b, 0x2}, {0xffff, &(0x7f0000002ac0)=0x9d22, 0x82}, {0x81, &(0x7f0000002b00)=0x1, 0x2}, {0xfa0, &(0x7f0000002b40)=0x8, 0x2}, {0x8, &(0x7f0000002b80)=0xef7c, 0x2}, {0x8, &(0x7f0000002bc0)=0x2, 0x82}, {0x1, &(0x7f0000002c00)=0x8000, 0x82}, {0x9, &(0x7f0000002c40)=0x1, 0x2}, {0x5, &(0x7f0000002c80)=0x101, 0x2}, {0xffffffffffffffff, &(0x7f0000002cc0)=0x1, 0x82}, {0xfffffffffffffff7, &(0x7f0000002d00)=0x8, 0x2}, {0x9, &(0x7f0000002d40)=0x2b, 0x82}, {0xffffffffffffffff, &(0x7f0000002d80)=0x5}, {0x0, &(0x7f0000002dc0)=0xffff, 0x2}, {0x3, &(0x7f0000002e00)=0x9, 0x2}], 0x5d, 0x0, &(0x7f0000003700), 0x1) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003740), 0x0, 0x0) close_range(r11, r6, 0x0) 5.708540733s ago: executing program 5 (id=539): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x310, 0x4) write(r0, 0x0, 0x0) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) (async) recvfrom(r0, 0x0, 0x0, 0x2021, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@remote]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) 5.707954473s ago: executing program 5 (id=540): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000015c0)='htcp', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000015c0)='htcp', 0x4) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={0x0, 0x1, 0xab, "c2f135d2fa19a79e99c4e242446046a9bbaf77f680a6c0b6eb90a38f8febf913407f802eac7bc5ad3e4d58044f68a0af34e5956fccbb9b38b7155fddd6cd8fc9a0ff2103eae9f915d4d2e0361a3ee42847027ac23a0fda857b0cc40b891bde5e2b92d4b25f0e8913c41daa1cdbd5cca7e687ae3a4287b3eb24cf13460a3173a6721b01333d28f1dea1e1530d49a6711fb98fc938af471f05f5412d16ffb383e836cef5d6f8b7579d8e585e"}, 0xb3) 5.609352522s ago: executing program 5 (id=541): setpgid(0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000006200), 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) tkill(r1, 0x37) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) write$tcp_congestion(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f0000180003800400010008000200050000000800040076"], 0x38}}, 0x0) dup2(r0, r6) 5.533163075s ago: executing program 5 (id=542): socket(0x11, 0x2, 0x3ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write(r4, &(0x7f0000000340)='na', 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x2, 0x5, 0x3bce) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8902}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000280)=0xfffffff8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r9 = landlock_create_ruleset(&(0x7f0000000140)={0x840, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0xd) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, 0x0, &(0x7f0000000a80)) 5.319896143s ago: executing program 5 (id=549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) sendfile(r5, r5, 0x0, 0x6fecb1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000180)={0xd5, 0x0, 0xf68}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a400000001489509e19962adc6d0249655145f8be13c64cf80269c9c77a0a115deefcc92aaf1f487e2ed3a84a11953f88f0c22f93b5fa349ac80822ad06ef8aebe8654a18939"], 0xa4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(0x0, r6) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000040)='-f\xd87\xce\x7fF\xdf\xa8U\x12\xbe\xf2\xcc\xe7\xf8\xc4\x9e\xf3\xb77\xd1\xf4E)$\xbc9\xfe\xd4') 5.228157728s ago: executing program 5 (id=551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) (async) 4.268917982s ago: executing program 0 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) write(r0, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611004000000000063000eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) (async) write(r0, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) 4.199831798s ago: executing program 0 (id=563): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x6, 0xfc, 0x6, 0xffffffff}, {0xec, 0x9, 0x1, 0x3}]}) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)={&(0x7f0000002000), 0x0, 0x1}}, 0x1) (async) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000400)={0x0, 0x3}, 0x0) (async) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) (async) read$snddsp(r2, &(0x7f0000000200)=""/208, 0xd0) (async) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f00000000c0)) 4.198936342s ago: executing program 0 (id=564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) pread64(r3, &(0x7f0000000540)=""/232, 0xe8, 0x101) socket(0x400000000010, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, '\x00', @bt={0xffff633e, 0x100, 0x3, 0x3, 0x5, 0xca4, 0x6, 0x8}}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_init(0x10, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) fanotify_init(0x10, 0x1000) socket(0x10, 0x3, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.069694747s ago: executing program 0 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc4c85512, &(0x7f0000000280)={{0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0xa) r1 = open(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0xd9) r2 = socket$xdp(0x2c, 0x3, 0x0) splice(r1, &(0x7f0000000180)=0x4, r2, &(0x7f0000000280)=0x7, 0x6, 0x5) 4.069175099s ago: executing program 0 (id=566): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f00000000c0)='gfs2meta\x00', 0x2922c09, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/class\x00', 0x0, 0x0) read(r0, &(0x7f0000000100), 0x10) 3.729844853s ago: executing program 0 (id=569): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0xfffffffffffffff9) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r5, 0x0) keyctl$set_timeout(0xf, r0, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x48}}, 0x4844) 3.697316233s ago: executing program 35 (id=569): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x2d, 0xfffffffffffffff9) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r5, 0x0) keyctl$set_timeout(0xf, r0, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x48}}, 0x4844) 1.429302647s ago: executing program 4 (id=601): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0xa0c01, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/cpu_dma_latency\x00', 0xa0c01, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)="d34edac4", 0x4}], 0x1) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) (async) fchdir(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r5, 0x8b24, &(0x7f0000000040)) (async) ioctl(r5, 0x8b24, &(0x7f0000000040)) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r7 = dup(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r7}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x6000) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r8, 0x0) (async) setresuid(0xee01, r8, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r9 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) 1.28552419s ago: executing program 4 (id=606): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000080)="470f23fc48b8e7320000000000000f21f80f23e1f8440f014a000f2221c7c4c3fd01ce002063800000002c24f30f556797c483fd005b02ea64267b470f1fcfcf666466430f3833af00580000", 0x4c}], 0x1, 0x4b, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x4, 0x30, 0x4}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0x8, 0x20}, 0xc) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.188503778s ago: executing program 6 (id=608): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000140)={&(0x7f00000000c0)=[{0x942, 0x4}, {0x100000000, 0x5, 0x2}, {0xfca9, 0x5, 0x2}, {0x2, 0xffffffff}, {0x0, 0x7}, {0x2, 0xcbc5}], 0x6, 0x10, 0x4, 0x2}) fchdir(r0) r1 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x5810c1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf251b00000008000300", @ANYRES32=r7, @ANYBLOB="10002e80388a3f3ca60c0004000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) r8 = dup(r4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000022c0)={0x2, r2, 0x1}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) ioctl$TIOCNXCL(r11, 0x540d) creat(&(0x7f0000000080)='./cgroup\x00', 0x21) r12 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x208040, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r12, 0x4004510f, &(0x7f00000001c0)=0x9) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x8800, &(0x7f0000000200)=ANY=[@ANYBLOB="7569ff07", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 1.08788266s ago: executing program 4 (id=609): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x0, 0x401}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x8000, 0x9, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000780)={0x0, 0x9, 0x1, [0x5, 0x2, 0x100000000, 0xffffffffffffff81, 0x2], [0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x2, 0x80, 0x2, 0x0, 0x81, 0x7, 0x40, 0x8, 0x4, 0xe, 0xf, 0x80, 0x1c0000000, 0x9, 0x200, 0x7f, 0xa, 0xc9, 0x2, 0x7, 0x2, 0x4, 0x8000000000000001, 0xffffffffffffffff, 0x5, 0x8001, 0xc389, 0x9, 0xd8, 0xd408, 0xf, 0x9, 0xca9d, 0x3, 0x9, 0xc, 0x5, 0x3, 0x1000, 0x6, 0x5, 0x80000001, 0x9, 0x0, 0x0, 0x5, 0x6, 0x10000, 0x4, 0x0, 0x3, 0x10000, 0x0, 0xd3, 0xfffffffffffffff8, 0x8, 0xc, 0xfffffffffffffff1, 0x2, 0x1, 0xffffffffffff7fff, 0xfffffffffffffc00, 0xdba7, 0x7, 0x8, 0x27, 0x2, 0x5, 0x8, 0xd, 0x1, 0x5, 0xfffffffffffffff9, 0xb2eb, 0x4, 0x9, 0xfffffffffffffffe, 0xa7, 0x1ae5, 0x6, 0x9, 0x3, 0x80000001, 0x10000, 0x6, 0x5, 0x5, 0x6, 0x6, 0xfffffffffffffffc, 0x5, 0x7, 0x2, 0x1, 0x8, 0x7fff, 0x3, 0x2, 0x101, 0x2, 0xaa7, 0x9d8b, 0x677, 0xfff, 0x0, 0x917, 0x97f8, 0x6, 0x2, 0x10, 0x6, 0x6, 0x1, 0x2, 0x8, 0x4]}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000bc0)={0x18, 0x4, {0x8eca, @usage, 0x0, 0x3, 0x1, 0x7dfe, 0x1ff, 0x5, 0x20, @usage=0x9, 0x6, 0x2, [0x0, 0x56e, 0xfffffffffffffff9, 0x9, 0x6, 0x3]}, {0x8, @usage=0x1, r3, 0x8, 0x105, 0x2, 0xb62f, 0x9, 0x1, @struct={0x3, 0x9}, 0x9, 0xf1, [0x80, 0x1, 0x80000000, 0x720d, 0x8, 0xb1]}, {0x3baf, @struct={0x10, 0x8}, r4, 0x6, 0x5, 0x7fffffffffffffff, 0x0, 0x0, 0x48, @struct={0x3, 0x7e42}, 0xd, 0x9, [0x2, 0x100000001, 0x0, 0x7, 0x80000000]}, {0xa60e, 0x8, 0x2}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x91}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 1.087424661s ago: executing program 4 (id=610): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x8, 0x4, 0x7, 0x7, 0xc0, 0x1, 0x3, 0x5, 0xdf, [0x80, 0x0, 0x32, 0x7, 0x0, 0xa0, 0x10, 0x5]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000001d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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", @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r3}, 0x14) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x7, 0x7, 0x8001, 0xec, {{0xe, 0x4, 0x0, 0x35, 0x38, 0x68, 0x0, 0xf3, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x1c, 0xa0, 0x1, 0x9, [{@rand_addr=0x64010101, 0x5}, {@multicast2, 0x285}, {@rand_addr=0x64010100, 0x7}]}, @cipso={0x86, 0x6, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x7, 0x80, 0xd, 0x6, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x68, 0x0, 0x10, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, {[@ssrr={0x89, 0x23, 0x66, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @remote]}, @lsrr={0x83, 0x7, 0x18, [@private=0xa010102]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_macvtap\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x10001, 0x80000000, {{0x4d, 0x4, 0x2, 0x5, 0x134, 0x66, 0x0, 0xc, 0x29, 0x0, @multicast1, @multicast1, {[@end, @cipso={0x86, 0x19, 0x3, [{0x5, 0xc, "d5e5d2a90e71d2dd78e1"}, {0x1, 0x7, "5e167629d7"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x95, 0x1, 0x8, [{@broadcast, 0x6a}, {@loopback, 0x9}, {@private=0xa010101, 0x1}, {@private=0xa010100, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x41}, 0xfff}, {@empty, 0x2}, {@multicast2, 0x800}]}, @lsrr={0x83, 0x2b, 0xfb, [@remote, @multicast1, @multicast2, @broadcast, @multicast2, @remote, @remote, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x37}]}, @cipso={0x86, 0x69, 0x3, [{0x0, 0x9, "6ff3a227a02f44"}, {0x0, 0x12, "a0e80300000000000600a038999ab76b"}, {0x7, 0x4, "6eea"}, {0x7, 0xa, "c03cd4c718ba2995"}, {0x6, 0x6, "ca2e3c3c"}, {0x6, 0x5, "6a26f9"}, {0x7, 0x6, "1aeba920"}, {0x2, 0x11, "dba1b30a2716c283477ad7987a3ae3"}, {0x7, 0x7, "89e4ac0d05"}, {0x3, 0x11, "aad2de214c41a83c617d3c26065332"}]}, @cipso={0x86, 0x9, 0x1, [{0x5, 0x3, 'B'}]}, @end, @cipso={0x86, 0x1e, 0x3, [{0x1, 0xf, "7a2748ddf1e623762fa4588be0"}, {0x7, 0x9, "8f0cd8b343c433"}]}]}}}}}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r12, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8a4, 0x800, 0x3, 0x9, 0x8, 0xf7, 0x2d, 0xd, 0x7ff}}}}]}, 0x58}}, 0x40440c0) bind$packet(r10, &(0x7f0000000040)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x8000, 0x20, 0x6, 0x0, {{0x1f, 0x4, 0x1, 0x37, 0x7c, 0x65, 0x0, 0x40, 0x29, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x57, 0x3, 0xf, [{@rand_addr=0x64010100, 0x9}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x7}, {@private=0xa010101, 0x7}, {@remote, 0x1}]}, @end, @rr={0x7, 0x1f, 0x50, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @remote, @loopback, @multicast1, @local]}, @timestamp_prespec={0x44, 0x14, 0x36, 0x3, 0x3, [{@rand_addr=0x64010100, 0x81}, {@empty, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x2f, 0x35, 0xf, 0xb, 0x63, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, 0x7800, 0x1, 0xc, 0x40000000}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r1, @ANYBLOB="080025bd7000fcdbdf250400000048000180140002006d8063766c616e31000000000000000008000300000000001400020070696d3672656700000000000000000014000200626f6e643000000000000000000000000600018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14000200766972745f77696669300000000000000800030006000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1c0001800800030003000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="2800018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f6d6163767461700000005400018008000100", @ANYRES32=r13, @ANYBLOB="08000300010000000800030002000000140002007465616d5f736c6176655f30000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB], 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r16, 0x8b2a, &(0x7f0000000040)) 1.028629162s ago: executing program 6 (id=611): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) recvfrom$inet_nvme(r5, &(0x7f0000000280)=""/64, 0x40, 0x140, &(0x7f0000000340)=@caif=@util={0x25, "4971b265f612489dc3f02fe0cf6ac114"}, 0x80) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) (async) bind$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r5}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) 859.603302ms ago: executing program 4 (id=612): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x7f, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x450}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080dd}, 0x20040000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x7f, 0x4, 0x9}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x450}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080dd}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) (async) socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8b5, 0x3, 0x9, 0x1}}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@multicast2, [0xff, 0xff000000, 0xe0fd50d42a7bd30f, 0xffffffff], @ipv6=@mcast2, [0xff, 0xffffff00, 0xff000000, 0xffffffff], 0x4d4, 0x0, 0x33, 0x1, 0x10, 0x1}, {@ipv4=@empty, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@mcast2, [0xffffff00, 0xff, 0xffffffff, 0xff000000], 0x4d3, 0x3505, 0x3b, 0x1, 0x8, 0x16}, {@ipv4=@broadcast, [0xff, 0xffffffff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x0, 0x62, 0x0, 0x10, 0x10}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xff000000, 0x0, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x0, 0x33, 0x0, 0xd, 0x4}], 0x1}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000640)="68f2", 0x2, 0x1, 0x0, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) (async) write(r0, &(0x7f0000000380)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000180)=0xfffffffa, 0x4) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) link(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0xffffffffffffffda, r7, {0x7, 0x28, 0x7fffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) 859.083182ms ago: executing program 4 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 738.557009ms ago: executing program 6 (id=614): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000520000012acd7000fbdbdf2500000000d9a7a2a572b642773aec2a088e7dfa36900b8af26b23f51099f31e478c6787e2ad363721c80dd22232898e370ec6"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004040) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0xc87e}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)=""/203, 0xcb) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106412, &(0x7f00000000c0)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x2, 0x4, 0x1, 0xd128, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000200), &(0x7f0000000000)=""/10, 0x2}, 0x20) accept4(r0, &(0x7f00000004c0)=@can, &(0x7f0000000540)=0x80, 0x80000) close(r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='common_pid > \"', 0xe) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x80) 649.720782ms ago: executing program 6 (id=615): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000026c0)={0x0, 