last executing test programs: 1.642947961s ago: executing program 3 (id=110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x9}, &(0x7f0000000040)=0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffd4b}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffd4b}, 0x68) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x2}, 0x0) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x10001}, &(0x7f00000000c0)=0x8) syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) 1.183143131s ago: executing program 3 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200400cba5a16204000000000000b7008200000009004ba00233d607ec68797716fd010100da703ec005000000", @ANYRES16=r0], 0x20}}, 0x8044) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x11c, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004006}, 0x2000a990) (async) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x14}) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @local}}, [0x80000001, 0x9, 0xc58, 0x4, 0x6, 0x3, 0x0, 0x9, 0x3, 0xe44, 0x1d3, 0x6, 0x9, 0xe89c, 0x2]}, &(0x7f00000004c0)=0x100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={r4, @in6={{0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, &(0x7f00000005c0)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0xffffff53, @remote, 0x8}}}, &(0x7f0000000600)=0x84) 1.093443039s ago: executing program 3 (id=116): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket(0x22, 0xa, 0x400000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5000000000000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x50, r1, 0x8987f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000f14010027bd7000ffdbdf250800010000000000090045006973636d000000000800030001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x8800) 1.013193132s ago: executing program 1 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x8000) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x7, 0x3, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8480, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, &(0x7f0000001a80)={0x0, [{0x3, 0x0, 0x90, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x252d, 0x0}, {0x2, 0x0, 0x7e, 0x0}, {0x6, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x85a, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0xffff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x4, 0x0, 0x401, 0x0}, {0x0, 0x0, 0xbf, 0x0}, {0x0, 0x0, 0xff, 0x0}, {0x1, 0x0, 0xe2, 0x0}, {0x0, 0x0, 0x9, 0x0}]}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r4, 0x7, 0x3, r4}) 1.012803344s ago: executing program 3 (id=119): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x122d, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0x1000cd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x4000}, {0x0}, {0x0, 0x0, 0x1}, {0x0}]}, 0x4, 0x2}, 0x1) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_tables_matches\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r3, 0x0, &(0x7f00000001c0)) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x10) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000280)='timerslack_ns\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x122d, 0x1) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x830, &(0x7f0000000300)={0x0, 0x1000cd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000000)) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x4000}, {0x0}, {0x0, 0x0, 0x1}, {0x0}]}, 0x4, 0x2}, 0x1) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (async) gettid() (async) syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_tables_matches\x00') (async) fchdir(r2) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockname(r3, 0x0, &(0x7f00000001c0)) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x10) (async) gettid() (async) syz_open_procfs(r5, &(0x7f0000000280)='timerslack_ns\x00') (async) 1.001182023s ago: executing program 3 (id=122): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x9, 0xfffffffd}) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x4, r4, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) 918.029968ms ago: executing program 3 (id=124): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) mmap(&(0x7f00003cd000/0x3000)=nil, 0x3000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x181) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$vhost_msg(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f0000001d40)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r2 = socket$xdp(0x2c, 0x3, 0x0) chdir(&(0x7f0000000080)='./bus\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), &(0x7f0000000900)=0x7, 0x8, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffc000/0x1000)=nil, r3, 0x1000005, 0x30, r0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000013000/0x4000)=nil, 0x4000}) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)=0x18) getpid() sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 762.659637ms ago: executing program 1 (id=127): r0 = syz_open_dev$evdev(&(0x7f0000000680), 0x80000000, 0x321001) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000006c0)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x9) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000880)}, 0x24000800) r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xfffffffffffffe9a, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x40010) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0x10, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x20008000) sendmmsg$inet(r7, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="3a8bf028c3cf09cbdf0b7ca064cfb18435aa201f908586585d550b8efb9040bf3587460899d7f454d660cb98ba8b5d98818309764d6d563b2cf264969bdc9ecfc136090a404cb921345c45239c0de00266514e598c870adc7b45fe8ff487bfb27b3d7aaac3065d08dda9882eef7c06c6d19aa8468aa58ed263cde7819bf7ba56ae760ac20a58ab540000000000000000008e45e3e7b2605ce15d7267223c2ff392fa2659dbdc8d8641e517d57f451c5438ce660f67d4", 0xb6}, {&(0x7f0000000200)="adc48c4b78c58b052e23d57d2022d1190fd19461d925372e75d43f49c4ecfac34bf943549292d9397d5a59a76ac2e1256332833b11e14c2cad5b82a92235de21d7b5b87a7ce57fb1c8ac3c272b4480a460ff03305128e346c7803dd1ffa9d910146678bb5d3890b0588a7fa62396c41b34765f2527895c57c89a7b94f56339b3b92a16ddb37d4faca610dd2fbeaaa6cb3aba7aacd40377fd0670177939ad09d7189535b5df8cbbcc078e50cda7842230421d5facf1bfadcf3aeeff0c9f1d31a68933b1eec96269a61a2b1eb0050da2363116", 0xd2}, {&(0x7f0000000300)="66563212a6a1f61fbd30ab1fd997c7715b0b0c7e4e7c753c6e7e0d501ef0b38de51e4a4b75728aab1af622c35ca54bfb00fda52692e494e8deddbc9d5ed32002f462abf4525b240edafc5c61b620c4152e817a0edb9b457334f5e72e42883db8af5f7d520aec1da16d85e9243a07c56a13a9b1701e", 0x75}, {&(0x7f0000000380)="dcc2e0397bb3631e42cac60e21f50f30e1c31cc1020bcfd000bbd7ab7ac1ffa85a918bdb7cb23c9a4379ad082df8f1126664def9f3d4b49962e3b887d1a6e1233c1a1fb5d9f8c19b64f6c9", 0x4b}, {&(0x7f00000007c0)="82782e3e1e5d2f95cdf2935731f75036112e067d156869c78b51a078cb04ffc9b7eef05f9729a05516b77b8394d17e52f3869cd9a822cf4c02bbb9a86e7de5b96b9a8e54db5800052af1c18ce4caaaddd4ee6ef35bc49ee5bf4814e54a08c15f30ad3071d26a03ef8e7d58e6ac88063dab316ff6d46819757ab7e38d07c163a78ab7028b385d4947a2c1d36d12d4e7af30f191a7d5a05b", 0x97}], 0x5, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @loopback, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0x98}}], 0x1, 0x4000001) r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r14 = syz_kvm_setup_syzos_vm$x86(r13, &(0x7f0000bfd000/0x400000)=nil) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'gretap0\x00', r12, 0x20, 0x7800, 0x0, 0x1000, {{0x11, 0x4, 0x0, 0x9, 0x44, 0x64, 0x0, 0x3, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0x35, 0x0, 0x2}, @rr={0x7, 0x7, 0xd8, [@broadcast]}, @timestamp_addr={0x44, 0x24, 0x7e, 0x1, 0x4, [{@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x80}, {@multicast1, 0x7}]}]}}}}}) syz_kvm_add_vcpu$x86(r14, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000010}}], 0x20}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r15, 0x6, 0x1c, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x1, 0x9, 0x1, 0x3, 0x9, 0x2, 0x98}, {0xc0000000, 0xffffff1d, 0x2, 0x4, 0x958b, 0x6, 0x6}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 572.217992ms ago: executing program 2 (id=131): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x100]}, 0x8, 0x80800) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(&(0x7f0000000380)='./file7\x00', 0x0) chdir(&(0x7f0000000000)='./bus\x00') rmdir(&(0x7f00000000c0)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) linkat(r0, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f00000004c0)='./file0\x00', 0x400) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x2000, 0x19e, {0x0, 0xea60}, {0x4, 0x2, 0x5, 0xff, 0x7, 0xc4, "97e800"}, 0x76, 0x2, {&(0x7f00000005c0)=[{0x7d26, 0x9, {&(0x7f0000000280)}, 0x1}, {0x3, 0x100, {&(0x7f00000002c0)}, 0x6}]}, 0xa}) r7 = socket$netlink(0x10, 0x3, 0x8) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff8}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x44080) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RLOCK(r8, &(0x7f0000000240)={0x8, 0x35, 0x1, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 502.833894ms ago: executing program 0 (id=132): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioperm(0x0, 0x80, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newroute={0x34, 0x18, 0x8, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x7}, [@RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x34}}, 0x0) 436.799536ms ago: executing program 2 (id=133): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)={0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000180)=[r5, r5], &(0x7f0000000100)=[0xffffffffffffa820], 0xea25, 0x2, 0xb}) r6 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002740)={&(0x7f00000003c0)=[{0x8, 0xf401, 0x10a, &(0x7f0000000f00)="eab46e7915adbf37b970e99bfd63a3eeaa9719283adadca444a588d649714253b54ca1d429cfc5ef6e3dedba6ceaf6fdd1c43f72eae884e5a3502e895160b51fcea39fc9adcc5c89158bb5a6ffa6affa3669226e8538c8da35adf4ae88a7cdae41f52ef64a800a0bce79fe4e11d7b96dbd4b8c173b52461f2d89697a3aa424afbab8415a74e7ce26a0b7c0c09a349389c98600099e4f46da3ebe88cbc65cd3b15c3ef77d231b494725d068ac4fca6a9677874571835da95dc52c49eb798f2d5d9a97de41145739c1bcd97c86a43e8f8daaff267ab893a9e2b37f7f9365e39a2ed0c79ad6149b5e0b2152c452f4a5f66bb4cd5016c89d0abc101be0071c601b7d4b94d47a088a47f32b0a"}], 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02864c3, &(0x7f0000000080)={&(0x7f00000000c0)=[r8], 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000280)={&(0x7f0000000140)=[r2, 0x0, 0x0, 0x0, r3, r5, 0x0, r8], &(0x7f0000000180)=[0xffffffffffffffff, 0x5, 0x9, 0x0, 0x9, 0x8, 0x2, 0xfffffffffffffe00], 0x7, 0x8, 0x1}) r9 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) ioctl$NBD_SET_BLKSIZE(r9, 0xab01, 0x9) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x24, &(0x7f00000001c0)=[{0x3e, '\x00', @buffer={"e2bf26845437fe13e45843f86c59ef76c9ad9dc4b1727a56716842429eaba686", 0x20}, 0x6000}, {0x3b, '\x00', @buffer={"79f624a4545cb91f55ccb72d2ccc006e069215f01d6990e5ff61a138fd9d3f93", 0x20}, 0x9}]}) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000100)) (async) syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r4, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000180)=[r5, r5], &(0x7f0000000100)=[0xffffffffffffa820], 0xea25, 0x2, 0xb}) (async) syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) (async) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000002740)={&(0x7f00000003c0)=[{0x8, 0xf401, 0x10a, &(0x7f0000000f00)="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"}], 0x1}) (async) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r7, 0xc02864c3, &(0x7f0000000080)={&(0x7f00000000c0)=[r8], 0x0, 0x1, 0x9}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f0000000280)={&(0x7f0000000140)=[r2, 0x0, 0x0, 0x0, r3, r5, 0x0, r8], &(0x7f0000000180)=[0xffffffffffffffff, 0x5, 0x9, 0x0, 0x9, 0x8, 0x2, 0xfffffffffffffe00], 0x7, 0x8, 0x1}) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x1) (async) ioctl$NBD_SET_BLKSIZE(r9, 0xab01, 0x9) (async) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x24, &(0x7f00000001c0)=[{0x3e, '\x00', @buffer={"e2bf26845437fe13e45843f86c59ef76c9ad9dc4b1727a56716842429eaba686", 0x20}, 0x6000}, {0x3b, '\x00', @buffer={"79f624a4545cb91f55ccb72d2ccc006e069215f01d6990e5ff61a138fd9d3f93", 0x20}, 0x9}]}) (async) 381.736477ms ago: executing program 2 (id=134): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x7e, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) fanotify_init(0x200, 0x40000) (async) r2 = fanotify_init(0x200, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) fanotify_mark(r2, 0x161, 0x40000867, r3, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) (async) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 381.367833ms ago: executing program 1 (id=135): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000800)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6441051a2d708f37ac8da1a297e0099c5ac00e8c4b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x4048084, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xdb) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000d0428bd7002fcdbff2500008000", @ANYRES32=r1, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x8010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000040001901feffffff008f3492280c00018006000600800a00000400028000"/48], 0x30}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x36, 0x1, 0x0, r4}) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x801, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x0, 0x20431}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000001c0)={r12, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r12, 0x7, 0x3}, 0xc) 380.770547ms ago: executing program 0 (id=136): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r0}, 0x18) ioctl$TCFLSH(r0, 0x400455c8, 0xb) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000001c0)) unshare(0x64000600) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, r2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x100800) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x1d, @empty, 0x4e24, 0x1, 'rr\x00', 0x1, 0xb, 0x52}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4, 0x4, 0x0, 0x6, 0x2}}, 0x44) 301.19158ms ago: executing program 1 (id=137): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)="6539feffb300000000000000dd0a22", 0xf}], 0x1}}], 0x2, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r2, &(0x7f00000088c0)=""/48, 0x30) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_cancel(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xef0}, 0x0) getdents(r2, 0xffffffffffffffff, 0x5a) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="a800000002000000240001801400018008020100e000000108450200810100a18c005d9307008000f9b50000004ae3505fce4759b92615260280c2938342a6f45e9f199eeaf6f5d2375d157e4698a892acf3271c6d30398b795a04b0ad123caf69a0b96ac98632b3449ab64d52e1709e460e135c73e7a8a91800"/139], 0xa8}, 0x1, 0x0, 0x0, 0x200040c0}, 0x8c0) 300.804497ms ago: executing program 2 (id=138): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = inotify_init1(0x0) (async) r1 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, r1) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x2}, 0x10}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="8700000000000000000000008100", 0xe, 0x24080000, &(0x7f00000000c0)={0x11, 0xf5, 0x0, 0x1, 0x3, 0x6, @random="cdf43395d8e1"}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2d, 0xc, 0x7f, 0x81, 0x74, @loopback, @mcast1, 0x10, 0x0, 0x734, 0x9}}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x10, 0x0, 0x3c7, 0xfff, {{0x19, 0x4, 0x2, 0x32, 0x64, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x24}, {[@rr={0x7, 0x7, 0xb9, [@multicast2]}, @ssrr={0x89, 0x13, 0x37, [@remote, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast, @broadcast]}, @noop, @rr={0x7, 0x7, 0xdb, [@multicast2]}, @timestamp_addr={0x44, 0x2c, 0x76, 0x1, 0xe, [{@multicast2, 0x62}, {@rand_addr=0x64010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4}, {@broadcast, 0x9}, {@broadcast, 0xffffffff}]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'gretap0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x7, 0x40, 0x4, 0x0, {{0x33, 0x4, 0x3, 0x8, 0xcc, 0x67, 0x0, 0xc9, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xd}, {[@generic={0x82, 0x6, "21e55b77"}, @cipso={0x86, 0x59, 0x3, [{0x6, 0x10, "45cd0733a15c95e990fcfdd17b5b"}, {0x6, 0x11, "88a804bcffb742e788db4f33333667"}, {0x6, 0x12, "4ed6a4b8e6d962fc5800f1bf9d20e15b"}, {0x1, 0x9, "41480b22ce2c75"}, {0x2, 0x8, "eefa00043a78"}, {0x7, 0xf, "50ee78afcbc85845e6e156c238"}]}, @generic={0x89, 0xf, "62fb818aaaee644d4ad78e0420"}, @ssrr={0x89, 0x1f, 0x2d, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010101]}, @cipso={0x86, 0x10, 0x2, [{0x0, 0xa, "3e3502e17b9722ca"}]}, @noop, @lsrr={0x83, 0x13, 0xe8, [@private=0xa010100, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x3d}]}, @ra={0x94, 0x4}]}}}}}) (async, rerun: 32) r10 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffc, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x10, 0x7, 0x2, 0x7, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x67, 0x0, 0x5, 0x2f, 0x0, @broadcast, @loopback}}}}) (async) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r13) 213.089349ms ago: executing program 0 (id=139): syz_emit_ethernet(0x74, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @empty, @void, {@ipv4={0x800, @generic={{0xe, 0x4, 0x3, 0x0, 0x66, 0x65, 0x0, 0x4, 0x2e, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3d}, {[@timestamp_prespec={0x44, 0x24, 0x1a, 0x3, 0x3, [{@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffc01}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}]}]}}, "adade1a29943541489595c26dc281156dcc7a21a7589ff54403ffd57c96711c544f39e2e94f51071309b5daa14a7"}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x200802, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0x5}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = getuid() getresgid(&(0x7f0000002140)=0x0, &(0x7f0000002180), &(0x7f00000021c0)) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000002200)={0x130, 0x3cec6af69f5fef0e, r2, {0x1, 0x5, 0x0, '\x00', {0x1000, 0x23f7, 0x8, 0x4, r5, r6, 0x8000, '\x00', 0x7, 0x1, 0x398, 0x4, {0xe751, 0x3}, {0x80000000, 0x3ab}, {0x65, 0x3}, {0x7fff}, 0x616de99b, 0x6, 0x248000, 0x5f8}}}, 0x130) syz_open_dev$dri(&(0x7f0000002340), 0x4, 0x0) setregid(r6, r3) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000002380)=0x1, 0x4) capset(&(0x7f00000023c0)={0x20080522, r4}, &(0x7f0000002400)={0x9, 0x8000, 0x1, 0x80000001, 0x9, 0x9f}) r8 = socket(0x2c, 0x80000, 0x7fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002440)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) write$P9_RSYMLINK(r9, &(0x7f0000002480)={0x14, 0x11, 0x2, {0x0, 0x2, 0x5}}, 0x14) ioctl$TIOCGSID(r9, 0x5429, &(0x7f00000024c0)) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r10, 0x4068aea3, &(0x7f0000002500)) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000025c0)=@generic={&(0x7f0000002580)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000002600)=[@in={0x2, 0x4e22, @multicast2}], 0x10) r12 = syz_open_dev$swradio(&(0x7f0000002640), 0x0, 0x2) ioctl$OCFS2_IOC_RESVSP64(r12, 0x4030582a, &(0x7f0000002680)={0x2, 0x0, 0x1b4, 0x40, 0x4b40, 0x6}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r9, 0x80045300, &(0x7f00000026c0)) io_uring_enter(r9, 0x60f0, 0xc0c0, 0x40, &(0x7f0000002700)={[0x24c6]}, 0x8) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000002740)=r9) r13 = openat(0xffffffffffffffff, &(0x7f0000002780)='./file0\x00', 0x13b40483a6d5e77, 0x4) ioctl$XFS_IOC_ERROR_INJECTION(r13, 0x40085874, &(0x7f00000027c0)={r0, 0xce}) dup3(r10, r11, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000028c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1000, 0x291}, &(0x7f0000002980)=0x90) 212.867422ms ago: executing program 0 (id=140): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 140.545496ms ago: executing program 0 (id=141): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = io_uring_setup(0x68f4, &(0x7f00000002c0)={0x0, 0x7ae8, 0x8, 0x2, 0x1000168}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'pim6reg\x00'}, 