'hsr0\x00', {0x3}, 0x8}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x53, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000002c0)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 649.40373ms ago: executing program 6 (id=616): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x7fff, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f00000000c0)="17", 0x1, 0x4, &(0x7f00000002c0)={0xa, 0x4e23, 0x7ff, @local, 0x4}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000540)='%pB \x00'}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x98, &(0x7f0000000500)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0xffffffff}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}, @in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x200000, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x200000000000010a, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff4b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(&(0x7f0000000080)=@md0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='gfs2meta\x00', 0x200001, &(0x7f0000000380)='/-#+)\x00') 347.907652ms ago: executing program 7 (id=617): syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="c5a500429b3aaaaaaaaaaabb08004538002000660000000000000001060001"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e0000040002800800", @ANYRES32=r1, @ANYBLOB='\b'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket(0x200000000000011, 0x2, 0xd) (async) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0xfffe, 0x8000}, 0x4) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0xfffe, 0x8000}, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) 347.452146ms ago: executing program 6 (id=618): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000002b00)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/77, 0x4d}], 0x4}}, {{&(0x7f0000000540), 0x6e, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f00000007c0)=""/66, 0x42}, {&(0x7f0000000840)=""/22, 0x16}, {&(0x7f0000000880)=""/47, 0x2f}], 0x5, &(0x7f0000000940)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/29, 0x1d}], 0x2}}, {{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002640)=""/150, 0x96}, {&(0x7f0000002700)=""/111, 0x6f}, {&(0x7f0000002780)=""/238, 0xee}, {&(0x7f0000002880)}], 0x4, &(0x7f0000002900)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002a00), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002a80)=""/13, 0xd}], 0x1}}], 0x5, 0x10002, &(0x7f0000002c40)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) recvmmsg$unix(r1, &(0x7f0000002b00)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f0000000380)=""/202, 0xca}, {&(0x7f0000000480)=""/77, 0x4d}], 0x4}}, {{&(0x7f0000000540), 0x6e, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/214, 0xd6}, {&(0x7f00000007c0)=""/66, 0x42}, {&(0x7f0000000840)=""/22, 0x16}, {&(0x7f0000000880)=""/47, 0x2f}], 0x5, &(0x7f0000000940)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/29, 0x1d}], 0x2}}, {{&(0x7f00000025c0)=@abs, 0x6e, &(0x7f00000028c0)=[{&(0x7f0000002640)=""/150, 0x96}, {&(0x7f0000002700)=""/111, 0x6f}, {&(0x7f0000002780)=""/238, 0xee}, {&(0x7f0000002880)}], 0x4, &(0x7f0000002900)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002a00), 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002a80)=""/13, 0xd}], 0x1}}], 0x5, 0x10002, &(0x7f0000002c40)={0x77359400}) (async) 347.076561ms ago: executing program 7 (id=619): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1eb6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0xfffffffffffffffe) 270.027214ms ago: executing program 7 (id=620): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000140), &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a320000000014000000110001"], 0x15c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000020000000200000004000000000000000000000b03"], 0x0, 0x5a}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="e4fedf00030000000000060000000000000113850000e7ffff"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x10100003, r6, 0x4}, 0x38) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300003f00028008000500", @ANYRES32=r2, @ANYBLOB='\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 204.275721ms ago: executing program 7 (id=621): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8bf8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b70200000000000085000000cc000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x0) keyctl$describe(0x6, r3, 0x0, 0x0) 203.794752ms ago: executing program 7 (id=622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x10802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='md0\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='external_bbl', 0xc) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000000)={0x0, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/subsys0/attr_allow_any_host\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)='ipv4\n', 0x5) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x103002, 0x0) close(r6) symlinkat(&(0x7f0000000100)='./config/nvmet/subsystems/subsys0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/subsystems/subsys0\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000100)={'comedi_test\x00'}) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) 0s ago: executing program 7 (id=623): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000084409010240000102030109021f0001010200050904000001010330fe09051203080029060804250100d9a6234e51984f52a7551fab0450db4218c6814106cff9c241ae572b6f786430d5cd55c21f74ba83ce830afcdd560e3c27bc8c2b6ccf98ccc159663002ebb0f8e15bf3f969004d4d02dd563ae56506451ae20c97cd76f2b8598f0dee0a9d31cd6ad84dc5efe3215edf6c916ea83ecaf50bed6c3f09cc4c"], &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000084409010240000102030109021f0001010200050904000001010330fe09051203080029060804250100d9a6234e51984f52a7551fab0450db4218c6814106cff9c241ae572b6f786430d5cd55c21f74ba83ce830afcdd560e3c27bc8c2b6ccf98ccc159663002ebb0f8e15bf3f969004d4d02dd563ae56506451ae20c97cd76f2b8598f0dee0a9d31cd6ad84dc5efe3215edf6c916ea83ecaf50bed6c3f09cc4c"], &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0}) (async) 0s ago: executing program 6 (id=624): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1d0, r0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x927e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4915}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @local, 0xfffffffb}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x800}, 0x20000804) (async) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0x9) connect(r1, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) write$nbd(r1, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:1f.3\x00', 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x10}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x1, 0x8, 0x9, 0x9, 0x9, 0xf9, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x400002, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x0, 0x2, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25b1, 0x5, 0xfff, 0x0, 0xe, 0xffffffff, 0x3, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xc, 0x4, 0xdfffffff, 0xa80, 0x0, 0x7, 0x2, 0x0, 0xff, 0x4, 0x7, 0xc, 0xfdc1, 0x77f, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x1000, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x6, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0x80000d, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x7, 0x5597, 0x3, 0x7, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7ffffffe, 0xd, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x0, 0x3, 0x5, 0x9, 0x5, 0xffffffff, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x4, 0x0, 0x7ff, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765b, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x400000, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0x4, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1b, &(0x7f0000000880)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x4, 0x4, 0x4, 0x1740, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6, r5}, 0xc) (async) r7 = openat(r2, &(0x7f0000000140)='driver\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000180)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='0000:00:1f.3\x00', 0xd) r9 = openat(r2, &(0x7f0000000200)='driver_override\x00', 0x1, 0x0) write(r9, &(0x7f0000000240)='cdns2-pci\x00', 0xa) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/cdns2-pci\x00', 0x0, 0x0) r11 = openat(r10, &(0x7f00000002c0)='bind\x00', 0x1, 0x0) write(r11, &(0x7f0000000300)='0000:00:1f.3\x00', 0xd) kernel console output (not intermixed with test programs): dm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.779963][ T43] audit: type=1400 audit(1789963712.930:29535): avc: denied { ioctl } for pid=6643 comm="syz.2.191" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.780158][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.191'. [ 67.784804][ T43] audit: type=1400 audit(1789963712.930:29536): avc: denied { sqpoll } for pid=6643 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.879167][ T43] audit: type=1400 audit(1789963713.030:29537): avc: denied { mounton } for pid=6646 comm="syz.2.192" path="/73/file0" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 68.066311][ T6565] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 68.069173][ T1475] usb 5-1: USB disconnect, device number 4 [ 68.074502][ T1475] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 68.076339][ T1475] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 68.076726][ T1475] ti_usb_3410_5052 5-1:2.0: device disconnected [ 68.179538][ T43] audit: type=1400 audit(1789963713.330:29538): avc: denied { read write } for pid=6652 comm="syz.3.194" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.180294][ T6653] program syz.3.194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.523947][ T6665] netlink: 'syz.3.196': attribute type 19 has an invalid length. [ 68.523961][ T6665] __nla_validate_parse: 1 callbacks suppressed [ 68.523967][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 68.536408][ T6665] netlink: 'syz.3.196': attribute type 19 has an invalid length. [ 68.536420][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 68.547074][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.547357][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.547578][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.547637][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.584223][ T5729] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 68.606523][ T6674] fuse: Bad value for 'fd' [ 68.606858][ T6674] fuse: Bad value for 'fd' [ 68.608575][ T6674] overlayfs: failed to resolve '/ðz(&e—pˆ¥E—ïЙ|Ydzî»&¨—îÿ>Ç€ãâK# ËäøgÃñT_2"뎀&g8‘Cj¹G|›Xëv¡›‹&’°ÓV': -2 [ 68.642306][ T6679] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 68.805284][ T6687] i2c i2c-0: new_device: Instantiated device isp1301 at 0x02 [ 68.926139][ T6696] input: syz0 as /devices/virtual/input/input9 [ 68.989697][ T6705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6705 comm=syz.0.208 [ 68.990779][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.208'. [ 68.990801][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 68.991839][ T6705] veth1_macvtap: left promiscuous mode [ 68.991853][ T6705] macsec0: entered allmulticast mode [ 68.994052][ T6705] macsec0: left allmulticast mode [ 69.021981][ T6702] 9pnet_fd: p9_fd_create_tcp (6702): problem connecting socket to 127.0.0.1 [ 69.024747][ T6712] bridge0: port 3(veth1_to_bridge) entered blocking state [ 69.024831][ T6712] bridge0: port 3(veth1_to_bridge) entered disabled state [ 69.024980][ T6712] veth1_to_bridge: entered allmulticast mode [ 69.027592][ T6712] veth1_to_bridge: entered promiscuous mode [ 69.027688][ T6712] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 69.027977][ T6712] bridge0: port 3(veth1_to_bridge) entered blocking state [ 69.028022][ T6712] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 69.046079][ T9] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 69.055726][ T6716] xt_HMARK: spi-set and port-set can't be combined [ 69.159394][ T6725] netlink: 774 bytes leftover after parsing attributes in process `syz.3.211'. [ 69.164126][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 69.164785][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 69.186376][ T9] usb 6-1: device descriptor read/64, error -71 [ 69.456103][ T9] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 69.586247][ T9] usb 6-1: device descriptor read/64, error -71 [ 69.707096][ T9] usb usb6-port1: attempt power cycle [ 70.056112][ T9] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 70.086638][ T9] usb 6-1: device descriptor read/8, error -71 [ 70.166918][ T6758] can0: slcan on ptm0. [ 70.259572][ T6757] can0 (unregistered): slcan off ptm0. [ 70.285024][ T6764] vers=1.0 (cifs) not permitted when mounting with smb3 [ 70.285024][ T6764] [ 70.285151][ T6764] CIFS: VFS: vers=1.0 (cifs) not permitted when mounting with smb3 [ 70.346088][ T9] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 70.367451][ T9] usb 6-1: device descriptor read/8, error -71 [ 70.476860][ T9] usb usb6-port1: unable to enumerate USB device [ 71.036106][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.036124][ T35] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 71.036144][ T35] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 71.190335][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190384][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.198903][ T50] cfg80211: failed to load regulatory.db [ 71.234893][ T6775] net_ratelimit: 3256 callbacks suppressed [ 71.234905][ T6775] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.258789][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.260678][ T6364] bridge0: port 3(veth1_to_bridge) entered disabled state [ 71.427371][ T5734] Bluetooth: hci3: command 0x0405 tx timeout [ 72.628389][ T5729] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 72.628430][ T5729] Bluetooth: hci2: Injecting HCI hardware error event [ 72.629367][ T5729] Bluetooth: hci2: hardware error 0x00 [ 73.106114][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.108405][ T35] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 73.108427][ T35] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 74.716064][ T5729] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 76.786182][ T5729] Bluetooth: hci3: command 0x0405 tx timeout [ 76.786268][ T35] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 76.786288][ T35] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 76.976788][ T43] kauditd_printk_skb: 32 callbacks suppressed [ 76.976800][ T43] audit: type=1400 audit(1789963722.130:29571): avc: denied { ioctl } for pid=6791 comm="syz.3.224" path="uts:[4026532882]" dev="nsfs" ino=4026532882 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.981931][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 76.981986][ T6792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.986944][ T6792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.079883][ T6371] IPVS: starting estimator thread 0... [ 77.092293][ T6817] FAULT_INJECTION: forcing a failure. [ 77.092293][ T6817] name failslab, interval 1, probability 0, space 0, times 0 [ 77.092314][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.2.230 Not tainted syzkaller #0 PREEMPT(full) [ 77.092327][ T6817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.092334][ T6817] Call Trace: [ 77.092338][ T6817] [ 77.092343][ T6817] dump_stack_lvl+0x100/0x190 [ 77.092375][ T6817] should_fail_ex.cold+0x5/0xa [ 77.092392][ T6817] should_failslab+0xc2/0x120 [ 77.092411][ T6817] kmem_cache_alloc_noprof+0x92/0x6a0 [ 77.092422][ T6817] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 77.092441][ T6817] ? sp_alloc+0x27/0x160 [ 77.092459][ T6817] sp_alloc+0x27/0x160 [ 77.092475][ T6817] ? __pfx_shmem_set_policy+0x10/0x10 [ 77.092525][ T6817] mpol_set_shared_policy+0xa5/0x850 [ 77.092556][ T6817] ? __pfx_shmem_set_policy+0x10/0x10 [ 77.092573][ T6817] mbind_range+0x339/0x550 [ 77.092591][ T6817] do_mbind+0x7dc/0xfd0 [ 77.092611][ T6817] ? __pfx_do_mbind+0x10/0x10 [ 77.092630][ T6817] ? _copy_from_user+0x59/0xd0 [ 77.092646][ T6817] ? __pfx_get_nodes+0x10/0x10 [ 77.092678][ T6817] kernel_mbind+0x1b7/0x200 [ 77.092698][ T6817] ? __pfx_kernel_mbind+0x10/0x10 [ 77.092719][ T6817] do_syscall_64+0x123/0x790 [ 77.092743][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.092756][ T6817] RIP: 0033:0x7fd830b9e159 [ 77.092766][ T6817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.092778][ T6817] RSP: 002b:00007fd831af6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 77.092790][ T6817] RAX: ffffffffffffffda RBX: 00007fd830e25fa0 RCX: 00007fd830b9e159 [ 77.092797][ T6817] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 77.092805][ T6817] RBP: 00007fd830c3506b R08: 0000000000000006 R09: 0000000000000002 [ 77.092812][ T6817] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 77.092818][ T6817] R13: 00007fd830e26038 R14: 00007fd830e25fa0 R15: 00007ffe54e63c18 [ 77.092833][ T6817] [ 77.119950][ T43] audit: type=1400 audit(1789963722.270:29572): avc: denied { append } for pid=6818 comm="syz.3.231" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 77.167398][ T43] audit: type=1400 audit(1789963722.320:29573): avc: denied { name_bind } for pid=6822 comm="syz.2.232" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 77.179518][ T6814] IPVS: using max 43 ests per chain, 103200 per kthread [ 77.189708][ T6828] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 77.191603][ T6828] cramfs: wrong magic [ 77.192990][ T6828] netlink: 'syz.2.233': attribute type 1 has an invalid length. [ 77.198977][ T42] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.230959][ T6833] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 77.230969][ T6833] device-mapper: raid: Choosing default region size of 4MiB [ 77.264116][ T6828] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 77.264354][ T6828] cramfs: wrong magic [ 77.265324][ T6837] netlink: 'syz.2.233': attribute type 1 has an invalid length. [ 77.367592][ T42] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 77.369690][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.371682][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.371874][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.372824][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.372837][ T42] usb 5-1: Product: syz [ 77.372845][ T42] usb 5-1: Manufacturer: syz [ 77.372852][ T42] usb 5-1: SerialNumber: syz [ 77.376215][ T42] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected [ 77.376310][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 77.376939][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 77.376974][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82 [ 77.377113][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 77.377145][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 77.377176][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 83 [ 77.377276][ T42] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 3 [ 77.378252][ T42] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 77.456545][ T6833] device-mapper: table: 248:0: raid: Component device(s) too small (-EINVAL) [ 77.456561][ T6833] device-mapper: ioctl: error adding target to table [ 77.458440][ T43] audit: type=1400 audit(1789963722.610:29574): avc: denied { attach_queue } for pid=6855 comm="syz.3.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 77.490264][ T43] audit: type=1400 audit(1789963722.640:29575): avc: denied { setopt } for pid=6857 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 77.493915][ T43] audit: type=1400 audit(1789963722.640:29576): avc: denied { write } for pid=6857 comm="syz.1.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.535796][ T43] audit: type=1400 audit(1789963722.680:29577): avc: denied { load_policy } for pid=6860 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 77.536330][ T6861] SELinux: policydb magic number 0x72742f2e does not match expected magic number 0xf97cff8c [ 77.536505][ T6861] SELinux: failed to load policy [ 77.536543][ T43] audit: type=1400 audit(1789963722.690:29578): avc: denied { append } for pid=6860 comm="syz.1.244" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.537012][ T43] audit: type=1400 audit(1789963722.690:29579): avc: denied { ioctl } for pid=6860 comm="syz.1.244" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x5385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.567859][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 77.567874][ T6865] netlink: 35 bytes leftover after parsing attributes in process `syz.1.245'. [ 77.568038][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 77.568047][ T6866] netlink: 35 bytes leftover after parsing attributes in process `syz.1.245'. [ 77.593372][ T43] audit: type=1400 audit(1789963722.740:29580): avc: denied { mount } for pid=6867 comm="syz.3.246" name="/" dev="configfs" ino=1056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 77.615365][ T6870] can0: slcan on ttynull. [ 77.632308][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 77.754041][ T6888] kAFS: No cell specified [ 77.790525][ T9] usb 5-1: USB disconnect, device number 5 [ 77.794686][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 77.794932][ T9] keyspan 5-1:1.0: device disconnected [ 78.507303][ T6869] can0 (unregistered): slcan off ttynull. [ 78.548903][ T6914] FAULT_INJECTION: forcing a failure. [ 78.548903][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 78.548924][ T6914] CPU: 3 UID: 0 PID: 6914 Comm: syz.1.254 Not tainted syzkaller #0 PREEMPT(full) [ 78.548936][ T6914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.548943][ T6914] Call Trace: [ 78.548947][ T6914] [ 78.548952][ T6914] dump_stack_lvl+0x100/0x190 [ 78.548983][ T6914] should_fail_ex.cold+0x5/0xa [ 78.549001][ T6914] should_failslab+0xc2/0x120 [ 78.549043][ T6914] __kmalloc_noprof+0xfc/0x840 [ 78.549058][ T6914] ? unix_create_addr+0x24/0x100 [ 78.549076][ T6914] unix_create_addr+0x24/0x100 [ 78.549089][ T6914] unix_bind+0x287/0x1650 [ 78.549106][ T6914] ? __pfx_unix_bind+0x10/0x10 [ 78.549123][ T6914] __sys_bind+0x1a9/0x260 [ 78.549136][ T6914] ? __pfx___sys_bind+0x10/0x10 [ 78.549158][ T6914] __x64_sys_bind+0x72/0xb0 [ 78.549169][ T6914] ? lockdep_hardirqs_on+0x7d/0x110 [ 78.549189][ T6914] do_syscall_64+0x123/0x790 [ 78.549208][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.549220][ T6914] RIP: 0033:0x7fd72ef9e159 [ 78.549231][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.549241][ T6914] RSP: 002b:00007fd72ff44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 78.549253][ T6914] RAX: ffffffffffffffda RBX: 00007fd72f225fa0 RCX: 00007fd72ef9e159 [ 78.549261][ T6914] RDX: 0000000000000030 RSI: 00002000000001c0 RDI: 0000000000000003 [ 78.549268][ T6914] RBP: 00007fd72f03506b R08: 0000000000000000 R09: 0000000000000000 [ 78.549275][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.549282][ T6914] R13: 00007fd72f226038 R14: 00007fd72f225fa0 R15: 00007fff951d8548 [ 78.549297][ T6914] [ 78.713110][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 78.713462][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 78.713697][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 78.713929][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 78.845096][ T6944] pimreg: tun_chr_ioctl cmd 1074025672 [ 78.845110][ T6944] pimreg: ignored: set checksum enabled [ 79.065918][ T6956] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 79.066183][ T6956] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 79.761709][ T6980] overlayfs: failed to resolve './file0/file0': -2 [ 80.102033][ T6998] sctp: [Deprecated]: syz.2.275 (pid 6998) Use of int in max_burst socket option. [ 80.102033][ T6998] Use struct sctp_assoc_value instead [ 80.102917][ T6996] team0: entered allmulticast mode [ 80.102930][ T6996] team_slave_0: entered allmulticast mode [ 80.102939][ T6996] team_slave_1: entered allmulticast mode [ 80.112197][ T6996] team0 (unregistering): left allmulticast mode [ 80.112210][ T6996] team_slave_0: left allmulticast mode [ 80.112219][ T6996] team_slave_1: left allmulticast mode [ 80.119629][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 80.122859][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 80.146087][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.146295][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.056124][ T73] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.128100][ T7011] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 81.135238][ T7011] syzkaller0: entered promiscuous mode [ 81.135257][ T7011] syzkaller0: entered allmulticast mode [ 81.137945][ T7011] tipc: Started in network mode [ 81.137967][ T7011] tipc: Node identity d6c5b0b0736, cluster identity 4711 [ 81.140501][ T7011] tipc: Enabled bearer , priority 0 [ 81.143392][ T7011] tipc: Resetting bearer [ 81.206069][ T73] usb 5-1: Using ep0 maxpacket: 16 [ 81.206559][ T73] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 81.206588][ T73] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 81.207639][ T73] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.208416][ T73] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.209126][ T73] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.209833][ T73] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.210578][ T73] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.211296][ T73] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.212003][ T73] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.212812][ T73] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.213872][ T73] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 81.213884][ T73] usb 5-1: SerialNumber: syz [ 81.218042][ T73] usb 5-1: config 0 descriptor?? [ 81.225113][ T7010] tipc: Resetting bearer [ 81.228289][ T73] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11 [ 81.243759][ T7010] tipc: Disabling bearer [ 81.428383][ T7009] input: syz0 as /devices/virtual/input/input12 [ 81.500131][ T5126] bcm5974 5-1:0.0: could not read from device [ 81.507439][ T5126] bcm5974 5-1:0.0: could not read from device [ 81.515779][ T5126] bcm5974 5-1:0.0: could not read from device [ 81.519351][ T73] usb 5-1: USB disconnect, device number 6 [ 81.519549][ T5126] bcm5974 5-1:0.0: could not read from device [ 81.614336][ T7025] input: syz1 as /devices/virtual/input/input13 [ 81.619016][ T7027] FAULT_INJECTION: forcing a failure. [ 81.619016][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 81.619035][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.1.285 Not tainted syzkaller #0 PREEMPT(full) [ 81.619047][ T7027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.619054][ T7027] Call Trace: [ 81.619059][ T7027] [ 81.619063][ T7027] dump_stack_lvl+0x100/0x190 [ 81.619096][ T7027] should_fail_ex.cold+0x5/0xa [ 81.619113][ T7027] should_failslab+0xc2/0x120 [ 81.619131][ T7027] kmem_cache_alloc_noprof+0x92/0x6a0 [ 81.619144][ T7027] ? d_instantiate+0x8a/0xb0 [ 81.619160][ T7027] ? alloc_empty_file+0x5b/0x1c0 [ 81.619178][ T7027] alloc_empty_file+0x5b/0x1c0 [ 81.619194][ T7027] alloc_file_pseudo+0x183/0x290 [ 81.619211][ T7027] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 81.619229][ T7027] ? pidfs_register_pid_gfp+0x72/0x1f0 [ 81.619247][ T7027] sock_alloc_file+0x50/0x210 [ 81.619267][ T7027] __sys_socketpair+0x321/0x5b0 [ 81.619278][ T7027] ? __pfx___sys_socketpair+0x10/0x10 [ 81.619290][ T7027] ? xfd_validate_state+0x129/0x190 [ 81.619306][ T7027] __x64_sys_socketpair+0x96/0x100 [ 81.619317][ T7027] ? lockdep_hardirqs_on+0x7d/0x110 [ 81.619337][ T7027] do_syscall_64+0x123/0x790 [ 81.619354][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.619366][ T7027] RIP: 0033:0x7fd72ef9e159 [ 81.619393][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.619405][ T7027] RSP: 002b:00007fd72ff44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 81.619418][ T7027] RAX: ffffffffffffffda RBX: 00007fd72f225fa0 RCX: 00007fd72ef9e159 [ 81.619425][ T7027] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 81.619432][ T7027] RBP: 00007fd72f03506b R08: 0000000000000000 R09: 0000000000000000 [ 81.619439][ T7027] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 81.619446][ T7027] R13: 00007fd72f226038 R14: 00007fd72f225fa0 R15: 00007fff951d8548 [ 81.619462][ T7027] [ 81.829437][ T7043] futex_wake_op: syz.2.289 tries to shift op by -1; fix this program [ 82.045034][ T43] kauditd_printk_skb: 40 callbacks suppressed [ 82.045050][ T43] audit: type=1400 audit(1789963727.190:29621): avc: denied { ioctl } for pid=7056 comm="syz.0.293" path="socket:[15967]" dev="sockfs" ino=15967 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.141911][ T7072] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 82.291856][ T7078] ip6t_hbh: Not strict - not implemented [ 82.327070][ T43] audit: type=1400 audit(1789963727.480:29622): avc: denied { read write } for pid=7079 comm="syz.1.298" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.327269][ T43] audit: type=1400 audit(1789963727.480:29623): avc: denied { open } for pid=7079 comm="syz.1.298" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.327561][ T43] audit: type=1400 audit(1789963727.480:29624): avc: denied { ioctl } for pid=7079 comm="syz.1.298" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.626061][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 82.766080][ T9] usb 6-1: device descriptor read/64, error -71 [ 82.771992][ T7092] Could not find key with description: [syz] [ 82.772001][ T7092] process_request_key_err: No key [ 82.772006][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.772011][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.772030][ T7092] Error validating options; rc = [-2] [ 82.772317][ T7092] Could not find key with description: [syz] [ 82.772325][ T7092] process_request_key_err: No key [ 82.772330][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.772335][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.772350][ T7092] Error validating options; rc = [-2] [ 82.772556][ T7092] Could not find key with description: [syz] [ 82.772561][ T7092] process_request_key_err: No key [ 82.772565][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.772570][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.772583][ T7092] Error validating options; rc = [-2] [ 82.772760][ T7092] Could not find key with description: [syz] [ 82.772765][ T7092] process_request_key_err: No key [ 82.772769][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.772774][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.772787][ T7092] Error validating options; rc = [-2] [ 82.772959][ T7092] Could not find key with description: [syz] [ 82.772964][ T7092] process_request_key_err: No key [ 82.772968][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.772973][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.772985][ T7092] Error validating options; rc = [-2] [ 82.773160][ T7092] Could not find key with description: [syz] [ 82.773165][ T7092] process_request_key_err: No key [ 82.773170][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.773174][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.773187][ T7092] Error validating options; rc = [-2] [ 82.773429][ T7092] Could not find key with description: [syz] [ 82.773434][ T7092] process_request_key_err: No key [ 82.773438][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.773443][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.773456][ T7092] Error validating options; rc = [-2] [ 82.773630][ T7092] Could not find key with description: [syz] [ 82.773635][ T7092] process_request_key_err: No key [ 82.773639][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.773644][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.773656][ T7092] Error validating options; rc = [-2] [ 82.773825][ T7092] Could not find key with description: [syz] [ 82.773830][ T7092] process_request_key_err: No key [ 82.773834][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.773838][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.773851][ T7092] Error validating options; rc = [-2] [ 82.774024][ T7092] Could not find key with description: [syz] [ 82.774029][ T7092] process_request_key_err: No key [ 82.774032][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.774037][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.774055][ T7092] Error validating options; rc = [-2] [ 82.774224][ T7092] Could not find key with description: [syz] [ 82.774229][ T7092] process_request_key_err: No key [ 82.774233][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.774238][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.774251][ T7092] Error validating options; rc = [-2] [ 82.774424][ T7092] Could not find key with description: [syz] [ 82.774429][ T7092] process_request_key_err: No key [ 82.774502][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.774508][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.774522][ T7092] Error validating options; rc = [-2] [ 82.774762][ T7092] Could not find key with description: [syz] [ 82.774768][ T7092] process_request_key_err: No key [ 82.774795][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.774801][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.774815][ T7092] Error validating options; rc = [-2] [ 82.775115][ T7092] Could not find key with description: [syz] [ 82.775120][ T7092] process_request_key_err: No key [ 82.775124][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.775130][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.775157][ T7092] Error validating options; rc = [-2] [ 82.775422][ T7092] Could not find key with description: [syz] [ 82.775427][ T7092] process_request_key_err: No key [ 82.775431][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.775459][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.775475][ T7092] Error validating options; rc = [-2] [ 82.775832][ T7092] Could not find key with description: [syz] [ 82.775837][ T7092] process_request_key_err: No key [ 82.775841][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.775846][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.775874][ T7092] Error validating options; rc = [-2] [ 82.778774][ T7092] Could not find key with description: [syz] [ 82.778783][ T7092] process_request_key_err: No key [ 82.778790][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.778798][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.778816][ T7092] Error validating options; rc = [-2] [ 82.779106][ T7092] Could not find key with description: [syz] [ 82.779114][ T7092] process_request_key_err: No key [ 82.779120][ T7092] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 82.779127][ T7092] One or more global auth toks could not properly register; rc = [-2] [ 82.779148][ T7092] Error validating options; rc = [-2] [ 83.046180][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 83.130925][ T43] audit: type=1400 audit(1789963728.280:29625): avc: denied { ioctl } for pid=7106 comm="syz.0.302" path="socket:[18917]" dev="sockfs" ino=18917 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.196135][ T9] usb 6-1: device descriptor read/64, error -71 [ 83.318197][ T9] usb usb6-port1: attempt power cycle [ 83.477642][ T73] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 83.628433][ T7147] netlink: NAT attribute has 5 unknown bytes [ 83.628469][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.666112][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 83.686467][ T9] usb 6-1: device descriptor read/8, error -71 [ 83.687638][ T7155] input: syz0 as /devices/virtual/input/input14 [ 83.748820][ T73] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 83.761405][ T7157] RDS: rds_bind could not find a transport for ::ffff:172.20.20.65, load rds_tcp or rds_rdma? [ 83.839725][ T43] audit: type=1400 audit(1789963728.990:29626): avc: denied { write } for pid=7159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.882927][ T43] audit: type=1400 audit(1789963729.030:29627): avc: denied { write } for pid=7164 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.923003][ T7167] __nla_validate_parse: 30 callbacks suppressed [ 83.923058][ T7167] netlink: 144 bytes leftover after parsing attributes in process `syz.2.311'. [ 83.948114][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 83.958791][ T43] audit: type=1400 audit(1789963729.110:29628): avc: denied { write } for pid=7169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.969311][ T9] usb 6-1: device descriptor read/8, error -71 [ 83.999318][ T43] audit: type=1400 audit(1789963729.150:29629): avc: denied { write } for pid=7172 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.076495][ T9] usb usb6-port1: unable to enumerate USB device [ 84.164608][ T7175] block nbd2: shutting down sockets [ 84.197273][ T7175] kvm: MWAIT instruction emulated as NOP! [ 84.258504][ T73] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 84.298336][ T7141] ceph: No mds server is up or the cluster is laggy [ 84.323182][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.323452][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.324932][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.325116][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.607657][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.315'. [ 84.609103][ T7183] tmpfs: Unknown parameter 'euid>00000000000000000000' [ 84.758291][ T43] audit: type=1400 audit(1789963729.910:29630): avc: denied { map } for pid=7186 comm="syz.0.316" path="socket:[15993]" dev="sockfs" ino=15993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.759996][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 85.551202][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 85.551205][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 85.562899][ T7199] kvm [7198]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 85.563290][ T7199] kvm [7198]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 85.609450][ T7206] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 85.610609][ T7206] bond2 (unregistering): Released all slaves [ 85.778494][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 85.779202][ T7238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'. [ 85.779533][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 85.805922][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.328'. [ 85.938701][ T7258] SET target dimension over the limit! [ 86.032971][ T7264] netlink: 84 bytes leftover after parsing attributes in process `syz.2.335'. [ 86.033151][ T7264] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 86.293826][ T7270] kvm [7269]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x971b [ 86.315252][ T7270] kvm [7269]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x81be [ 86.575337][ T7276] team0: entered allmulticast mode [ 86.575354][ T7276] team_slave_0: entered allmulticast mode [ 86.575369][ T7276] team_slave_1: entered allmulticast mode [ 86.575908][ T7276] team0: Cannot enslave team device to itself [ 86.854122][ T7287] PM: Enabling pm_trace changes system date and time during resume. [ 86.854122][ T7287] PM: Correct system time has to be restored manually after resume. [ 87.312088][ T7292] FAULT_INJECTION: forcing a failure. [ 87.312088][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 87.312110][ T7292] CPU: 0 UID: 0 PID: 7292 Comm: syz.2.343 Not tainted syzkaller #0 PREEMPT(full) [ 87.312124][ T7292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.312130][ T7292] Call Trace: [ 87.312135][ T7292] [ 87.312139][ T7292] dump_stack_lvl+0x100/0x190 [ 87.312169][ T7292] should_fail_ex.cold+0x5/0xa [ 87.312187][ T7292] should_failslab+0xc2/0x120 [ 87.312205][ T7292] kmem_cache_alloc_noprof+0x92/0x6a0 [ 87.312218][ T7292] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 87.312236][ T7292] ? sp_alloc+0x27/0x160 [ 87.312254][ T7292] sp_alloc+0x27/0x160 [ 87.312270][ T7292] ? __pfx_shmem_set_policy+0x10/0x10 [ 87.312282][ T7292] mpol_set_shared_policy+0xa5/0x850 [ 87.312302][ T7292] ? __pfx_shmem_set_policy+0x10/0x10 [ 87.312314][ T7292] mbind_range+0x339/0x550 [ 87.312332][ T7292] do_mbind+0x7dc/0xfd0 [ 87.312353][ T7292] ? __pfx_do_mbind+0x10/0x10 [ 87.312372][ T7292] ? _copy_from_user+0x59/0xd0 [ 87.312388][ T7292] ? __pfx_get_nodes+0x10/0x10 [ 87.312406][ T7292] kernel_mbind+0x1b7/0x200 [ 87.312424][ T7292] ? __pfx_kernel_mbind+0x10/0x10 [ 87.312470][ T7292] do_syscall_64+0x123/0x790 [ 87.312493][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.312508][ T7292] RIP: 0033:0x7fd830b9e159 [ 87.312518][ T7292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.312529][ T7292] RSP: 002b:00007fd831af6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 87.312541][ T7292] RAX: ffffffffffffffda RBX: 00007fd830e25fa0 RCX: 00007fd830b9e159 [ 87.312548][ T7292] RDX: 0000000000004003 RSI: 0000000000004000 RDI: 0000200000000000 [ 87.312555][ T7292] RBP: 00007fd830c3506b R08: 0000000000000006 R09: 0000000000000002 [ 87.312561][ T7292] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 87.312568][ T7292] R13: 00007fd830e26038 R14: 00007fd830e25fa0 R15: 00007ffe54e63c18 [ 87.312582][ T7292] [ 87.447300][ T7296] WARNING! power/level is deprecated; use power/control instead [ 88.209814][ T7295] Bluetooth: hci2: Opcode 0x0c20 failed: -4 [ 88.291331][ T7299] syz_tun: entered allmulticast mode [ 88.298100][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 88.298111][ T43] audit: type=1400 audit(1789963733.450:29639): avc: denied { mount } for pid=7297 comm="syz.2.345" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 88.299322][ T43] audit: type=1400 audit(1789963733.450:29640): avc: denied { search } for pid=7297 comm="syz.2.345" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 88.299940][ T43] audit: type=1400 audit(1789963733.450:29641): avc: denied { read } for pid=7297 comm="syz.2.345" name="exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 88.299977][ T43] audit: type=1400 audit(1789963733.450:29642): avc: denied { open } for pid=7297 comm="syz.2.345" path="/127/nfsd/exports" dev="nfsd" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 88.301220][ T7299] ip6t_srh: unknown srh invflags 7863 [ 89.073434][ T7297] syz_tun: left allmulticast mode [ 89.084381][ T43] audit: type=1400 audit(1789963734.230:29643): avc: denied { unmount } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 89.690377][ T7306] Bluetooth: MGMT ver 1.23 [ 89.742935][ T43] audit: type=1400 audit(1789963734.890:29644): avc: denied { accept } for pid=7312 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 89.747938][ T43] audit: type=1400 audit(1789963734.900:29645): avc: denied { listen } for pid=7312 comm="syz.2.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 89.814716][ T43] audit: type=1400 audit(1789963734.960:29646): avc: denied { ioctl } for pid=7316 comm="syz.0.351" path="socket:[21197]" dev="sockfs" ino=21197 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.833979][ T7317] qnx4: no qnx4 filesystem (no root dir). [ 89.895487][ T7326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=7326 comm=syz.2.354 [ 89.958060][ T5732] overlayfs: failed lookup in lower (newroot/133, name='bus', err=-40): overlapping layers [ 89.958147][ T5732] overlayfs: failed lookup in lower (newroot/133, name='bus', err=-40): overlapping layers [ 90.061823][ T7333] syzkaller0: entered promiscuous mode [ 90.061836][ T7333] syzkaller0: entered allmulticast mode [ 90.062972][ T7333] netlink: 220 bytes leftover after parsing attributes in process `syz.0.356'. [ 90.063027][ T7333] tc_dump_action: action bad kind [ 90.204508][ T43] audit: type=1400 audit(1789963735.350:29647): avc: denied { setattr } for pid=7335 comm="syz.0.357" name="radio1" dev="devtmpfs" ino=978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.257031][ T43] audit: type=1400 audit(1789963735.410:29648): avc: denied { watch_reads } for pid=7340 comm="syz.0.358" path="/89" dev="tmpfs" ino=504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.318235][ T1475] usb 7-1: USB disconnect, device number 4 [ 90.395506][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.540699][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 90.540714][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 90.555331][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.558303][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.561359][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.562713][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.565186][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.565676][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.581430][ T5729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.581681][ T5729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.581952][ T5729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.582577][ T5729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.582980][ T5729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.697476][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.758926][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.946364][ T1347] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.998149][ T12] bridge_slave_1: left allmulticast mode [ 90.998185][ T12] bridge_slave_1: left promiscuous mode [ 90.999127][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.010351][ T12] bridge_slave_0: left allmulticast mode [ 91.010372][ T12] bridge_slave_0: left promiscuous mode [ 91.010512][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.097145][ T1347] usb 5-1: Using ep0 maxpacket: 16 [ 91.101757][ T1347] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 91.105693][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.105709][ T1347] usb 5-1: Product: syz [ 91.105717][ T1347] usb 5-1: Manufacturer: syz [ 91.105726][ T1347] usb 5-1: SerialNumber: syz [ 91.152179][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.154679][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.155861][ T12] bond0 (unregistering): Released all slaves [ 91.166526][ T12] bond1 (unregistering): Released all slaves [ 91.252084][ T7351] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.252128][ T7351] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.252179][ T7351] bridge_slave_0: entered allmulticast mode [ 91.257639][ T7351] bridge_slave_0: entered promiscuous mode [ 91.269369][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.269443][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.269520][ T7351] bridge_slave_1: entered allmulticast mode [ 91.270272][ T7351] bridge_slave_1: entered promiscuous mode [ 91.318025][ T1347] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 91.330202][ T1347] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 91.330539][ T1347] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 91.330564][ T1347] usb 5-1: media controller created [ 91.340335][ T1347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.360645][ T7351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.363312][ T7351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.387699][ T7351] team0: Port device team_slave_0 added [ 91.393367][ T7351] team0: Port device team_slave_1 added [ 91.394375][ T5444] 8021q: adding VLAN 0 to HW filter on device eth2 [ 91.427465][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.427477][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.427490][ T7351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.428708][ T7351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.428717][ T7351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.428730][ T7351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.487409][ T7351] hsr_slave_0: entered promiscuous mode [ 91.488095][ T7351] hsr_slave_1: entered promiscuous mode [ 91.489009][ T7351] debugfs: 'hsr0' already exists in 'hsr' [ 91.489020][ T7351] Cannot create hsr debugfs directory [ 91.558541][ T1347] zl10353_read_register: readreg error (reg=127, ret==-110) [ 91.631473][ T1347] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 91.635873][ T1347] usb 5-1: USB disconnect, device number 7 [ 91.676889][ T5444] 8021q: adding VLAN 0 to HW filter on device eth3 [ 91.766900][ T12] hsr_slave_0: left promiscuous mode [ 91.767624][ T12] hsr_slave_1: left promiscuous mode [ 91.768315][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.768342][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.769200][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.769214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.793892][ T12] veth1_macvtap: left promiscuous mode [ 91.793944][ T12] veth0_macvtap: left promiscuous mode [ 91.794031][ T12] veth1_vlan: left promiscuous mode [ 91.794128][ T12] veth0_vlan: left promiscuous mode [ 91.999806][ T12] team_slave_1 (unregistering): left allmulticast mode [ 92.000427][ T12] team0 (unregistering): Port device team_slave_1 removed [ 92.010440][ T12] team_slave_0 (unregistering): left allmulticast mode [ 92.012365][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.093327][ T5444] 8021q: adding VLAN 0 to HW filter on device eth4 [ 92.194858][ T7351] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.210234][ T7351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.215318][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.223680][ T7394] bridge_slave_0: left allmulticast mode [ 92.223696][ T7394] bridge_slave_0: left promiscuous mode [ 92.223783][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.234516][ T7394] veth1_to_bridge: left allmulticast mode [ 92.234538][ T7394] veth1_to_bridge: left promiscuous mode [ 92.234680][ T7394] bridge0: port 3(veth1_to_bridge) entered disabled state [ 92.243127][ T7394] bridge_slave_1: left allmulticast mode [ 92.243147][ T7394] bridge_slave_1: left promiscuous mode [ 92.243233][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.258974][ T7394] bond0: (slave bond_slave_0): Releasing backup interface [ 92.264680][ T7394] bond0: (slave bond_slave_1): Releasing backup interface [ 92.283266][ T7394] team0: Port device team_slave_0 removed [ 92.290843][ T7394] team0: Port device team_slave_1 removed [ 92.291241][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.291252][ T7394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.294351][ T7394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.294361][ T7394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.298182][ T7394] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.301232][ T7351] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.317387][ T7351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.322286][ T7351] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.341400][ T7351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.341784][ T7351] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.356427][ T7351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.409238][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 92.438636][ T7351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.448679][ T7351] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.453816][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.453861][ T6376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.461639][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.461684][ T6376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.626162][ T5734] Bluetooth: hci1: command tx timeout [ 92.741243][ T7351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.746533][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 92.898998][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 92.901388][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.919915][ T7351] veth0_vlan: entered promiscuous mode [ 92.928457][ T7351] veth1_vlan: entered promiscuous mode [ 92.949886][ T7351] veth0_macvtap: entered promiscuous mode [ 92.954898][ T7351] veth1_macvtap: entered promiscuous mode [ 92.966206][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.973720][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.001378][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.001406][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.001423][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.001440][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.053344][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.053357][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.078372][ T6371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.078393][ T6371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.116182][ T10] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 93.220066][ T5729] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.221820][ T5729] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.222841][ T5729] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.224230][ T5729] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.224810][ T5729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.393240][ T73] usb 5-1: USB disconnect, device number 8 [ 93.411169][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 93.411181][ T43] audit: type=1400 audit(1789963738.560:29665): avc: denied { create } for pid=7452 comm="syz.4.368" name="#11" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.411628][ T43] audit: type=1400 audit(1789963738.560:29666): avc: denied { link } for pid=7452 comm="syz.4.368" name="#11" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.412828][ T43] audit: type=1400 audit(1789963738.560:29667): avc: denied { rename } for pid=7452 comm="syz.4.368" name="#12" dev="tmpfs" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 93.428857][ T7454] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 93.533927][ T5805] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.533950][ T5805] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.607480][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.609175][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.609340][ T7440] bridge_slave_0: entered allmulticast mode [ 93.610576][ T7440] bridge_slave_0: entered promiscuous mode [ 93.612976][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.613017][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.613073][ T7440] bridge_slave_1: entered allmulticast mode [ 93.615380][ T7440] bridge_slave_1: entered promiscuous mode [ 93.642021][ T5805] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.642053][ T5805] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.663147][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.665118][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.677265][ T7440] team0: Port device team_slave_0 added [ 93.679042][ T7440] team0: Port device team_slave_1 added [ 93.693311][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.693321][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.693334][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.694109][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.694116][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.694129][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.734439][ T5805] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.734461][ T5805] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.744063][ T7440] hsr_slave_0: entered promiscuous mode [ 93.744539][ T7440] hsr_slave_1: entered promiscuous mode [ 93.745309][ T7440] debugfs: 'hsr0' already exists in 'hsr' [ 93.745321][ T7440] Cannot create hsr debugfs directory [ 93.818370][ T5805] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.818392][ T5805] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.897666][ T7440] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 93.901684][ T7440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.902537][ T7440] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 93.905161][ T7440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.906613][ T7440] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 93.915646][ T7440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.917882][ T7440] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 93.923244][ T7440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.959083][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.959129][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.959229][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.959272][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.003460][ T5805] bridge_slave_1: left allmulticast mode [ 94.003475][ T5805] bridge_slave_1: left promiscuous mode [ 94.003577][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.005413][ T5805] bridge_slave_0: left allmulticast mode [ 94.005426][ T5805] bridge_slave_0: left promiscuous mode [ 94.005518][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.124665][ T5805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.131790][ T5805] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 94.133225][ T5805] bond0 (unregistering): Released all slaves [ 94.143086][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.143755][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.170483][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.176867][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.179360][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.179404][ T6371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.181929][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.181972][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.249587][ T43] audit: type=1400 audit(1789963739.400:29668): avc: denied { write } for pid=7474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.291922][ T43] audit: type=1400 audit(1789963739.440:29669): avc: denied { write } for pid=7478 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.322097][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 94.435721][ T43] audit: type=1400 audit(1789963739.580:29670): avc: denied { write } for pid=7488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.446252][ T5805] hsr_slave_0: left promiscuous mode [ 94.454236][ T5805] hsr_slave_1: left promiscuous mode [ 94.454615][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.454626][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.465208][ T5805] veth1_macvtap: left promiscuous mode [ 94.465230][ T5805] veth0_macvtap: left promiscuous mode [ 94.465276][ T5805] veth1_vlan: left promiscuous mode [ 94.465313][ T5805] veth0_vlan: left promiscuous mode [ 94.484429][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x35fd instead [ 94.484446][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x929f instead [ 94.484456][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x19a2 instead [ 94.484464][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x6049 instead [ 94.484473][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x0ae4 instead [ 94.484481][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x7400 instead [ 94.484490][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x171c instead [ 94.484499][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x57c4 instead [ 94.484507][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0x6885 instead [ 94.484515][ T7494] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1a96 instead [ 94.484524][ T7494] jffs2: Further such events for this erase block will not be printed [ 94.484572][ T7494] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 94.484576][ T7494] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 94.514573][ T43] audit: type=1400 audit(1789963739.660:29671): avc: denied { write } for pid=7495 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.552248][ T7494] nvme_fabrics: missing parameter 'transport=%s' [ 94.552260][ T7494] nvme_fabrics: missing parameter 'nqn=%s' [ 94.685076][ T5805] team0 (unregistering): Port device team_slave_1 removed [ 94.692293][ T5805] team0 (unregistering): Port device team_slave_0 removed [ 94.707288][ T5734] Bluetooth: hci1: command tx timeout [ 94.757773][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 94.801565][ T7514] hpfs: Bad magic ... probably not HPFS [ 94.819631][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.828551][ T7515] tmpfs: Unknown parameter 'usrquota€' [ 94.875837][ T43] audit: type=1400 audit(1789963740.020:29672): avc: denied { write } for pid=7519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.906093][ T73] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 94.933333][ T43] audit: type=1400 audit(1789963740.080:29673): avc: denied { write } for pid=7528 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.970141][ T7536] binder: 7535:7536 ioctl 40084d06 200000000000 returned -22 [ 94.975721][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 95.011693][ T7440] veth0_vlan: entered promiscuous mode [ 95.015466][ T7440] veth1_vlan: entered promiscuous mode [ 95.030136][ T5805] IPVS: stop unused estimator thread 0... [ 95.040845][ T7440] veth0_macvtap: entered promiscuous mode [ 95.043559][ T7440] veth1_macvtap: entered promiscuous mode [ 95.047844][ T43] audit: type=1400 audit(1789963740.200:29674): avc: denied { write } for pid=7541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.049555][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.051758][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.062244][ T73] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 95.063172][ T73] usb 5-1: config 2 has an invalid descriptor of length 115, skipping remainder of the config [ 95.063197][ T73] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 95.063983][ T73] usb 5-1: config 2 has an invalid descriptor of length 115, skipping remainder of the config [ 95.064007][ T73] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 95.086978][ T73] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.086994][ T73] usb 5-1: Product: syz [ 95.087036][ T73] usb 5-1: Manufacturer: syz [ 95.087046][ T73] usb 5-1: SerialNumber: syz [ 95.097027][ T7508] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.098089][ T73] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 95.105304][ T73] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 95.115632][ T73] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 95.130863][ T6371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.131876][ T6371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.157605][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 95.166106][ T6364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.166125][ T6364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.176159][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.176185][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.176203][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.176220][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.242696][ T7550] netlink: 72 bytes leftover after parsing attributes in process `syz.5.366'. [ 95.249563][ T5734] Bluetooth: hci4: connection err: -111 [ 95.259429][ T6371] IPVS: starting estimator thread 0... [ 95.276126][ T5734] Bluetooth: hci4: command tx timeout [ 95.278684][ T5346] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 95.299427][ T7500] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 95.349361][ T7556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7556 comm=syz.5.377 [ 95.349378][ T7556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2562 sclass=netlink_tcpdiag_socket pid=7556 comm=syz.5.377 [ 95.349389][ T7556] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2055 sclass=netlink_tcpdiag_socket pid=7556 comm=syz.5.377 [ 95.367752][ T7551] IPVS: using max 43 ests per chain, 103200 per kthread [ 95.427237][ T5346] usb 9-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 95.428174][ T5346] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.428195][ T5346] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 95.430512][ T5346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.430532][ T5346] usb 9-1: Product: syz [ 95.430544][ T5346] usb 9-1: Manufacturer: syz [ 95.430556][ T5346] usb 9-1: SerialNumber: syz [ 95.532296][ T7559] FAULT_INJECTION: forcing a failure. [ 95.532296][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 95.532329][ T7559] CPU: 3 UID: 0 PID: 7559 Comm: syz.5.378 Not tainted syzkaller #0 PREEMPT(full) [ 95.532353][ T7559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.532365][ T7559] Call Trace: [ 95.532387][ T7559] [ 95.532417][ T7559] dump_stack_lvl+0x100/0x190 [ 95.532459][ T7559] should_fail_ex.cold+0x5/0xa [ 95.532485][ T7559] should_failslab+0xc2/0x120 [ 95.532511][ T7559] kmem_cache_alloc_noprof+0x92/0x6a0 [ 95.532534][ T7559] ? security_file_alloc+0x34/0x2c0 [ 95.532563][ T7559] security_file_alloc+0x34/0x2c0 [ 95.532586][ T7559] init_file+0x95/0x480 [ 95.532613][ T7559] alloc_empty_file+0x79/0x1c0 [ 95.532641][ T7559] path_openat+0xdb/0x2440 [ 95.532670][ T7559] ? __pfx_path_openat+0x10/0x10 [ 95.532719][ T7559] do_file_open+0x20e/0x430 [ 95.532746][ T7559] ? __pfx_do_file_open+0x10/0x10 [ 95.532786][ T7559] ? _raw_spin_unlock+0x28/0x50 [ 95.532809][ T7559] ? alloc_fd+0x471/0x7a0 [ 95.532828][ T7559] do_sys_openat2+0x10f/0x1e0 [ 95.532846][ T7559] ? __pfx_do_sys_openat2+0x10/0x10 [ 95.532863][ T7559] ? __fget_files+0x21f/0x3d0 [ 95.532882][ T7559] __x64_sys_openat+0x12d/0x210 [ 95.532899][ T7559] ? __pfx___x64_sys_openat+0x10/0x10 [ 95.532922][ T7559] do_syscall_64+0x123/0x790 [ 95.532940][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.532952][ T7559] RIP: 0033:0x7f322279e159 [ 95.532968][ T7559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.532980][ T7559] RSP: 002b:00007f3223666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 95.532993][ T7559] RAX: ffffffffffffffda RBX: 00007f3222a25fa0 RCX: 00007f322279e159 [ 95.533001][ T7559] RDX: 0000000000000002 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 95.533009][ T7559] RBP: 00007f322283506b R08: 0000000000000000 R09: 0000000000000000 [ 95.533016][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.533023][ T7559] R13: 00007f3222a26038 R14: 00007f3222a25fa0 R15: 00007ffcced8ddf8 [ 95.533041][ T7559] [ 95.645425][ T5346] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 96.127486][ T73] usb 9-1: USB disconnect, device number 2 [ 96.138635][ T73] usblp0: removed [ 96.796238][ T5734] Bluetooth: hci1: command tx timeout [ 96.830506][ T7614] xt_IDLETIMER: label is empty or not nul-terminated [ 96.921741][ T7618] team0: No ports can be present during mode change [ 97.212950][ T7628] netlink: 'syz.5.388': attribute type 1 has an invalid length. [ 97.227763][ T7628] netlink: 'syz.5.388': attribute type 1 has an invalid length. [ 97.307004][ T7638] program syz.5.390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.307041][ T7638] ata1.00: non-matching transfer count (1768126720/0) [ 97.356098][ T5734] Bluetooth: hci4: command tx timeout [ 97.566570][ T6093] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 97.610187][ T10] usb 5-1: USB disconnect, device number 9 [ 97.633297][ T10] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 97.641680][ T10] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 97.642065][ T10] ti_usb_3410_5052 5-1:2.0: device disconnected [ 97.716659][ T6093] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 97.717480][ T6093] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 97.717496][ T6093] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.717507][ T6093] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 97.717519][ T6093] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 97.719193][ T6093] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.719205][ T6093] usb 10-1: Product: syz [ 97.719212][ T6093] usb 10-1: Manufacturer: syz [ 97.719219][ T6093] usb 10-1: SerialNumber: syz [ 97.764596][ T6093] usb 10-1: config 0 descriptor?? [ 97.974624][ T6093] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 98.158205][ T7719] overlayfs: overlapping lowerdir path [ 98.220199][ T50] usb 10-1: USB disconnect, device number 2 [ 98.396170][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 98.426118][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 98.566913][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 98.575057][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 98.575103][ T10] usb 9-1: New USB device found, idVendor=1e5e, idProduct=07da, bcdDevice= 0.40 [ 98.576180][ T10] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 98.576209][ T10] usb 9-1: can't read configurations, error -71 [ 98.596774][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.597727][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.597755][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.597787][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.600538][ T7723] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 98.605049][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.866693][ T5734] Bluetooth: hci1: command tx timeout [ 98.980026][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 98.980040][ T43] audit: type=1400 audit(1789963744.130:29708): avc: denied { nlmsg_read } for pid=7737 comm="syz.5.