0x18) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd", 0x2}], 0x1}}], 0x1, 0x20008000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0xe, 0x80, 0x6, 0x3, 0xb819, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x2, 0x7, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x8002, 0xb, 0x3, 0x8001, 0x4c74, 0x80000000, 0x800242, 0x2, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x1, 0x1000, 0xfffffffc, 0x0, 0x4, 0x7, 0x5, 0x2f, 0xe, 0x1000312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x40008000, 0x9, 0x273d, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x8, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0xa, 0x5, 0x5, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x4, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x40003, 0x0, 0x3, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0xfffffffe, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x7, 0xffffffff, 0x7ffffffe, 0x7, 0x4, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x7, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x9, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r4, r6, 0x25, 0x4, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[], 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000340)={r9, 0x0, 0x0}) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) 128.631264ms ago: executing program 2 (id=142): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) syz_open_dev$sg(&(0x7f0000000040), 0x80, 0x401) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 128.386044ms ago: executing program 1 (id=143): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) r1 = socket(0xa, 0x3, 0x3b) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, &(0x7f00000008c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}}, 0x0, 0x32}, 0x28) r3 = socket(0x1e, 0x4, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_open_dev$hiddev(&(0x7f0000000100), 0x9, 0x78b00) ioctl$HIDIOCGSTRING(r4, 0x81044804, &(0x7f0000000140)={0xf8, "526af9860a471cffcce7bf4471aaca94196dda6a27a00b26164b08c5c3fd5fa6f49ca9d2b379ca0761d34b47b5c945d7df69dd4468d1a178929daff2ec56684e5571f3c79d5c3b064a5aa69d52fdc545d7f017c0c159d68818c75d4a032a81b97f68101479c8062507be2c474dfecbf9c6d62c87826eeb7d711008bfe56d586fd51e446c03bfa16a098b35ad51efa4436e2a859edff4761491aa230a825d98d5ce96ae291d63ace17adec4be4757026fcd582a890da7fb875ea5c44b95663e938e261531a2a8927e78e145f33698a48e748c469ec7bd5a0b80e4b0cb66f72b7ec1b89d2b52a5e55340ca5df09fe1046904b10516d4d2b938"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4fffffede", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8010ffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008810}, 0x200448c6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000100000000000000ffffffff18590000d9000000000095000000000000000000000000000000000000000000bcdb97a045b64736988882091ec46b6e2916fd60147aabeba467ce967da4e58ec6c13ccba04e5bd94ca979e2cad89103bda4ee0b1eb90a861af86758d1906419b7f4533d6f2343a24dd35361dede975b302b9a2b748ee50f498953733b667d677bcd4d4a1d2357ef6271105dfdcccfdd56286ebcf286eb2209416c70d567022fb29a22d5747dce2993c92cb750b4d823da5fb3c325fa64b6ea005a373131"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 741.347µs ago: executing program 0 (id=144): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="66643d85398051fe9efd8bea867d936a9b0a88ebca14124a24483c4fc2c95ef44fd39369e434d7e13f6b46c3ebe63dd6a97fad9ff51d8bbd81860926e5adb84fe1b11dcadc438d0ea8f6b170d181041b5e3b92d094d82b1ef84d312487dbef807f840d8d55e9052ee3c370ae43b863a0ca0589196cb85274a00d219a69ecf2d2644534756d318e24fc2e84abc9ac5e5970ccca7fc6564df16975dd6a3f0f7065fe0197bbd364206b03258de9fc8a11dd874a5fc32b21856afa88699429968a5bad46d1e839687af4d7a05e0648c62d2c13dcab8cd08f28bb3c12e1efadd4e3ea63de186c31b32bdfeaad1e4a2fc124", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000007,\x00']) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000200)={{r0}, "a0a87d1e0a9abf6613868532f71f6183e7162acdda2d891cace3519caf100729423c4ee50d1bd23c797c3116a603e700da099cb7336914d12a2fb8984b1e9d5dc2395057b4c84b85df19689ed4c1f90545258e1341d0200ab69b22de6c126cb4aad797f14dfd5bd54df99b51e31699da881ea11ef28dc0c487915636610f4d2b3732ebe5ed01752b362df68d949f1a4b4f8cc5453c91889ed5bc16428468d8194c7a87cc7821e241b2c0c96fd357e808ecf8ea0734a3c9e39116fa2670d0f491cabe2727e5277c809f60fd5c921fa1b5eb25a7467400a83a86de4ef9348bdbdb158f327bcd46c450d4934d10e11f61c541699aca0eebf008d8f15f143aefc0e9b244fc5b99e23943fd9aa4852b7799a4086c18378ff21b23bf3ac632870469fabc52eeb02a536acb25356bc20ae38ba7953054b0e0edeb1fe32f82108f409e62a494fccb9c5625db46b8c9a03aec08e46f3f63e803ad3e5899b0cd0e7fd1d6b1b4d143dc69601eaa810a4ae690c0e19a17ac76ce337c5f41acb49f81e61bcd4da1d87e22462aaed33bda19685465c2af2ef31dd7fe084f12f50f9e0b931df072979d949d50fa8bdf292a2b76a25da58143380c64b30d8c01007f69951dfd20d078a2e05ea1a1ed4310eb3113f314f73ad9ca42d8e043b75b885b4c53296ce5ccc7d727aab10027d160d4366eab5ad1d4784c0c6b04ebbabd895c2af49080d604ce45e07154f3bc868b33630e00e4d2fabbca3c0545e6d52d68f47a4d9c65cdb0c7343781106104307ea74d8511732a5dbca0fa5d3e620c2775f05e2398f2acda3fdeea7cf40c8aeb885e23908c4e783b5e12255be55c605e5200a77ed5da36a88ded5d6d82c31352de1ee2c42de155bec7df9f1d09f37dcb8dd2a6faf697e924d7659283ea05b8d8bdddcb4584ce1ca7563e8fb28b5afbd903f3736486f2c384e97e4ad29f4a8d2f2b5dad73cd8d22369826b1d66e7005427a4b0897890e124f58da2959620ee2d9fa9cd04dabb6d8a8ef19c0d3ec616575d566229322403f2f6cc4af30d9556fee897fe8e0f344b735598c1d633c3a9efc8e7616bad783741e4fff19858de72d6d7d52ccfe4b7988c3fcb94d15141ed74d9c865ad3def4759db8e2f1222dc266758d66500c6c3d1ab9d56e7aac81b89b8a0ecca18211ed4f40edef1bc8a403b3e1bbc3013f42fab7ee43daa9f968e51563dde8735d804c382a7f5b6dbf3e1fa05ef8f785d2f56e7e3f14a525ed609ee6d38ca4516ac997db1111b68fc97073bea200f895b1de823f7e542c157270d5259c083fed5a852231c03c530a2b09b1364292cc94ad518ed733c34c664e7fdea226dff96b2d45a33ed708dc021a368c1b874cc53198586ba929fbcfa95cd5c1508e8e991db76878047a816d3b06fd9b35a04feecf77f9e5f06d228a9cae38296764fd288a7cfde4b64fd2ed296e5ec719c727b9edb9187c04b7575b64cd9219e82dece7e8eafc6b490065dd17eeb60262e839ce9a4de7d62e4e67fbbbd166e41defd0d9ba7a79520ae191fc192cada98afb5e453a4cdce2c2c78dfa5b20b45ec03c3ee5b792c019ff8533244cfded246ba09640f673415246f4f4bc60b3a5134c085272442138c31f46734c27354e64ce657ada2a62def4f598b20b14ce2c7d9b34935e1c2ea38a5c7f5d3fa80a7efbc1adfb2bd07aa9fd5d8fd361aeef886a0f88423a4a69888736642021bae91293308045c2be990e9a6206b6a7f90c0db458a859f3bf2830418f818f8d5394628e9a0d6c59dea28585205ab81020c761f8753994c2525569bc69d9ec6d5c3bf8c65893c1ab9b570a201a4f7584c497de640a93132f5176c82acc5d9280b4c6db74f3e3c9bd3493a1d414391a25b004501c77374f5b61bc8e27069b13172c9526d5d2a76fb9baadbe3187636eae6055664ba6187275ff11cf500111c7a77fe807e1cc3e8f0be3030b48ddfc3f8039611cc4720727f014d467b7f0ffd6e6df8d750c89da6ea37fb05f537cf4b4eef9a9eee9efdd311c5d3b502d34e287ced3b8d1df5e56f8949e5f285a789f5a063810ef935e9f956e8950c7e128ddeb4021ed0f29c80780c80c40d807c64b09450e1a87f966bd25972c8731eaab73bc46706a7fcc5658a1efa49eaa6fc0e4ada5ffc36a872aa24d5ab464c5b6465cadc23c2979973b08052870a4e341ef2d2653bcdc199aec378c2dd9e0fb48f7222b779efb24faeb565844c8a9e27254c72c3cdd8a882c03817ce7749d0ca54e95a7562cad9f85bcc6251ed35aa27e952925afc664be8e3acfcff936b89275805951971cbe1d7f13cdd1602f188ed408586c2b741101f00fb92577f5df6e554942d9576ff0637eadabd5c13efcab960658fb92b7457193fc59b3291df9026a350ef1cd1aa65278e54d226c69391e12f4c2dce3ee8717911c9d3cb0275e7828e0acc4a60426355a34f5e08be2cba30ed51d994bf3c7015b321b7ac4e94403f74d3a98317b5d7f565ee1974ff90a7b26825e7ed0149de71a01e9b7bd1d482907ef1d2355af7ebf2b3525ce1dd45e62234619be5cb2c59488207e425092f92b1aa5104ee03cce6f491b32fa4ac7e77a5d4eadca2584acaf7da3454a186cf9eb71f3e4557fd0401922396fdb5b89fa232cff06a6c71d8ea614be508978733d170b58819682ebbe2a1621fb7b6a5140d8acc5f6dd162ffb22271326fd23d7f7435a319bd821f15086f4d3d9765a0b96b4838e6368895bbf0cdbb5fc07377ecc23b231196f2728de1b443a6b136ed6dc2a89cda3bc512381f2f89058c3227e398a1f23bb695bcbf669e3cfaba820b332a755241f2dfd0720eba7625be6f4604a82930eac0379d969d48a36a1befa75499780ec022891da69476e348ffdf48b4a38b008092c5288e67c4671f97e551c46a2a1a749245c669f111ecbca94576e9c3f8a00315adf49c1ee5c90a0464e906a00f266af565dfac4c7d60740c926d2f8d126d00bf33b8f037905d54434eeb61768ab55a08955433ac844c586ca90c04eb16988adc9e2f19725e11cc479f91c577e07397ed5525f0459174eae29544b4d89cfcff16e7c1254f50e7e6c6bc6cdb96997225ed7b6ab7a7c897650c0ebf7173b021835ba9436fa45c8a1db1ada91204ab8db57c9368ce66d5514096549266851abe31f3bd90f400105c662b9f23a0c0d93778fe6de6ccde7789cf5229dff2288f098fd779ced6b9f9853371c24f00ce088eb093fbbbe4bfcd0e4eacadcf377b3cc8eddd042382de12dbc56fb672ea95c2c73e4ed1bda9f7798e3adaaa5b4956e834e6bef29829cf94513ab56762211aa15a89a7d4ea74a1d20780a65309394624e2cfee0d1bb7a1b25b79e90c3314e1e54844fdb08d8761e7aef8d025236df1e57c979f639d30266fd6994a49eee2272f883470a7ba7851f46605e150bf248722417875e1120cf4e744a48f9f13cc5abd77c9a16f229c1d19853c885d8bfb82a5c7b78dda8f6c59db6f952ac4ae61a433b09bffdd722dd0f03192b538e18a92ca33a71d9b4f4b7fd8f518f74b78afe1517a1c1366ad53267142cc38590e97d663f2f50b0d82ff3c2ba52134f2d34b4a517540087d25cfa4655945b6f9bf114be12a25b316799da8f363cf758a0b81d0181704b2ef3c42a2571867f7979a0b9c87fe8dd40b811438347448bcd5dd85beb93a37c68f7496e435ca0faa0b7c0a5a4b8c2ac1356b77bd453c13604da792a154e50548fbb3a02e84fb5b5931b0d69ff275eb1a263ee55bd8f746de31f98d981c5a1eed55dd8e52131c7feeb123a2ead7229dd27533c96e1b0e7a6ada676f33ad8d36ee559d6e8a555b5146fcbe90eec7ce270d5a6f6a2c7a7dd87b73cef286380fd05cd21e2be09623dc3e26d999784cce9d2a2ee6f48bf2bc892246fe596b065210fc438b94ecf4c3d7be4bf0413cee5080f3e48bfcb40e581978952495315899d07065c53ab7d380b12fe474570b6be4c0f95bdcda1c3e830af3601bb3ccc99696b91be4e0730a340a2417e090ac9e4a1ab253e34c52febd43f72b486ae4d400ecfbbad86f9bc1f3d6729cd80604c83901a185663e9069794bd1f91c3a12d90c20167d2a1b34cb93d8b12f8522cf7a32c2197c7e81c2fa5a6b11cc2c56a96720b4bcc7c0366eda03d1e1297b5075cd031901758f9d22a34dd1e740e23e543550da72bce9e5ab659ba4cd7403ad84167d6b43fa1d3f20d5cf446d8a01a086271cbbe78ad1c141db734e0d9ee1c0e7f2df9f33ea12349bc73f7e162d18f0b8f0713f34d4a738e8f1f8add9e17b757bac8ed7f21e50708c31a95376c2085afeb4b7f1e01670a916393ae066f480b74b091017baffd21f062768ab85ce56288acbf7d49e7b89bdda5dc14833d4eaae8df070b422086754c968