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.981548][ T7740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=7740 comm=syz.5.402 [ 98.981571][ T7738] netlink: 'syz.5.402': attribute type 23 has an invalid length. [ 98.981627][ T7740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=7740 comm=syz.5.402 [ 98.981707][ T7740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=7740 comm=syz.5.402 [ 98.981779][ T7740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=7740 comm=syz.5.402 [ 98.981850][ T7740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=7740 comm=syz.5.402 [ 98.981920][ T7740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=7740 comm=syz.5.402 [ 98.981994][ T7740] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=7740 comm=syz.5.402 [ 99.125271][ T43] audit: type=1400 audit(1789963744.270:29709): avc: denied { read } for pid=7747 comm="syz.4.405" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 99.125432][ T43] audit: type=1400 audit(1789963744.270:29710): avc: denied { open } for pid=7747 comm="syz.4.405" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 99.247722][ T7754] netlink: 'syz.4.407': attribute type 8 has an invalid length. [ 99.326071][ T42] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 99.400862][ T43] audit: type=1326 audit(1789963744.550:29711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.4.408" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c9a79e159 code=0x0 [ 99.426091][ T5734] Bluetooth: hci4: command tx timeout [ 99.486736][ T42] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 99.487636][ T42] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.489512][ T42] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 99.489524][ T42] usb 10-1: Product: syz [ 99.489532][ T42] usb 10-1: Manufacturer: syz [ 99.489539][ T42] usb 10-1: SerialNumber: syz [ 99.560689][ T43] audit: type=1326 audit(1789963744.710:29712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.4.408" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c9a79e159 code=0x0 [ 99.696895][ T42] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 99.951746][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.404'. [ 99.952555][ T43] audit: type=1400 audit(1789963745.100:29713): avc: denied { ioctl } for pid=7745 comm="syz.5.404" path="socket:[22506]" dev="sockfs" ino=22506 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 99.953944][ T10] usb 10-1: USB disconnect, device number 3 [ 99.957304][ T10] usblp0: removed [ 100.777711][ T7791] netlink: 'syz.5.415': attribute type 1 has an invalid length. [ 100.777725][ T7791] netlink: 212 bytes leftover after parsing attributes in process `syz.5.415'. [ 100.777770][ T7791] netlink: 'syz.5.415': attribute type 1 has an invalid length. [ 100.841731][ T7794] FAULT_INJECTION: forcing a failure. [ 100.841731][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 100.841752][ T7794] CPU: 1 UID: 0 PID: 7794 Comm: syz.5.416 Not tainted syzkaller #0 PREEMPT(full) [ 100.841765][ T7794] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.841784][ T7794] Call Trace: [ 100.841789][ T7794] [ 100.841794][ T7794] dump_stack_lvl+0x100/0x190 [ 100.841815][ T7794] should_fail_ex.cold+0x5/0xa [ 100.841831][ T7794] should_failslab+0xc2/0x120 [ 100.841847][ T7794] kmem_cache_alloc_noprof+0x92/0x6a0 [ 100.841862][ T7794] ? alloc_empty_file+0x5b/0x1c0 [ 100.841880][ T7794] alloc_empty_file+0x5b/0x1c0 [ 100.841896][ T7794] path_openat+0xdb/0x2440 [ 100.841913][ T7794] ? __pfx_path_openat+0x10/0x10 [ 100.841931][ T7794] do_file_open+0x20e/0x430 [ 100.841946][ T7794] ? __pfx_do_file_open+0x10/0x10 [ 100.841970][ T7794] ? _raw_spin_unlock+0x28/0x50 [ 100.841985][ T7794] ? alloc_fd+0x471/0x7a0 [ 100.842003][ T7794] do_sys_openat2+0x10f/0x1e0 [ 100.842024][ T7794] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.842041][ T7794] ? handle_softirqs+0x1e6/0x9d0 [ 100.842059][ T7794] __x64_sys_openat+0x12d/0x210 [ 100.842076][ T7794] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.842099][ T7794] do_syscall_64+0x123/0x790 [ 100.842118][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.842131][ T7794] RIP: 0033:0x7f322279e159 [ 100.842141][ T7794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.842152][ T7794] RSP: 002b:00007f3223666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.842164][ T7794] RAX: ffffffffffffffda RBX: 00007f3222a25fa0 RCX: 00007f322279e159 [ 100.842171][ T7794] RDX: 0000000000000100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 100.842178][ T7794] RBP: 00007f322283506b R08: 0000000000000000 R09: 0000000000000000 [ 100.842185][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.842192][ T7794] R13: 00007f3222a26038 R14: 00007f3222a25fa0 R15: 00007ffcced8ddf8 [ 100.842206][ T7794] [ 100.878403][ T43] audit: type=1400 audit(1789963746.030:29714): avc: denied { write } for pid=7788 comm="syz.4.414" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.878551][ T43] audit: type=1400 audit(1789963746.030:29715): avc: denied { open } for pid=7788 comm="syz.4.414" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.878996][ T43] audit: type=1400 audit(1789963746.030:29716): avc: denied { ioctl } for pid=7788 comm="syz.4.414" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.986896][ T43] audit: type=1400 audit(1789963746.140:29717): avc: denied { name_bind } for pid=7798 comm="syz.5.418" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 101.040648][ T5729] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.043645][ T5729] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.044252][ T5729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.045046][ T5729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.045386][ T5729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.263972][ T10] usb 5-1: USB disconnect, device number 10 [ 101.346795][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.384071][ T7821] team0: Port device vlan2 added [ 101.461843][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.478806][ T7829] dummy0: entered promiscuous mode [ 101.480305][ T7829] erspan0: entered promiscuous mode [ 101.481691][ T7829] hsr1: entered allmulticast mode [ 101.481703][ T7829] dummy0: entered allmulticast mode [ 101.481736][ T7829] erspan0: entered allmulticast mode [ 101.508006][ T5734] Bluetooth: hci4: command tx timeout [ 101.522396][ T7833] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 101.553991][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.574768][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 101.577297][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 101.577309][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 101.581465][ T7803] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.581531][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.581585][ T7803] bridge_slave_0: entered allmulticast mode [ 101.582376][ T7803] bridge_slave_0: entered promiscuous mode [ 101.583583][ T7803] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.583707][ T7803] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.583860][ T7803] bridge_slave_1: entered allmulticast mode [ 101.584551][ T7803] bridge_slave_1: entered promiscuous mode [ 101.604011][ T7803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.605722][ T7803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.644354][ T7803] team0: Port device team_slave_0 added [ 101.646849][ T7803] team0: Port device team_slave_1 added [ 101.671699][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.701886][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.701896][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.701910][ T7803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.702683][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.702691][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.702704][ T7803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.758432][ T7851] batman_adv: batadv0: Adding interface: veth0 [ 101.758443][ T7851] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.758459][ T7851] batman_adv: batadv0: Interface activated: veth0 [ 101.763357][ T7803] hsr_slave_0: entered promiscuous mode [ 101.764029][ T7803] hsr_slave_1: entered promiscuous mode [ 101.870691][ T12] bridge_slave_1: left allmulticast mode [ 101.870708][ T12] bridge_slave_1: left promiscuous mode [ 101.870837][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.873126][ T12] bridge_slave_0: left allmulticast mode [ 101.873139][ T12] bridge_slave_0: left promiscuous mode [ 101.875406][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.042655][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.044170][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.045037][ T12] bond0 (unregistering): Released all slaves [ 102.049303][ T12] bond1 (unregistering): Released all slaves [ 102.123378][ T12] tipc: Left network mode [ 102.213527][ T7803] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.220924][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.236512][ T7803] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.240217][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.240878][ T7803] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.243171][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.252148][ T7902] sctp: [Deprecated]: syz.5.441 (pid 7902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.252148][ T7902] Use struct sctp_sack_info instead [ 102.268780][ T7803] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.281707][ T7803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.283053][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 102.342324][ T12] hsr_slave_0: left promiscuous mode [ 102.346669][ T12] hsr_slave_1: left promiscuous mode [ 102.347055][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.347066][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.348577][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.348587][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.362068][ T12] veth1_macvtap: left promiscuous mode [ 102.362090][ T12] veth0_macvtap: left promiscuous mode [ 102.362134][ T12] veth1_vlan: left promiscuous mode [ 102.362164][ T12] veth0_vlan: left promiscuous mode [ 102.650137][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 102.671949][ T7948] bond1: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 102.676992][ T7948] bond1 (unregistering): Released all slaves [ 102.704250][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 102.722606][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.449'. [ 102.727084][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.449'. [ 102.752386][ T7803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.763117][ T7803] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.765798][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.765844][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.774130][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.774175][ T6364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.774522][ T7967] process 'syz.5.452' launched './file2' with NULL argv: empty string added [ 102.797884][ T7803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.797900][ T7803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.879066][ T7981] random: crng reseeded on system resumption [ 102.920412][ T7985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 102.957015][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 103.029244][ T8004] sctp: [Deprecated]: syz.5.458 (pid 8004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.029244][ T8004] Use struct sctp_sack_info instead [ 103.056117][ T7803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.106376][ T5734] Bluetooth: hci2: command tx timeout [ 103.111040][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 103.201426][ T7803] veth0_vlan: entered promiscuous mode [ 103.209360][ T7803] veth1_vlan: entered promiscuous mode [ 103.224622][ T7803] veth0_macvtap: entered promiscuous mode [ 103.226924][ T7803] veth1_macvtap: entered promiscuous mode [ 103.237248][ T7803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.242379][ T7803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.306143][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.306363][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.306515][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.306533][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.328261][ T6376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.328273][ T6376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.360248][ T8049] openvswitch: netlink: ct_state flags 66667830 unsupported [ 103.374501][ T6364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.374514][ T6364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.394558][ T8055] overlayfs: missing 'lowerdir' [ 103.624562][ T8070] overlayfs: invalid origin (0000) [ 103.629050][ T8073] 9pnet_virtio: no channels available for device 127.0.0.1 [ 103.759148][ T8086] team0 (unregistering): Port device team_slave_0 removed [ 103.760947][ T8086] team0 (unregistering): Port device team_slave_1 removed [ 104.236264][ T1480] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 104.314330][ T43] kauditd_printk_skb: 37 callbacks suppressed [ 104.314342][ T43] audit: type=1400 audit(1789963749.460:29755): avc: denied { write } for pid=8114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.359695][ T43] audit: type=1400 audit(1789963749.510:29756): avc: denied { write } for pid=8120 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.364749][ T43] audit: type=1400 audit(1789963749.510:29757): avc: denied { mounton } for pid=8121 comm="syz.4.481" path="/30/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.365905][ T43] audit: type=1400 audit(1789963749.510:29758): avc: denied { read } for pid=8121 comm="syz.4.481" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.368425][ T43] audit: type=1400 audit(1789963749.510:29759): avc: denied { read } for pid=8121 comm="syz.4.481" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.368683][ T43] audit: type=1400 audit(1789963749.520:29760): avc: denied { open } for pid=8121 comm="syz.4.481" path="/30/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.368791][ T43] audit: type=1400 audit(1789963749.520:29761): avc: denied { read } for pid=8121 comm="syz.4.481" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.371019][ T43] audit: type=1400 audit(1789963749.520:29762): avc: denied { read } for pid=8121 comm="syz.4.481" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.372564][ T43] audit: type=1400 audit(1789963749.520:29763): avc: denied { read } for pid=8121 comm="syz.4.481" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.372665][ T43] audit: type=1400 audit(1789963749.520:29764): avc: denied { read } for pid=8121 comm="syz.4.481" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 104.397074][ T1480] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 104.397881][ T1480] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 104.397896][ T1480] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.399357][ T1480] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 104.399370][ T1480] usb 5-1: Product: syz [ 104.399378][ T1480] usb 5-1: Manufacturer: syz [ 104.399386][ T1480] usb 5-1: SerialNumber: syz [ 104.400800][ T1480] usb 5-1: config 0 descriptor?? [ 104.405936][ T1480] usb 5-1: selecting invalid altsetting 0 [ 104.440088][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'. [ 104.577583][ C0] sr 2:0:0:0: [sr0] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 104.577612][ C0] sr 2:0:0:0: [sr0] tag#2 CDB: Persistent reserve out, register 5f 00 00 00 00 00 00 [ 104.604496][ T1480] usb 5-1: USB disconnect, device number 11 [ 104.630658][ T8142] netlink: 'syz.5.487': attribute type 1 has an invalid length. [ 104.658097][ T8142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.739290][ T8156] Need at least one configuration in g1. [ 104.739430][ T8156] udc usbip-vudc.0: failed to start g1: -22 [ 104.739443][ T8156] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 104.742654][ T8156] UDC core: g1: couldn't find an available UDC or it's busy [ 104.757084][ T8157] netlink: 'syz.6.489': attribute type 7 has an invalid length. [ 104.757096][ T8157] netlink: 'syz.6.489': attribute type 8 has an invalid length. [ 104.929197][ T8160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.490'. [ 104.930254][ T8160] netlink: 'syz.5.490': attribute type 12 has an invalid length. [ 104.930265][ T8160] netlink: 'syz.5.490': attribute type 29 has an invalid length. [ 105.196158][ T5734] Bluetooth: hci2: command tx timeout [ 105.222898][ T8174] ipt_REJECT: TCP_RESET