232b459cc7d1f216aa6d716fa709cda5baf59cf5c32eded7c90bfa8eba048b40e328d945d812677a18417ed7550aa3e9bf2035910a582b3cfebf36901ac30ea89b1952ccb1653ae67ef5a145cf20e8eb6251f2abc7b8ee97e4f4b04dec086ae322b0a7beaf2a09a004c998860c63d2ecb2f7dd535b3c89d060220fde34a73ad7890bf27506b4f2792bc666f7aa3bc41c3118761e60a192fc0226d226702daa4912417ff72c79ed4211bcf511787457a8471e2f39dff3d7db9e53a478ae0553e76c53783140bf22f8e36d3d8f8cdad5d782e0402562f712bcdbb54c4f70ad138411b65435e706ff4ad96cf9c92bc2a539f3a6d25f57ce7559692203856015a086d6f39f222e45b4d0017cf7bdad44598d4fd17745edf4b04297ae41fd5c5b1825bf339ac19af47768b83971bfb961d80bf2131d4dace37e4c4b01ad5bb1613936e4a2904144c721b1c3b7db1b708ddd42a2bf21435d6df384f121499492121f962f597d3b16ac9cef84e0bf88ad77da6eb9954d8fc4b3f242b1a65f0ec4acdd4c2894e0e98d6e059600769f29f96962cea04a3b8797d63f354b3542e5797d361e8742e492750a08b3b0befea25cdf07ae2af37afb57a246e05b132284ae9b17957a2e6f1178243938b601009e6e497aff9c39c78beed4c5906427674aceadb0a52bf06a51c5e91e2f78b3402e10c28886d21f5535f6df09ceea1d471c0db789d4a809d3eb5000cee6989df6aace49079934b0d50aa7a9f233a7f38b583e2985f2e0b6a37f90dca9684487b4c2a66294530626281b78d5fd8770633943debf9940b787e1637627af7620e97d27198bcf0a7f18777affc2b79275f5c0327039f5f07df85bf9254f749de26280f0ae5fc7da9bbc4f4059e58455eb7f6f699d28b8cd9782db25922c2e0a94308da41968868c7c6e25eb41b8ab04553716a9fd08120dd80306fcecc2bcae3afc8b02065258986079feac5b5391edb870fcdaaac7b22a6ec2b22a1561424ba9f3a93ef87187da9d5771ba4e0204995ab5ef45359920f40b9eaede30e14df166cb2f117682c9e1cda21ecaf368e520565ad9b05bcb1baad8521671bfd4111b8bdf2ecf80555fc0e2c743a3ef27ec6d4a4d16a4a0123073fcbcf215b9daa2e5a0d5831823040118e320ec0666b399852d90d7357fb9f6b6096a6c1f227810d6e47a2c551673e98ce799d73931eb810898246edd3cba12960e0e4aa5c0a4a2b91f7db36d86d9c745c1e54e39ede5921c4c346fed5bb675871e268dea34d15e3c9f6d3f18db6534bad0a4d088091068691c319c3f15529f6b2f0cbf7ab2636a7ecc20528737da4ac4bd0956645ad047bddf84811d2425f877e1edb50558e84326ce77f9aa5275266bcfbc4"}) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208000, 0x0) 448.662µs ago: executing program 1 (id=145): r0 = openat$fb0(0xffffff9c, &(0x7f0000000840), 0x400, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x1, {0x0, 0xe7}}}) fsync(r0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000880)={0x60, 0x40, 0x30, 0x2000, 0x3, 0xa, 0x34, 0x0, {0x7ff, 0x99}, {0x0, 0xfffff09a}, {0x80}, {0x4, 0xf, 0x1}, 0x3, 0x0, 0xffffff3c, 0x400, 0x0, 0x2, 0x1, 0x4f3, 0x4, 0x3ab, 0x400, 0x5, 0x8, 0x1, 0x2, 0xa}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)={0x2, 0x0, [{0x9000, 0x9c, &(0x7f0000000180)=""/156}, {0x100000, 0xde, &(0x7f0000000240)=""/222}]}) 0s ago: executing program 2 (id=146): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setreuid(0xffffffffffffffff, 0xee00) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x400caed0, &(0x7f0000000400)={0x2, 0x0, @ioapic={0xffffffff, 0xb, 0x8, 0x9, 0x0, [{0xc, 0xe, 0x5, '\x00', 0x4}, {0xf, 0x0, 0x4, '\x00', 0x4}, {0xff, 0x7, 0xf, '\x00', 0x7f}, {0x8, 0x9f, 0x2, '\x00', 0x9}, {0x1, 0x0, 0x0, '\x00', 0x80}, {0x1, 0x8, 0x7f, '\x00', 0x7f}, {0x9, 0x0, 0xd1, '\x00', 0x4}, {0x9, 0x1, 0x49}, {0x0, 0x5e, 0x4, '\x00', 0x33}, {0x7, 0x3, 0x7f, '\x00', 0x1}, {0x8, 0x2, 0xfc, '\x00', 0xff}, {0x4, 0xb, 0xc4, '\x00', 0x4}, {0x40, 0x3, 0x4, '\x00', 0x9}, {0x5, 0x1}, {0xfd, 0x9, 0xc5, '\x00', 0x4}, {0x9, 0xc, 0x48, '\x00', 0x9}, {0x2, 0xc, 0x0, '\x00', 0xe}, {0x7, 0x6, 0x1b, '\x00', 0x2}, {0x4, 0x4, 0x3, '\x00', 0x4}, {0x42, 0x4e, 0x5, '\x00', 0x4}, {0xf0, 0x1, 0x7, '\x00', 0x1}, {0x78, 0x81, 0x5d, '\x00', 0x8}, {0xf, 0x10, 0xdb, '\x00', 0x5}, {0x7f, 0x63, 0x5, '\x00', 0x3}]}}) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) (async) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000180)=0x80) kernel console output (not intermixed with test programs): [ 52.833853][ T40] audit: type=1400 audit(1777941817.251:137): avc: denied { siginh } for pid=5711 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:29212' (ED25519) to the list of known hosts. [ 55.594539][ T40] audit: type=1400 audit(1777941820.041:138): avc: denied { name_bind } for pid=5719 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.623958][ T40] audit: type=1400 audit(1777941820.071:139): avc: denied { execute } for pid=5720 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.632563][ T40] audit: type=1400 audit(1777941820.071:140): avc: denied { execute_no_trans } for pid=5720 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.959601][ T40] audit: type=1400 audit(1777941822.401:141): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.968431][ T40] audit: type=1400 audit(1777941822.411:142): avc: denied { mount } for pid=5720 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.971553][ T5720] cgroup: Unknown subsys name 'net' [ 57.980771][ T40] audit: type=1400 audit(1777941822.431:143): avc: denied { unmount } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.134126][ T5720] cgroup: Unknown subsys name 'cpuset' [ 58.140455][ T5720] cgroup: Unknown subsys name 'rlimit' [ 58.291975][ T40] audit: type=1400 audit(1777941822.741:144): avc: denied { setattr } for pid=5720 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.299619][ T40] audit: type=1400 audit(1777941822.741:145): avc: denied { create } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.306401][ T40] audit: type=1400 audit(1777941822.741:146): avc: denied { write } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.313387][ T40] audit: type=1400 audit(1777941822.741:147): avc: denied { read } for pid=5720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.320970][ T40] audit: type=1400 audit(1777941822.741:148): avc: denied { mounton } for pid=5720 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.330553][ T40] audit: type=1400 audit(1777941822.741:149): avc: denied { mount } for pid=5720 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.339139][ T40] audit: type=1400 audit(1777941822.761:150): avc: denied { read } for pid=5445 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.343036][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.079114][ T5720] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.121617][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 63.121634][ T40] audit: type=1400 audit(1777941827.561:159): avc: denied { create } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.146043][ T40] audit: type=1400 audit(1777941827.571:160): avc: denied { read write } for pid=5733 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.154197][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.157167][ T40] audit: type=1400 audit(1777941827.571:161): avc: denied { open } for pid=5733 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 63.170336][ T40] audit: type=1400 audit(1777941827.581:162): avc: denied { ioctl } for pid=5733 comm="syz-executor" path="socket:[6391]" dev="sockfs" ino=6391 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.172042][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.183028][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.185581][ T5745] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.189842][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.190589][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.193087][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.196584][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.198172][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.198467][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.198893][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.202158][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.204342][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.207869][ T40] audit: type=1400 audit(1777941827.661:163): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.210941][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.213166][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.214258][ T40] audit: type=1400 audit(1777941827.661:164): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.214300][ T40] audit: type=1400 audit(1777941827.671:165): avc: denied { mounton } for pid=5733 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 63.215330][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.215751][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.217302][ T40] audit: type=1400 audit(1777941827.671:166): avc: denied { module_request } for pid=5733 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.219951][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.226309][ T5740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.230959][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.233775][ T40] audit: type=1400 audit(1777941827.681:167): avc: denied { sys_module } for pid=5733 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.740805][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.744124][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.746581][ T5733] bridge_slave_0: entered allmulticast mode [ 63.749715][ T5733] bridge_slave_0: entered promiscuous mode [ 63.768080][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.771448][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.774419][ T5733] bridge_slave_1: entered allmulticast mode [ 63.777250][ T5733] bridge_slave_1: entered promiscuous mode [ 63.838843][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.846778][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.850772][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.855608][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.858825][ T5736] bridge_slave_0: entered allmulticast mode [ 63.863012][ T5736] bridge_slave_0: entered promiscuous mode [ 63.868612][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.873114][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.876398][ T5736] bridge_slave_1: entered allmulticast mode [ 63.880369][ T5736] bridge_slave_1: entered promiscuous mode [ 63.956563][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.963080][ T5733] team0: Port device team_slave_0 added [ 63.978573][ T5733] team0: Port device team_slave_1 added [ 