invalid for non-tcp [ 105.681515][ T8227] F2FS-fs: Conflicting test_dummy_encryption options [ 107.074330][ T8288] netlink: 'syz.5.517': attribute type 1 has an invalid length. [ 107.083467][ T8288] bond2: entered promiscuous mode [ 107.083658][ T8288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.093442][ T8288] macvtap1: entered allmulticast mode [ 107.102909][ T8288] bond2: (slave bridge2): making interface the new active one [ 107.102923][ T8288] bridge2: entered promiscuous mode [ 107.103962][ T8288] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 107.276101][ T5729] Bluetooth: hci2: command tx timeout [ 108.714277][ T8235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.748306][ T8297] __nla_validate_parse: 4 callbacks suppressed [ 108.748318][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 108.749998][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 108.750009][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 108.781756][ T8308] 9pnet_virtio: no channels available for device syz [ 109.055191][ T8334] < [ 109.186851][ T5734] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 109.226852][ T8340] configfs-gadget.g1 gadget.0: HOST MAC 62:54:e9:64:ab:f8 [ 109.226870][ T8340] configfs-gadget.g1 gadget.0: MAC da:61:41:4a:6c:83 [ 109.349543][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 109.349557][ T43] audit: type=1400 audit(1789963754.500:29800): avc: denied { write } for pid=8349 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.357626][ T5734] Bluetooth: hci2: command tx timeout [ 109.439391][ T8359] netlink: 72 bytes leftover after parsing attributes in process `syz.5.531'. [ 109.466059][ T5839] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 109.479121][ T43] audit: type=1400 audit(1789963754.630:29801): avc: denied { write } for pid=8361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.517025][ T43] audit: type=1400 audit(1789963754.670:29802): avc: denied { write } for pid=8364 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.548103][ T43] audit: type=1400 audit(1789963754.700:29803): avc: denied { read } for pid=8366 comm="syz.5.532" path="socket:[29893]" dev="sockfs" ino=29893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.616311][ T5839] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 109.616837][ T5839] usb 5-1: Dual-Role OTG device on HNP port [ 109.617064][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.634849][ T5839] usb 5-1: No union descriptors [ 109.635732][ T5839] gspca_main: spca501-2.14.0 probing 0000:0000 [ 109.638232][ T5839] gspca_spca501: reg write: error -32 [ 109.638240][ T5839] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 109.638275][ T5839] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 109.671078][ T43] audit: type=1326 audit(1789963754.820:29804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8371 comm="syz.5.534" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f322279e159 code=0x0 [ 109.797735][ T43] audit: type=1400 audit(1789963754.950:29805): avc: denied { accept } for pid=8376 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.860436][ C0] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81b30b4a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 109.860477][ C0] Call Trace: [ 109.860482][ C0] [ 109.860488][ C0] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 109.860503][ C0] ? sched_clock_cpu+0x6c/0x570 [ 109.860513][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 109.860524][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 109.860536][ C0] mce_cpu_restart+0xd5/0x1f0 [ 109.860548][ C0] __flush_smp_call_function_queue+0x289/0x8c0 [ 109.860563][ C0] __sysvec_call_function+0x81/0x420 [ 109.860574][ C0] sysvec_call_function+0x9e/0xc0 [ 109.860593][ C0] [ 109.860598][ C0] [ 109.860602][ C0] asm_sysvec_call_function+0x1a/0x20 [ 109.860613][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 109.860627][ C0] Code: 48 94 02 e9 43 50 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d e3 57 1a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 109.860637][ C0] RSP: 0018:ffffffff8ea07cf0 EFLAGS: 00000206 [ 109.860646][ C0] RAX: 0000000000127687 RBX: ffffffff8ea91580 RCX: ffffffff8bd16185 [ 109.860653][ C0] RDX: 0000000000000001 RSI: ffffffff8e38c98a RDI: ffffffff8c623580 [ 109.860659][ C0] RBP: fffffbfff1d522b0 R08: 0000000000000001 R09: ffffed100d4867bd [ 109.860665][ C0] R10: ffff88806a433deb R11: 0000000000000001 R12: 0000000000000000 [ 109.860671][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fa2 R15: dffffc0000000000 [ 109.860680][ C0] ? ct_kernel_exit+0x125/0x180 [ 109.860697][ C0] default_idle+0x9/0x10 [ 109.860706][ C0] default_idle_call+0x6c/0xb0 [ 109.860715][ C0] do_idle+0x3ae/0x5b0 [ 109.860728][ C0] ? __pfx_do_idle+0x10/0x10 [ 109.860740][ C0] ? rest_init+0x2bf/0x2e0 [ 109.860752][ C0] cpu_startup_entry+0x4f/0x60 [ 109.860765][ C0] rest_init+0x2d3/0x2e0 [ 109.860775][ C0] ? __pfx_rest_init+0x10/0x10 [ 109.860789][ C0] ? __pfx_kernel_init+0x10/0x10 [ 109.860800][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 109.860820][ C0] ? acpi_ut_status_exit+0x111/0x1c0 [ 109.860837][ C0] ? acpi_enable_subsystem+0x4d9/0x4f0 [ 109.860853][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 109.860864][ C0] start_kernel+0x48e/0x490 [ 109.860880][ C0] x86_64_start_reservations+0x24/0x30 [ 109.860910][ C0] x86_64_start_kernel+0x12b/0x130 [ 109.860926][ C0] common_startup_64+0x13e/0x158 [ 109.860946][ C0] [ 109.862111][ T8382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.535'. [ 109.863081][ T43] audit: type=1400 audit(1789963755.010:29806): avc: denied { read append } for pid=8376 comm="syz.0.535" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 109.919110][ T6365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.919124][ T6365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.238620][ T8391] tmpfs: Bad value for 'mpol' [ 110.297240][ T43] audit: type=1400 audit(1789963755.450:29807): avc: denied { write } for pid=8390 comm="syz.6.538" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.297547][ T43] audit: type=1400 audit(1789963755.450:29808): avc: denied { ioctl } for pid=8390 comm="syz.6.538" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 110.623201][ T8382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 110.623287][ T8382] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.644616][ T8382] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.654145][ T8382] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 110.654210][ T8382] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 110.665609][ T8382] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 110.678687][ T8382] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.678746][ T8382] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.686662][ T8382] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.776654][ T43] audit: type=1400 audit(1789963755.930:29809): avc: denied { setattr } for pid=8412 comm="syz.0.543" name="NETLINK" dev="sockfs" ino=29951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.789182][ T8417] ip_tables: iptables: counters copy to user failed while replacing table [ 110.955415][ T8432] netlink: 132 bytes leftover after parsing attributes in process `syz.5.549'. [ 110.998102][ T8432] autofs: Unknown parameter '-fØ7ÎFߨU¾òÌçøÄžó·7ÑôE)$¼9þÔÇÀ_' [ 111.001147][ T8437] device-mapper: ioctl: device name cannot contain '/' [ 111.007675][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 111.007696][ T8437] netlink: 'syz.4.550': attribute type 10 has an invalid length. [ 111.007705][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 111.012634][ T8437] geneve2: entered promiscuous mode [ 111.012647][ T8437] geneve2: entered allmulticast mode [ 111.066175][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 111.227054][ T10] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 111.229469][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.229483][ T10] usb 11-1: Product: syz [ 111.229490][ T10] usb 11-1: Manufacturer: syz [ 111.229502][ T10] usb 11-1: SerialNumber: syz [ 111.282054][ T5839] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 111.314952][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.315316][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.345710][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'. [ 111.351108][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.353412][ T8450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.446912][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.459396][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.459422][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.459440][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.489690][ T8420] device-mapper: ioctl: Invalid ioctl structure: name m, dev f801 [ 111.495646][ T8455] capability: warning: `syz.4.556' uses deprecated v2 capabilities in a way that may be insecure [ 111.760431][ T8474] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 111.906147][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.295112][ T8501] FAULT_INJECTION: forcing a failure. [ 112.295112][ T8501] name failslab, interval 1, probability 0, space 0, times 0 [ 112.295133][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.4.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.295148][ T8501] Tainted: [L]=SOFTLOCKUP [ 112.295153][ T8501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.295159][ T8501] Call Trace: [ 112.295163][ T8501] [ 112.295167][ T8501] dump_stack_lvl+0x100/0x190 [ 112.295199][ T8501] should_fail_ex.cold+0x5/0xa [ 112.295233][ T8501] should_failslab+0xc2/0x120 [ 112.295253][ T8501] __kmalloc_noprof+0xfc/0x840 [ 112.295266][ T8501] ? udpv6_init_sock+0x24e/0x450 [ 112.295288][ T8501] udpv6_init_sock+0x24e/0x450 [ 112.295303][ T8501] ? __pfx_udpv6_init_sock+0x10/0x10 [ 112.295320][ T8501] inet6_create+0xb1a/0x12b0 [ 112.295332][ T8501] ? inet6_create+0x7f/0x12b0 [ 112.295344][ T8501] __sock_create+0x339/0x860 [ 112.295364][ T8501] __sys_socket+0x14d/0x260 [ 112.295375][ T8501] ? __pfx___sys_socket+0x10/0x10 [ 112.295389][ T8501] __x64_sys_socket+0x72/0xb0 [ 112.295399][ T8501] ? lockdep_hardirqs_on+0x7d/0x110 [ 112.295419][ T8501] do_syscall_64+0x123/0x790 [ 112.295436][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.295447][ T8501] RIP: 0033:0x7f5c9a79e159 [ 112.295457][ T8501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.295468][ T8501] RSP: 002b:00007f5c9b5cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 112.295479][ T8501] RAX: ffffffffffffffda RBX: 00007f5c9aa25fa0 RCX: 00007f5c9a79e159 [ 112.295486][ T8501] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 112.295493][ T8501] RBP: 00007f5c9a83506b R08: 0000000000000000 R09: 0000000000000000 [ 112.295499][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.295506][ T8501] R13: 00007f5c9aa26038 R14: 00007f5c9aa25fa0 R15: 00007ffeecba72c8 [ 112.295519][ T8501] [ 112.306455][ T5839] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 112.308250][ T5839] ath9k_htc: Failed to initialize the device [ 112.328961][ T5839] usb 11-1: ath9k_htc: USB layer deinitialized [ 112.540656][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.543049][ T73] usb 11-1: USB disconnect, device number 2 [ 112.585757][ T8513] FAULT_INJECTION: forcing a failure. [ 112.585757][ T8513] name failslab, interval 1, probability 0, space 0, times 0 [ 112.585790][ T8513] CPU: 0 UID: 0 PID: 8513 Comm: syz.4.570 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.585816][ T8513] Tainted: [L]=SOFTLOCKUP [ 112.585823][ T8513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.585833][ T8513] Call Trace: [ 112.585839][ T8513] [ 112.585847][ T8513] dump_stack_lvl+0x100/0x190 [ 112.585878][ T8513] should_fail_ex.cold+0x5/0xa [ 112.585904][ T8513] should_failslab+0xc2/0x120 [ 112.585927][ T8513] __kmalloc_cache_noprof+0x91/0x6d0 [ 112.585954][ T8513] ? snd_ctl_open+0x14f/0x5a0 [ 112.586004][ T8513] snd_ctl_open+0x14f/0x5a0 [ 112.586026][ T8513] ? __pfx_snd_ctl_open+0x10/0x10 [ 112.586047][ T8513] snd_open+0x201/0x450 [ 112.586070][ T8513] ? __pfx_snd_open+0x10/0x10 [ 112.586091][ T8513] chrdev_open+0x234/0x6a0 [ 112.586113][ T8513] ? __pfx_chrdev_open+0x10/0x10 [ 112.586135][ T8513] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 112.586166][ T8513] do_dentry_open+0x6ab/0x14d0 [ 112.586184][ T8513] ? __pfx_chrdev_open+0x10/0x10 [ 112.586211][ T8513] vfs_open+0x82/0x3f0 [ 112.586237][ T8513] path_openat+0x19fa/0x2440 [ 112.586264][ T8513] ? __pfx_path_openat+0x10/0x10 [ 112.586293][ T8513] do_file_open+0x20e/0x430 [ 112.586317][ T8513] ? __pfx_do_file_open+0x10/0x10 [ 112.586355][ T8513] ? _raw_spin_unlock+0x28/0x50 [ 112.586378][ T8513] ? alloc_fd+0x471/0x7a0 [ 112.586407][ T8513] do_sys_openat2+0x10f/0x1e0 [ 112.586431][ T8513] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.586458][ T8513] ? fput+0x7c/0x100 [ 112.586485][ T8513] __x64_sys_openat+0x12d/0x210 [ 112.586509][ T8513] ? __pfx___x64_sys_openat+0x10/0x10 [ 112.586543][ T8513] do_syscall_64+0x123/0x790 [ 112.586571][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.586590][ T8513] RIP: 0033:0x7f5c9a75e98e [ 112.586604][ T8513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.586616][ T8513] RSP: 002b:00007f5c9b5ceb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.586629][ T8513] RAX: ffffffffffffffda RBX: 00007f5c9b5cf6c0 RCX: 00007f5c9a75e98e [ 112.586636][ T8513] RDX: 0000000000000800 RSI: 00007f5c9b5cec00 RDI: ffffffffffffff9c [ 112.586643][ T8513] RBP: 00007f5c9b5cec00 R08: 0000000000000000 R09: 0000000000000000 [ 112.586649][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 112.586656][ T8513] R13: 00007f5c9aa26038 R14: 00007f5c9aa25fa0 R15: 00007ffeecba72c8 [ 112.586670][ T8513] [ 112.652784][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.654123][ T5729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.660817][ T5729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.663496][ T5729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.665339][ T5729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.667775][ T5729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.716492][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.716575][ T5734] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.717569][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.743983][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.788452][ T6364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.789234][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.790523][ T73] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.891488][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.157298][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.157436][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.157537][ T8514] bridge_slave_0: entered allmulticast mode [ 113.158568][ T8514] bridge_slave_0: entered promiscuous mode [ 113.253205][ T13] erspan0 (unregistering): left promiscuous mode [ 113.300624][ T13] bond0 (unregistering): Released all slaves [ 113.303270][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.303333][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.303393][ T8514] bridge_slave_1: entered allmulticast mode [ 113.304117][ T8514] bridge_slave_1: entered promiscuous mode [ 113.320380][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.321906][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.335042][ T8514] team0: Port device team_slave_0 added [ 113.336577][ T8514] team0: Port device team_slave_1 added [ 113.347989][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.348000][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.348013][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.348880][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.348888][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.348901][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.391856][ T8514] hsr_slave_0: entered promiscuous mode [ 113.392346][ T8514] hsr_slave_1: entered promiscuous mode [ 113.392641][ T8514] debugfs: 'hsr0' already exists in 'hsr' [ 113.392652][ T8514] Cannot create hsr debugfs directory [ 113.392722][ T13] : left promiscuous mode [ 113.444226][ T8563] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 113.460299][ T8563] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 113.461855][ T8563] bond1 (unregistering): Released all slaves [ 113.495475][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.580'. [ 113.519126][ T8562] selinux_netlink_send: 39 callbacks suppressed [ 113.519138][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8562 comm=syz.6.580 [ 113.653983][ T8578] blkio.reset_stats is deprecated [ 113.665933][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14 [ 113.692439][ T8514] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.698632][ T8514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.699055][ T8514] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.709418][ T8514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.711427][ T8514] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.713134][ T8514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.727670][ T13] dummy0: left promiscuous mode [ 113.746890][ T13] hsr_slave_0: left promiscuous mode [ 113.748394][ T13] hsr_slave_1: left promiscuous mode [ 113.758724][ T13] veth0_macvtap: left promiscuous mode [ 113.758774][ T13] veth1_vlan: left promiscuous mode [ 113.758803][ T13] veth0_vlan: left promiscuous mode [ 113.767257][ T8582] __nla_validate_parse: 6 callbacks suppressed [ 113.767269][ T8582] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.584'. [ 113.767547][ T8582] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.584'. [ 113.837651][ T13] team0 (unregistering): Port device vlan2 removed [ 113.986157][ T5734] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.003292][ T8514] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 114.005421][ T8514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.085684][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.088436][ T8617] netlink: 'syz.4.590': attribute type 64 has an invalid length. [ 114.095060][ T8617] netlink: 76 bytes leftover after parsing attributes in process `syz.4.590'. [ 114.112788][ T8617] netlink: 36 bytes leftover after parsing attributes in process `syz.4.590'. [ 114.114713][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.122827][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.122873][ T6365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.131526][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.131571][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.224788][ T8628] fuse: Bad value for 'fd' [ 114.224911][ T8628] fuse: Bad value for 'fd' [ 114.225017][ T8628] fuse: Bad value for 'fd' [ 114.225262][ T8628] fuse: Bad value for 'fd' [ 114.225371][ T8628] fuse: Bad value for 'fd' [ 114.225474][ T8628] fuse: Bad value for 'fd' [ 114.225577][ T8628] fuse: Bad value for 'fd' [ 114.225679][ T8628] fuse: Bad value for 'fd' [ 114.225784][ T8628] fuse: Bad value for 'fd' [ 114.225886][ T8628] fuse: Bad value for 'fd' [ 114.226661][ T8628] fuse: Bad value for 'fd' [ 114.227799][ T8628] fuse: Bad value for 'fd' [ 114.227960][ T8628] fuse: Bad value for 'fd' [ 114.228067][ T8628] fuse: Bad value for 'fd' [ 114.228173][ T8628] fuse: Bad value for 'fd' [ 114.228274][ T8628] fuse: Bad value for 'fd' [ 114.229747][ T8628] fuse: Bad value for 'fd' [ 114.229861][ T8628] fuse: Bad value for 'fd' [ 114.229971][ T8628] fuse: Bad value for 'fd' [ 114.230073][ T8628] fuse: Bad value for 'fd' [ 114.230180][ T8628] fuse: Bad value for 'fd' [ 114.230282][ T8628] fuse: Bad value for 'fd' [ 114.230385][ T8628] fuse: Bad value for 'fd' [ 114.230490][ T8628] fuse: Bad value for 'fd' [ 114.230595][ T8628] fuse: Bad value for 'fd' [ 114.230699][ T8628] fuse: Bad value for 'fd' [ 114.230802][ T8628] fuse: Bad value for 'fd' [ 114.230907][ T8628] fuse: Bad value for 'fd' [ 114.231012][ T8628] fuse: Bad value for 'fd' [ 114.231116][ T8628] fuse: Bad value for 'fd' [ 114.231220][ T8628] fuse: Bad value for 'fd' [ 114.231323][ T8628] fuse: Bad value for 'fd' [ 114.231427][ T8628] fuse: Bad value for 'fd' [ 114.371003][ T5444] 8021q: adding VLAN 0 to HW filter on device eth15 [ 114.421497][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.454946][ T43] kauditd_printk_skb: 26 callbacks suppressed [ 114.454959][ T43] audit: type=1400 audit(1789963759.600:29836): avc: denied { write } for pid=8663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.505203][ T43] audit: type=1400 audit(1789963759.650:29837): avc: denied { write } for pid=8677 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.542027][ T5444] 8021q: adding VLAN 0 to HW filter on device eth16 [ 114.557086][ T8685] input: syz0 as /devices/virtual/input/input15 [ 114.615006][ T8514] veth0_vlan: entered promiscuous mode [ 114.618808][ T8514] veth1_vlan: entered promiscuous mode [ 114.618973][ T43] audit: type=1400 audit(1789963759.770:29838): avc: denied { write } for pid=8688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.629584][ T8514] veth0_macvtap: entered promiscuous mode [ 114.631609][ T8514] veth1_macvtap: entered promiscuous mode [ 114.645596][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.651848][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.659668][ T43] audit: type=1400 audit(1789963759.810:29839): avc: denied { write } for pid=8691 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.706889][ T5805] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.706927][ T5805] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.706963][ T5805] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.706993][ T5805] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.715947][ T5444] 8021q: adding VLAN 0 to HW filter on device eth17 [ 114.716735][ T5734] Bluetooth: hci0: command tx timeout [ 114.734099][ T6365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.734119][ T6365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.757532][ T6365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.757552][ T6365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.786355][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.786379][ T5734] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.802351][ T43] audit: type=1400 audit(1789963759.950:29840): avc: denied { mount } for pid=8694 comm="syz.6.600" name="/" dev="hugetlbfs" ino=31792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 114.803263][ T43] audit: type=1400 audit(1789963759.950:29841): avc: denied { remount } for pid=8694 comm="syz.6.600" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 114.824043][ T43] audit: type=1400 audit(1789963759.970:29842): avc: denied { unmount } for pid=7803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 114.850696][ T43] audit: type=1400 audit(1789963760.000:29843): avc: denied { write } for pid=8697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.902834][ T43] audit: type=1400 audit(1789963760.050:29844): avc: denied { append } for pid=8701 comm="syz.4.601" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 114.903018][ T43] audit: type=1400 audit(1789963760.050:29845): avc: denied { open } for pid=8701 comm="syz.4.601" path="/67/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 114.907278][ T8713] befs: (nullb0): No write support. Marking filesystem read-only [ 114.908417][ T8713] befs: (nullb0): invalid magic header [ 114.953584][ T8718] Invalid argument reading file caps for ./file0 [ 115.004446][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.605'. [ 115.085045][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.608'. [ 115.119813][ T8732] tmpfs: Unknown parameter 'uiÿ0x0000000000000000' [ 115.156530][ T73] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 115.219433][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 115.286863][ T8739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8739 comm=syz.4.610 [ 115.306102][ T73] usb 12-1: Using ep0 maxpacket: 8 [ 115.309969][ T5729] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 115.326910][ T73] usb 12-1: unable to get BOS descriptor or descriptor too short [ 115.326943][ T73] usb 12-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 115.326969][ T73] usb 12-1: no configurations [ 115.326979][ T73] usb 12-1: can't read configurations, error -22 [ 115.377695][ T8754] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 115.666330][ T8698] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 115.827170][ T8698] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 115.828879][ T8698] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.829717][ T8698] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.831332][ T8698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.831344][ T8698] usb 9-1: Product: syz [ 115.831352][ T8698] usb 9-1: Manufacturer: syz [ 115.831359][ T8698] usb 9-1: SerialNumber: syz [ 115.847768][ T8698] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 115.862650][ T8698] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 115.868085][ T8698] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 115.894924][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.617'. [ 115.903054][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.617'. [ 115.903410][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.617'. [ 115.989353][ T8787] batadv0: entered promiscuous mode [ 115.991034][ T8787] macsec1: entered promiscuous mode [ 115.991146][ T8787] macsec1: entered allmulticast mode [ 115.991155][ T8787] batadv0: entered allmulticast mode [ 115.991747][ T8787] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 116.066267][ T5729] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.100123][ T8792] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.121905][ T8792] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 116.546085][ T73] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 116.697202][ T73] usb 12-1: not running at top speed; connect to a high speed hub [ 116.697222][ T73] usb 12-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 116.698058][ T73] usb 12-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 116.699756][ T73] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.699768][ T73] usb 12-1: Product: syz [ 116.699822][ T73] usb 12-1: Manufacturer: syz [ 116.699830][ T73] usb 12-1: SerialNumber: syz [ 116.786568][ T8798] ------------[ cut here ]------------ [ 116.786578][ T8798] Device '0-0002' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 116.786634][ T8798] WARNING: drivers/base/core.c:2642 at device_release+0x1da/0x270, CPU#2: syz.6.624/8798 [ 116.795616][ T8798] Modules linked in: [ 116.797216][ T8798] CPU: 2 UID: 0 PID: 8798 Comm: syz.6.624 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.800830][ T8798] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 116.802249][ T8798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.805388][ T8798] RIP: 0010:device_release+0x1dd/0x270 [ 116.807228][ T8798] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 9d ec a1 fb 48 8d 3d b6 2f e7 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 84 ec a1 fb 48 89 da 48 b8 00 00 [ 116.813411][ T8798] RSP: 0018:ffffc900041afa40 EFLAGS: 00010293 [ 116.815373][ T8798] RAX: 0000000000000000 RBX: ffff888057d65020 RCX: 0000000000000000 [ 116.817971][ T8798] RDX: ffff8880245d0000 RSI: ffff888022b6af00 RDI: ffffffff915162d0 [ 116.820538][ T8798] RBP: ffff888022b6af00 R08: 0000000000000001 R09: 0000000000000000 [ 116.823084][ T8798] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805613fc00 [ 116.825625][ T8798] R13: dffffc0000000000 R14: ffff888022b6af00 R15: 0000000000000000 [ 116.828229][ T8798] FS: 00007fe6563a76c0(0000) GS:ffff8880d5d56000(0000) knlGS:0000000000000000 [ 116.831052][ T8798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.833201][ T8798] CR2: 00007fe6537d5d58 CR3: 000000002c457000 CR4: 0000000000352ef0 [ 116.835760][ T8798] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 116.838366][ T8798] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 116.841681][ T8798] Call Trace: [ 116.842801][ T8798] [ 116.843786][ T8798] kobject_put+0x1f7/0x640 [ 116.845229][ T8798] device_unregister+0x2f/0xe0 [ 116.846831][ T8798] i2c_unregister_device+0xf5/0x270 [ 116.848500][ T8798] i2c_deregister_clients+0x255/0x460 [ 116.850211][ T8798] i2c_del_adapter+0x13a/0x2e0 [ 116.851742][ T8798] i801_remove+0xa4/0x3d0 [ 116.853135][ T8798] pci_device_remove+0xb2/0x1d0 [ 116.854697][ T8798] ? __pfx_pci_device_remove+0x10/0x10 [ 116.856546][ T8798] device_remove+0xcb/0x180 [ 116.858047][ T8798] device_release_driver_internal+0x44e/0x620 [ 116.859977][ T8798] unbind_store+0xf8/0x110 [ 116.861414][ T8798] ? __pfx_unbind_store+0x10/0x10 [ 116.863188][ T8798] drv_attr_store+0x74/0xb0 [ 116.864617][ T8798] ? __pfx_drv_attr_store+0x10/0x10 [ 116.866480][ T8798] sysfs_kf_write+0xf2/0x150 [ 116.867957][ T8798] kernfs_fop_write_iter+0x3e0/0x5f0 [ 116.869641][ T8798] ? __pfx_sysfs_kf_write+0x10/0x10 [ 116.871300][ T8798] vfs_write+0x6af/0x1050 [ 116.872702][ T8798] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 116.874523][ T8798] ? __pfx_vfs_write+0x10/0x10 [ 116.876091][ T8798] ? find_held_lock+0x2b/0x80 [ 116.876392][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.876420][ T5729] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.881476][ T8798] ksys_write+0x12a/0x250 [ 116.882897][ T8798] ? __pfx_ksys_write+0x10/0x10 [ 116.884501][ T8798] do_syscall_64+0x123/0x790 [ 116.886095][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.888016][ T8798] RIP: 0033:0x7fe65559e159 [ 116.889501][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.895553][ T8798] RSP: 002b:00007fe6563a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.898221][ T8798] RAX: ffffffffffffffda RBX: 00007fe655825fa0 RCX: 00007fe65559e159 [ 116.900670][ T8798] RDX: 000000000000000d RSI: 00002000000001c0 RDI: 0000000000000008 [ 116.903113][ T8798] RBP: 00007fe65563506b R08: 0000000000000000 R09: 0000000000000000 [ 116.905613][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.908163][ T8798] R13: 00007fe655826038 R14: 00007fe655825fa0 R15: 00007ffc63c70e38 [ 116.910684][ T8798] [ 116.911731][ T8798] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.914084][ T8798] CPU: 2 UID: 0 PID: 8798 Comm: syz.6.624 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.918093][ T8798] Tainted: [L]=SOFTLOCKUP [ 116.919902][ T8798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 116.923759][ T8798] Call Trace: [ 116.925064][ T8798] [ 116.926240][ T8798] dump_stack_lvl+0x100/0x190 [ 116.928162][ T8798] vpanic+0x553/0x970 [ 116.929483][ T8798] ? __pfx_vpanic+0x10/0x10 [ 116.930930][ T8798] panic+0xd1/0xe0 [ 116.932123][ T8798] ? __pfx_panic+0x10/0x10 [ 116.933547][ T8798] check_panic_on_warn.cold+0x19/0x34 [ 116.935219][ T8798] ? device_release+0x1da/0x270 [ 116.936775][ T8798] __warn.cold+0x191/0x318 [ 116.938160][ T8798] __report_bug+0x30f/0x440 [ 116.939585][ T8798] ? device_release+0x1da/0x270 [ 116.941124][ T8798] ? __pfx___report_bug+0x10/0x10 [ 116.942677][ T8798] ? do_raw_spin_lock+0x128/0x260 [ 116.944271][ T8798] ? find_held_lock+0x2b/0x80 [ 116.945756][ T8798] ? kobj_kset_leave+0x160/0x210 [ 116.947296][ T8798] report_bug_entry+0xe2/0x290 [ 116.948795][ T8798] ? device_release+0x1dd/0x270 [ 116.950314][ T8798] handle_bug+0x1cd/0x2a0 [ 116.951651][ T8798] exc_invalid_op+0x17/0x50 [ 116.953045][ T8798] asm_exc_invalid_op+0x1a/0x20 [ 116.954498][ T8798] RIP: 0010:device_release+0x1dd/0x270 [ 116.956210][ T8798] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 9d ec a1 fb 48 8d 3d b6 2f e7 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 84 ec a1 fb 48 89 da 48 b8 00 00 [ 116.962002][ T8798] RSP: 0018:ffffc900041afa40 EFLAGS: 00010293 [ 116.963894][ T8798] RAX: 0000000000000000 RBX: ffff888057d65020 RCX: 0000000000000000 [ 116.966337][ T8798] RDX: ffff8880245d0000 RSI: ffff888022b6af00 RDI: ffffffff915162d0 [ 116.968756][ T8798] RBP: ffff888022b6af00 R08: 0000000000000001 R09: 0000000000000000 [ 116.971172][ T8798] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805613fc00 [ 116.973596][ T8798] R13: dffffc0000000000 R14: ffff888022b6af00 R15: 0000000000000000 [ 116.976016][ T8798] kobject_put+0x1f7/0x640 [ 116.977442][ T8798] device_unregister+0x2f/0xe0 [ 116.978924][ T8798] i2c_unregister_device+0xf5/0x270 [ 116.980545][ T8798] i2c_deregister_clients+0x255/0x460 [ 116.982206][ T8798] i2c_del_adapter+0x13a/0x2e0 [ 116.983672][ T8798] i801_remove+0xa4/0x3d0 [ 116.985022][ T8798] pci_device_remove+0xb2/0x1d0 [ 116.986539][ T8798] ? __pfx_pci_device_remove+0x10/0x10 [ 116.988212][ T8798] device_remove+0xcb/0x180 [ 116.989607][ T8798] device_release_driver_internal+0x44e/0x620 [ 116.991455][ T8798] unbind_store+0xf8/0x110 [ 116.992852][ T8798] ? __pfx_unbind_store+0x10/0x10 [ 116.994393][ T8798] drv_attr_store+0x74/0xb0 [ 116.995790][ T8798] ? __pfx_drv_attr_store+0x10/0x10 [ 116.997413][ T8798] sysfs_kf_write+0xf2/0x150 [ 116.998843][ T8798] kernfs_fop_write_iter+0x3e0/0x5f0 [ 117.000556][ T8798] ? __pfx_sysfs_kf_write+0x10/0x10 [ 117.002171][ T8798] vfs_write+0x6af/0x1050 [ 117.003512][ T8798] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 117.005290][ T8798] ? __pfx_vfs_write+0x10/0x10 [ 117.006748][ T8798] ? find_held_lock+0x2b/0x80 [ 117.008222][ T8798] ksys_write+0x12a/0x250 [ 117.009553][ T8798] ? __pfx_ksys_write+0x10/0x10 [ 117.011060][ T8798] do_syscall_64+0x123/0x790 [ 117.012498][ T8798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.014316][ T8798] RIP: 0033:0x7fe65559e159 [ 117.015725][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.021613][ T8798] RSP: 002b:00007fe6563a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.024156][ T8798] RAX: ffffffffffffffda RBX: 00007fe655825fa0 RCX: 00007fe65559e159 [ 117.026596][ T8798] RDX: 000000000000000d RSI: 00002000000001c0 RDI: 0000000000000008 [ 117.028991][ T8798] RBP: 00007fe65563506b R08: 0000000000000000 R09: 0000000000000000 [ 117.031427][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.033842][ T8798] R13: 00007fe655826038 R14: 00007fe655825fa0 R15: 00007ffc63c70e38 [ 117.036318][ T8798] [ 117.037913][ T8798] Kernel Offset: disabled [ 117.039278][ T8798] Rebooting in 86400 seconds..