63.983609][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.068593][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.072014][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.084613][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.097558][ T5736] team0: Port device team_slave_0 added [ 64.100837][ T5736] team0: Port device team_slave_1 added [ 64.113491][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.116664][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.128036][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.167239][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.169652][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.172083][ T5742] bridge_slave_0: entered allmulticast mode [ 64.174888][ T5742] bridge_slave_0: entered promiscuous mode [ 64.206884][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.210204][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.213988][ T5742] bridge_slave_1: entered allmulticast mode [ 64.218039][ T5742] bridge_slave_1: entered promiscuous mode [ 64.222936][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.226141][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.238058][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.287383][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.290650][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.302366][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.325173][ T5733] hsr_slave_0: entered promiscuous mode [ 64.328626][ T5733] hsr_slave_1: entered promiscuous mode [ 64.334352][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.345947][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.349226][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.352744][ T5741] bridge_slave_0: entered allmulticast mode [ 64.356761][ T5741] bridge_slave_0: entered promiscuous mode [ 64.362098][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.365333][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.368709][ T5741] bridge_slave_1: entered allmulticast mode [ 64.372949][ T5741] bridge_slave_1: entered promiscuous mode [ 64.380711][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.413366][ T5742] team0: Port device team_slave_0 added [ 64.446838][ T5742] team0: Port device team_slave_1 added [ 64.458983][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.474784][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.547384][ T5736] hsr_slave_0: entered promiscuous mode [ 64.551267][ T5736] hsr_slave_1: entered promiscuous mode [ 64.554354][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 64.557038][ T5736] Cannot create hsr debugfs directory [ 64.572634][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.574998][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.585016][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.591535][ T5741] team0: Port device team_slave_0 added [ 64.600796][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.603486][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.612293][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.617580][ T5741] team0: Port device team_slave_1 added [ 64.681177][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.684185][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.695382][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.706943][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.709206][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.717542][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.773838][ T5742] hsr_slave_0: entered promiscuous mode [ 64.776115][ T5742] hsr_slave_1: entered promiscuous mode [ 64.778220][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 64.780110][ T5742] Cannot create hsr debugfs directory [ 64.822071][ T5741] hsr_slave_0: entered promiscuous mode [ 64.824511][ T5741] hsr_slave_1: entered promiscuous mode [ 64.826667][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 64.828543][ T5741] Cannot create hsr debugfs directory [ 64.993522][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.005022][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.009528][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.016341][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.031972][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.039103][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.043519][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.048495][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.115131][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.121907][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.125909][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.132304][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.137218][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.143708][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.163550][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.169406][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.228342][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.231655][ T5747] Bluetooth: hci2: command tx timeout [ 65.232244][ T5737] Bluetooth: hci0: command tx timeout [ 65.241035][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.246166][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.253325][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.263054][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.268353][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.272257][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.277675][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.301391][ T5737] Bluetooth: hci3: command tx timeout [ 65.310932][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.312222][ T5737] Bluetooth: hci1: command tx timeout [ 65.367292][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.373830][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.378208][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.383653][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.387669][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.391181][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.397665][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.402565][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.408512][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.422292][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.425145][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.449411][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.452058][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.459219][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.508612][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.517428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.520320][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.549405][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.552487][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.578721][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.606633][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.625032][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.627531][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.637676][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.640141][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.657522][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.677377][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.685773][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.689210][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.709471][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.712763][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.901418][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.940148][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.945935][ T5733] veth0_vlan: entered promiscuous mode [ 65.955891][ T5733] veth1_vlan: entered promiscuous mode [ 65.985468][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.992286][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.004680][ T5736] veth0_vlan: entered promiscuous mode [ 66.015564][ T5736] veth1_vlan: entered promiscuous mode [ 66.020427][ T5733] veth0_macvtap: entered promiscuous mode [ 66.036505][ T5733] veth1_macvtap: entered promiscuous mode [ 66.060893][ T5742] veth0_vlan: entered promiscuous mode [ 66.067871][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.080251][ T5736] veth0_macvtap: entered promiscuous mode [ 66.087902][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.092611][ T5741] veth0_vlan: entered promiscuous mode [ 66.106454][ T5736] veth1_macvtap: entered promiscuous mode [ 66.111933][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.115363][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.120248][ T5742] veth1_vlan: entered promiscuous mode [ 66.128889][ T5741] veth1_vlan: entered promiscuous mode [ 66.132585][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.135518][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.163894][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.170106][ T5742] veth0_macvtap: entered promiscuous mode [ 66.185365][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.190722][ T5742] veth1_macvtap: entered promiscuous mode [ 66.204523][ T1192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.214831][ T1192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.217743][ T1192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.224926][ T5741] veth0_macvtap: entered promiscuous mode [ 66.230481][ T1192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.235812][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.241634][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.246370][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.257514][ T5741] veth1_macvtap: entered promiscuous mode [ 66.281020][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.287738][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.290718][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.302588][ T1259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.308308][ T1259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.316820][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.322325][ T1259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.326119][ T1259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.327155][ T40] audit: type=1400 audit(1777941830.771:168): avc: denied { mount } for pid=5733 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.348980][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.362068][ T5733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.377531][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.377529][ T88] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.381006][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.385670][ T88] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.404406][ T88] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.407926][ T88] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.437533][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.440321][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.480330][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.485551][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.497319][ T5886] genirq: Flags mismatch irq 12. 00200000 (pcl812) vs. 00200080 (i8042) [ 66.503181][ T1192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.507948][ T1192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.543221][ T1192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.547267][ T1192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.568430][ T5889] ªªªªªª: renamed from vlan0 (while UP) [ 66.576532][ T5889] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 66.591701][ T1259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.597531][ T1259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.691874][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 66.764425][ T5903] ubi31: attaching mtd0 [ 66.768766][ T5903] ubi31: scanning is finished [ 66.770477][ T5903] ubi31: empty MTD device detected [ 66.888853][ T5911] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 66.951357][ T5883] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 66.960534][ T5903] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 66.964213][ T5903] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3912 bytes [ 66.967947][ T5903] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 66.971769][ T5903] ubi31: VID header offset: 120 (aligned 120), data offset: 184 [ 66.975202][ T5903] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 66.978307][ T5903] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 22 [ 66.982728][ T5903] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1001589627 [ 66.987129][ T5903] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 66.992668][ T5913] ubi31: background thread "ubi_bgt31d" started, PID 5913 [ 66.993150][ T5906] ubi: mtd0 is already attached to ubi31 [ 67.113398][ T5883] usb 6-1: no configurations [ 67.115842][ T5883] usb 6-1: can't read configurations, error -22 [ 67.155585][ T5922] netlink: 260 bytes leftover after parsing attributes in process `syz.2.12'. [ 67.202943][ T5927] ubi31: detaching mtd0 [ 67.207437][ T5927] ubi31: mtd0 is detached [ 67.255123][ T5926] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.258268][ T5926] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 67.261234][ T5883] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 67.264071][ T5926] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 67.264646][ T5926] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 67.301908][ T5737] Bluetooth: hci0: command tx timeout [ 67.311295][ T5737] Bluetooth: hci2: command tx timeout [ 67.381469][ T5737] Bluetooth: hci3: command tx timeout [ 67.392190][ T5737] Bluetooth: hci1: command tx timeout [ 67.432694][ T5883] usb 6-1: no configurations [ 67.434415][ T5883] usb 6-1: can't read configurations, error -22 [ 67.436797][ T5883] usb usb6-port1: attempt power cycle [ 67.589297][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 67.781527][ T5883] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 67.813063][ T5883] usb 6-1: no configurations [ 67.815108][ T5883] usb 6-1: can't read configurations, error -22 [ 67.881247][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.941282][ T5883] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.963152][ T5883] usb 6-1: no configurations [ 67.964820][ T5883] usb 6-1: can't read configurations, error -22 [ 67.967190][ T5883] usb usb6-port1: unable to enumerate USB device [ 68.011189][ T10] usb 5-1: device descriptor read/64, error -71 [ 68.059092][ T5968] netlink: 880 bytes leftover after parsing attributes in process `syz.3.27'. [ 68.095474][ T5973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.107259][ T5972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.263122][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.401675][ T10] usb 5-1: device descriptor read/64, error -71 [ 68.512619][ T10] usb usb5-port1: attempt power cycle [ 68.633911][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 68.633922][ T40] audit: type=1400 audit(1777941833.081:240): avc: denied { ioctl } for pid=5974 comm="syz.2.29" path="socket:[7007]" dev="sockfs" ino=7007 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.644300][ T40] audit: type=1400 audit(1777941833.091:241): avc: denied { name_bind } for pid=5974 comm="syz.2.29" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 68.652144][ T40] audit: type=1400 audit(1777941833.091:242): avc: denied { node_bind } for pid=5974 comm="syz.2.29" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 68.696205][ T40] audit: type=1400 audit(1777941833.141:243): avc: denied { create } for pid=5978 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.708521][ T40] audit: type=1400 audit(1777941833.151:244): avc: denied { write } for pid=5978 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.717407][ T40] audit: type=1400 audit(1777941833.151:245): avc: denied { sys_module } for pid=5978 comm="syz.3.31" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.798084][ T5988] netlink: 'syz.3.33': attribute type 1 has an invalid length. [ 68.802061][ T5988] netlink: 'syz.3.33': attribute type 4 has an invalid length. [ 68.804690][ T5988] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.33'. [ 68.842616][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 68.843261][ T40] audit: type=1400 audit(1777941833.291:246): avc: denied { nlmsg_read } for pid=5990 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.869302][ T40] audit: type=1400 audit(1777941833.311:247): avc: denied { create } for pid=5992 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.871133][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.877463][ T40] audit: type=1400 audit(1777941833.331:248): avc: denied { bind } for pid=5992 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.912312][ T10] usb 5-1: device descriptor read/8, error -71 [ 68.916306][ T5993] Zero length message leads to an empty skb [ 68.921000][ T40] audit: type=1400 audit(1777941833.361:249): avc: denied { getopt } for pid=5992 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.095970][ T6003] gretap0: entered allmulticast mode [ 69.161880][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.191966][ T10] usb 5-1: device descriptor read/8, error -71 [ 69.302513][ T10] usb usb5-port1: unable to enumerate USB device [ 69.363552][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 69.381452][ T5737] Bluetooth: hci0: command tx timeout [ 69.381527][ T5747] Bluetooth: hci2: command tx timeout [ 69.461404][ T5737] Bluetooth: hci3: command tx timeout [ 69.462235][ T5747] Bluetooth: hci1: command tx timeout [ 69.482688][ T6025] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 69.507079][ T6036] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 69.511174][ T6036] overlayfs: missing 'lowerdir' [ 69.739088][ T6045] input: syz1 as /devices/virtual/input/input5 [ 69.921561][ T6057] (syz.2.56,6057,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 69.925499][ T6057] (syz.2.56,6057,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 70.090629][ T6074] vlan0: entered allmulticast mode [ 70.093611][ T6074] bond0: entered allmulticast mode [ 70.095722][ T6074] bond_slave_0: entered allmulticast mode [ 70.098526][ T6074] bond_slave_1: entered allmulticast mode [ 70.134792][ T6081] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 70.163789][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 70.177372][ T6084] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 70.183104][ T6084] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 70.190935][ T6084] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 70.196107][ T6084] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 70.202595][ T6084] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 70.229557][ T6086] netlink: 14 bytes leftover after parsing attributes in process `syz.2.63'. [ 70.249938][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.251642][ T1259] smbdirect: ib_dev[syz1] removed [ 70.259421][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.263683][ T6086] bond0 (unregistering): Released all slaves [ 70.281398][ T6084] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 70.281398][ T6084] program syz.2.63 not setting count and/or reply_len properly [ 70.299316][ T6084] gfs2: error -5 reading superblock [ 70.758368][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.763022][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.827744][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.837420][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.917885][ T88] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.921588][ T88] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.927858][ T88] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.931007][ T88] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.119467][ T6137] netlink: 'syz.1.80': attribute type 4 has an invalid length. [ 71.125109][ T6137] netlink: 'syz.1.80': attribute type 1 has an invalid length. [ 71.150630][ T6136] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 71.264467][ T6152] netlink: 14 bytes leftover after parsing attributes in process `syz.1.84'. [ 71.286821][ T6152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.292210][ T6152] bond_slave_0: left allmulticast mode [ 71.298071][ T6152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.302917][ T6152] bond_slave_1: left allmulticast mode [ 71.305557][ T6152] bond0 (unregistering): Released all slaves [ 71.313465][ T6159] tmpfs: Bad value for 'mpol' [ 71.315626][ T6159] netlink: 'syz.3.88': attribute type 13 has an invalid length. [ 71.461694][ T5747] Bluetooth: hci0: command tx timeout [ 71.547568][ T6171] netlink: 'syz.3.93': attribute type 5 has an invalid length. [ 71.551370][ T5747] Bluetooth: hci1: command tx timeout [ 71.551416][ T5737] Bluetooth: hci3: command tx timeout [ 71.558122][ T6171] ip6erspan0: entered promiscuous mode [ 71.599243][ T6179] Bluetooth: MGMT ver 1.23 [ 71.683614][ T6184] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 71.687184][ T6184] CPU: 2 UID: 0 PID: 6184 Comm: syz.3.99 Tainted: G L syzkaller #0 PREEMPT(full) [ 71.687202][ T6184] Tainted: [L]=SOFTLOCKUP [ 71.687206][ T6184] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 71.687213][ T6184] Call Trace: [ 71.687242][ T6184] [ 71.687247][ T6184] dump_stack_lvl+0x100/0x190 [ 71.687285][ T6184] sysfs_warn_dup.cold+0x1c/0x28 [ 71.687322][ T6184] sysfs_do_create_link_sd+0x113/0x140 [ 71.687363][ T6184] sysfs_create_link+0x61/0xc0 [ 71.687377][ T6184] device_add+0x675/0x1950 [ 71.687396][ T6184] ? __pfx_device_add+0x10/0x10 [ 71.687408][ T6184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.687440][ T6184] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 71.687469][ T6184] wiphy_register+0x1edd/0x2d90 [ 71.687481][ T6184] ? __rtnl_unlock+0xb9/0xf0 [ 71.687497][ T6184] ? __pfx_wiphy_register+0x10/0x10 [ 71.687510][ T6184] ? __asan_memset+0x23/0x50 [ 71.687544][ T6184] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 71.687565][ T6184] ieee80211_register_hw+0x3055/0x4570 [ 71.687588][ T6184] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 71.687608][ T6184] ? __pfx___debug_object_init+0x10/0x10 [ 71.687627][ T6184] ? find_held_lock+0x2b/0x80 [ 71.687655][ T6184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 71.687669][ T6184] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 71.687683][ T6184] ? __hrtimer_setup+0x208/0x330 [ 71.687718][ T6184] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 71.687745][ T6184] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 71.687764][ T6184] ? __asan_memcpy+0x3c/0x60 [ 71.687782][ T6184] hwsim_new_radio_nl+0xc5f/0x1370 [ 71.687798][ T6184] ? rcu_is_watching+0x12/0xc0 [ 71.687817][ T6184] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 71.687838][ T6184] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 71.687855][ T6184] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 71.687873][ T6184] genl_family_rcv_msg_doit+0x214/0x300 [ 71.687889][ T6184] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 71.687909][ T6184] ? bpf_lsm_capable+0x9/0x10 [ 71.687940][ T6184] ? security_capable+0x80/0x260 [ 71.687957][ T6184] ? ns_capable+0xd2/0xf0 [ 71.688001][ T6184] genl_rcv_msg+0x560/0x800 [ 71.688025][ T6184] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.688046][ T6184] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 71.688071][ T6184] ? __lock_acquire+0x4a5/0x2630 [ 71.688092][ T6184] netlink_rcv_skb+0x159/0x420 [ 71.688105][ T6184] ? __pfx_genl_rcv_msg+0x10/0x10 [ 71.688120][ T6184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.688139][ T6184] ? netlink_deliver_tap+0x1ae/0xcc0 [ 71.688153][ T6184] genl_rcv+0x28/0x40 [ 71.688166][ T6184] netlink_unicast+0x585/0x850 [ 71.688181][ T6184] ? __pfx_netlink_unicast+0x10/0x10 [ 71.688197][ T6184] netlink_sendmsg+0x8b0/0xda0 [ 71.688213][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.688225][ T6184] ? pti_set_user_pgtbl+0x30/0x50 [ 71.688266][ T6184] ____sys_sendmsg+0x9e1/0xb70 [ 71.688279][ T6184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.688294][ T6184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.688311][ T6184] ? __pfx_futex_wake_mark+0x10/0x10 [ 71.688342][ T6184] ___sys_sendmsg+0x190/0x1e0 [ 71.688357][ T6184] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.688389][ T6184] __sys_sendmsg+0x170/0x220 [ 71.688406][ T6184] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.688423][ T6184] ? __x64_sys_futex+0x34f/0x4d0 [ 71.688445][ T6184] ? rcu_is_watching+0x12/0xc0 [ 71.688464][ T6184] do_syscall_64+0x10b/0xf80 [ 71.688477][ T6184] ? clear_bhb_loop+0x40/0x90 [ 71.688490][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.688501][ T6184] RIP: 0033:0x7f0e0239cdd9 [ 71.688511][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.688522][ T6184] RSP: 002b:00007f0e0317c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.688532][ T6184] RAX: ffffffffffffffda RBX: 00007f0e02615fa0 RCX: 00007f0e0239cdd9 [ 71.688539][ T6184] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 71.688546][ T6184] RBP: 00007f0e02432d69 R08: 0000000000000000 R09: 0000000000000000 [ 71.688552][ T6184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.688560][ T6184] R13: 00007f0e02616038 R14: 00007f0e02615fa0 R15: 00007fff05fe2998 [ 71.688575][ T6184] [ 71.955652][ T6202] __nla_validate_parse: 1 callbacks suppressed [ 71.955669][ T6202] netlink: 76 bytes leftover after parsing attributes in process `syz.3.104'. [ 71.971201][ T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 72.005174][ T6207] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 72.129706][ T50] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 72.135093][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.139232][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.145771][ T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 72.156999][ T50] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 72.161490][ T50] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 72.165355][ T50] usb 7-1: Manufacturer: syz [ 72.175188][ T50] usb 7-1: config 0 descriptor?? [ 72.605376][ T50] usbhid 7-1:0.0: can't add hid device: -71 [ 72.609241][ T50] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 72.609596][ T6236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6236 comm=syz.3.114 [ 72.634363][ T50] usb 7-1: USB disconnect, device number 2 [ 72.822926][ T6258] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 72.965668][ T6268] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 72.969406][ T6266] [U] J"—E:ÀÆ" [ 73.271473][ T6284] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 73.426034][ T6299] netlink: 96 bytes leftover after parsing attributes in process `syz.1.135'. [ 73.643515][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 73.643527][ T40] audit: type=1400 audit(1777941838.091:372): avc: denied { allowed } for pid=6322 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.678013][ T40] audit: type=1400 audit(1777941838.121:373): avc: denied { create } for pid=6322 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.704410][ T40] audit: type=1400 audit(1777941838.141:374): avc: denied { ioctl } for pid=6322 comm="syz.0.141" path="socket:[14591]" dev="sockfs" ino=14591 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.731919][ T40] audit: type=1400 audit(1777941838.171:375): avc: denied { getopt } for pid=6326 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.789684][ T6330] fuse: Bad value for 'fd' [ 73.794728][ T40] audit: type=1400 audit(1777941838.241:376): avc: denied { append } for pid=6329 comm="syz.1.145" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.804634][ T40] audit: type=1400 audit(1777941838.241:377): avc: denied { ioctl } for pid=6329 comm="syz.1.145" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.810169][ T6330] exFAT-fs (nbd0): unable to read boot sector [ 73.818949][ T6330] exFAT-fs (nbd0): failed to read boot sector [ 73.821754][ T6330] exFAT-fs (nbd0): failed to recognize exfat type [ 73.826182][ T6333] ------------[ cut here ]------------ [ 73.829166][ T6333] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 73.829176][ T6333] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1992/0x22c0, CPU#0: syz.2.146/6333 [ 73.837827][ T6333] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 73.839824][ T6333] CPU: 0 UID: 60928 PID: 6333 Comm: syz.2.146 Tainted: G L syzkaller #0 PREEMPT(full) [ 73.844577][ T6333] Tainted: [L]=SOFTLOCKUP [ 73.845971][ T6333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.849848][ T6333] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 73.852445][ T6333] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 3f 9a 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 31 9a 85 00 48 85 db 0f 84 e9 ed ff ff [ 73.859760][ T6333] RSP: 0018:ffffc90006d6f250 EFLAGS: 00010293 [ 73.862670][ T6333] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff8182d8e9 [ 73.866020][ T6333] RDX: ffff888033dc2500 RSI: ffffffff8182f1a1 RDI: ffff888033dc2500 [ 73.869911][ T6333] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 73.873469][ T6333] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 73.877668][ T6333] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90006d6f468 [ 73.881721][ T6333] FS: 00007f894ec546c0(0000) GS:ffff8880d6376000(0000) knlGS:0000000000000000 [ 73.888187][ T6333] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.891559][ T6333] CR2: 00007f894dc72700 CR3: 000000003264d000 CR4: 0000000000352ef0 [ 73.894296][ T6333] Call Trace: [ 73.895477][ T6333] [ 73.896512][ T6333] ? find_held_lock+0x2b/0x80 [ 73.898140][ T6333] ? __pfx___mutex_lock+0x10/0x10 [ 73.900076][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 73.902223][ T6333] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 73.904396][ T6333] kvm_gpc_refresh+0xc9/0x170 [ 73.904727][ T6336] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 73.906239][ T6333] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 73.908480][ T6336] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 73.910618][ T6333] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 73.915646][ T6333] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 73.917805][ T6333] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 73.918927][ T6336] vhci_hcd vhci_hcd.0: Device attached [ 73.920280][ T6333] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 73.920337][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 73.920363][ T6333] ? arch_stack_walk+0xa6/0xf0 [ 73.920422][ T6333] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 73.920444][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 73.920469][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 73.920494][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 73.920525][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 73.920564][ T6333] ? is_bpf_text_address+0x8a/0x1a0 [ 73.920613][ T6333] ? bpf_ksym_find+0x128/0x1c0 [ 73.920641][ T6333] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 73.920664][ T6333] ? is_bpf_text_address+0x94/0x1a0 [ 73.920688][ T6333] ? kernel_text_address+0x8d/0x100 [ 73.920712][ T6333] ? __pfx_widen_string+0x10/0x10 [ 73.920742][ T6333] ? __kernel_text_address+0xd/0x30 [ 73.920767][ T6333] ? unwind_get_return_address+0x59/0xa0 [ 73.920826][ T6333] ? arch_stack_walk+0xa6/0xf0 [ 73.920861][ T6333] ? tomoyo_path_number_perm+0x46d/0x580 [ 73.920886][ T6333] ? stack_trace_save+0x8e/0xc0 [ 73.920907][ T6333] ? __pfx_stack_trace_save+0x10/0x10 [ 73.920930][ T6333] ? stack_depot_save_flags+0x27/0x9d0 [ 73.920960][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 73.920986][ T6333] ? tomoyo_path_number_perm+0x46d/0x580 [ 73.921010][ T6333] ? kasan_save_stack+0x3f/0x50 [ 73.921038][ T6333] ? kasan_save_stack+0x30/0x50 [ 73.978328][ T6333] ? kasan_save_track+0x14/0x30 [ 73.980560][ T6333] ? kasan_save_free_info+0x3b/0x70 [ 73.983062][ T6333] kvm_vm_ioctl+0x1564/0x4050 [ 73.985261][ T6333] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 73.987674][ T6333] ? kasan_quarantine_put+0x104/0x240 [ 73.990360][ T6333] ? lockdep_hardirqs_on+0x78/0x100 [ 73.993093][ T6333] ? find_held_lock+0x2b/0x80 [ 73.995204][ T6333] ? tomoyo_path_number_perm+0x28f/0x580 [ 73.997681][ T6333] ? tomoyo_path_number_perm+0x28f/0x580 [ 74.000214][ T6333] ? tomoyo_path_number_perm+0x188/0x580 [ 74.002919][ T6333] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.005556][ T6333] ? futex_wake+0x1ad/0x530 [ 74.007603][ T6333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.010214][ T6333] ? do_vfs_ioctl+0x226/0x13e0 [ 74.012536][ T6333] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.014775][ T6333] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.017893][ T6333] ? __fget_files+0x215/0x3d0 [ 74.020202][ T6333] ? hook_file_ioctl_common+0x149/0x410 [ 74.022905][ T6333] ? selinux_file_ioctl+0x13b/0x290 [ 74.025230][ T6333] ? selinux_file_ioctl+0xb6/0x290 [ 74.027518][ T6333] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 74.029770][ T6333] __x64_sys_ioctl+0x18e/0x210 [ 74.032079][ T6333] do_syscall_64+0x10b/0xf80 [ 74.034149][ T6333] ? clear_bhb_loop+0x40/0x90 [ 74.035814][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.037767][ T6333] RIP: 0033:0x7f894dd9cdd9 [ 74.039302][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.045688][ T6333] RSP: 002b:00007f894ec54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.048444][ T6333] RAX: ffffffffffffffda RBX: 00007f894e015fa0 RCX: 00007f894dd9cdd9 [ 74.051114][ T6333] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000007 [ 74.054310][ T6333] RBP: 00007f894de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 74.057351][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.060426][ T6333] R13: 00007f894e016038 R14: 00007f894e015fa0 R15: 00007ffe7d9b6db8 [ 74.063555][ T6333] [ 74.064897][ T6333] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.067785][ T6333] CPU: 0 UID: 60928 PID: 6333 Comm: syz.2.146 Tainted: G L syzkaller #0 PREEMPT(full) [ 74.072164][ T6333] Tainted: [L]=SOFTLOCKUP [ 74.074124][ T6333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 74.078702][ T6333] Call Trace: [ 74.080288][ T6333] [ 74.081691][ T6333] dump_stack_lvl+0x100/0x190 [ 74.083961][ T6333] vpanic+0x552/0x970 [ 74.085880][ T6333] ? __pfx_vpanic+0x10/0x10 [ 74.087983][ T6333] panic+0xd1/0xe0 [ 74.089710][ T6333] ? __pfx_panic+0x10/0x10 [ 74.091777][ T6333] ? check_panic_on_warn+0x1f/0x90 [ 74.094117][ T6333] check_panic_on_warn.cold+0x19/0x34 [ 74.096555][ T6333] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 74.098972][ T6333] __warn.cold+0x191/0x328 [ 74.101021][ T6333] __report_bug+0x296/0x3d0 [ 74.103120][ T6333] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 74.105496][ T6333] ? __pfx___report_bug+0x10/0x10 [ 74.107797][ T6333] ? lockdep_unlock+0x5a/0xc0 [ 74.109930][ T6333] ? __lock_acquire+0xd73/0x2630 [ 74.112313][ T6333] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 74.114924][ T6333] report_bug+0xb2/0x220 [ 74.116956][ T6333] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 74.119367][ T6333] handle_bug+0x16a/0x2a0 [ 74.121346][ T6333] exc_invalid_op+0x17/0x50 [ 74.123458][ T6333] asm_exc_invalid_op+0x1a/0x20 [ 74.125656][ T6333] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 74.128335][ T6333] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 3f 9a 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 31 9a 85 00 48 85 db 0f 84 e9 ed ff ff [ 74.136800][ T6333] RSP: 0018:ffffc90006d6f250 EFLAGS: 00010293 [ 74.139557][ T6333] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff8182d8e9 [ 74.143062][ T6333] RDX: ffff888033dc2500 RSI: ffffffff8182f1a1 RDI: ffff888033dc2500 [ 74.146605][ T6333] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 74.150135][ T6333] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 74.153707][ T6333] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc90006d6f468 [ 74.157225][ T6333] ? __kvm_gpc_refresh+0xd9/0x22c0 [ 74.159548][ T6333] ? __kvm_gpc_refresh+0x1991/0x22c0 [ 74.161934][ T6333] ? find_held_lock+0x2b/0x80 [ 74.164056][ T6333] ? __pfx___mutex_lock+0x10/0x10 [ 74.166333][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 74.168605][ T6333] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 74.171111][ T6333] kvm_gpc_refresh+0xc9/0x170 [ 74.173281][ T6333] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 74.175802][ T6333] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 74.178469][ T6333] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 74.180971][ T6333] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 74.183732][ T6333] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 74.186072][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 74.188350][ T6333] ? arch_stack_walk+0xa6/0xf0 [ 74.190571][ T6333] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 74.193059][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 74.195243][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 74.197341][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 74.199554][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 74.201710][ T6333] ? is_bpf_text_address+0x8a/0x1a0 [ 74.203974][ T6333] ? bpf_ksym_find+0x128/0x1c0 [ 74.206161][ T6333] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 74.208741][ T6333] ? is_bpf_text_address+0x94/0x1a0 [ 74.211048][ T6333] ? kernel_text_address+0x8d/0x100 [ 74.213355][ T6333] ? __pfx_widen_string+0x10/0x10 [ 74.215601][ T6333] ? __kernel_text_address+0xd/0x30 [ 74.217854][ T6333] ? unwind_get_return_address+0x59/0xa0 [ 74.220360][ T6333] ? arch_stack_walk+0xa6/0xf0 [ 74.222345][ T6333] ? tomoyo_path_number_perm+0x46d/0x580 [ 74.224830][ T6333] ? stack_trace_save+0x8e/0xc0 [ 74.226814][ T6333] ? __pfx_stack_trace_save+0x10/0x10 [ 74.229046][ T6333] ? stack_depot_save_flags+0x27/0x9d0 [ 74.231399][ T6333] ? __lock_acquire+0x4a5/0x2630 [ 74.233487][ T6333] ? tomoyo_path_number_perm+0x46d/0x580 [ 74.235884][ T6333] ? kasan_save_stack+0x3f/0x50 [ 74.237989][ T6333] ? kasan_save_stack+0x30/0x50 [ 74.240067][ T6333] ? kasan_save_track+0x14/0x30 [ 74.242351][ T6333] ? kasan_save_free_info+0x3b/0x70 [ 74.244507][ T6333] kvm_vm_ioctl+0x1564/0x4050 [ 74.246491][ T6333] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 74.248632][ T6333] ? kasan_quarantine_put+0x104/0x240 [ 74.250611][ T6333] ? lockdep_hardirqs_on+0x78/0x100 [ 74.252374][ T6333] ? find_held_lock+0x2b/0x80 [ 74.253929][ T6333] ? tomoyo_path_number_perm+0x28f/0x580 [ 74.255793][ T6333] ? tomoyo_path_number_perm+0x28f/0x580 [ 74.257633][ T6333] ? tomoyo_path_number_perm+0x188/0x580 [ 74.259510][ T6333] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.261483][ T6333] ? futex_wake+0x1ad/0x530 [ 74.263037][ T6333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.264989][ T6333] ? do_vfs_ioctl+0x226/0x13e0 [ 74.266592][ T6333] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.268253][ T6333] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.270500][ T6333] ? __fget_files+0x215/0x3d0 [ 74.272143][ T6333] ? hook_file_ioctl_common+0x149/0x410 [ 74.273973][ T6333] ? selinux_file_ioctl+0x13b/0x290 [ 74.275700][ T6333] ? selinux_file_ioctl+0xb6/0x290 [ 74.277386][ T6333] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 74.279079][ T6333] __x64_sys_ioctl+0x18e/0x210 [ 74.280695][ T6333] do_syscall_64+0x10b/0xf80 [ 74.282279][ T6333] ? clear_bhb_loop+0x40/0x90 [ 74.283778][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.285702][ T6333] RIP: 0033:0x7f894dd9cdd9 [ 74.287192][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.293485][ T6333] RSP: 002b:00007f894ec54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.296243][ T6333] RAX: ffffffffffffffda RBX: 00007f894e015fa0 RCX: 00007f894dd9cdd9 [ 74.298781][ T6333] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000007 [ 74.301399][ T6333] RBP: 00007f894de32d69 R08: 0000000000000000 R09: 0000000000000000 [ 74.304065][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.306679][ T6333] R13: 00007f894e016038 R14: 00007f894e015fa0 R15: 00007ffe7d9b6db8 [ 74.309287][ T6333] [ 74.311139][ T6333] Kernel Offset: disabled [ 74.312590][ T6333] Rebooting in 86400 seconds..