last executing test programs: 7m39.201909619s ago: executing program 32 (id=1304): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) close(0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002340), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f00000023c0)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELTABLE={0x15c, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x39, 0x6, "fed5f8b7f8af84e5d7fc6baaed72ade96b068c2b61733b35be04443f22b995cdbc55016bf4fff8a156fd832ddb2ce963d6abdb6379"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "bbdbc04f3ef4991d112bba4452b97a535ecc713924ed992fd66d7a5c40ef3f9c2ae0c591960b98ca8fa862147a28a78a9a726d27a6baa7c82e3712acf8f61482c8e96f0ca7852074378bfec0f80b8b22a20465db6320f23eb3f1627fd1c09452aacbe7fa7d588653629b852f704252e042d50f6999d5f1df4abd3ed8d75c358a7643d0e7618e11b1376c73dade0156c88579dfb04741c4067a49d01b475b64375b8566c5715e548b9754d575a7db24842951ee289d3ee2e38900984678c865b62a99804d2c858b2a41cfb231"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 7m34.997812019s ago: executing program 33 (id=1358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1159b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x200}]}}}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'geneve1\x00', 0x2000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) 4m10.384625935s ago: executing program 34 (id=3533): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000001c0)=0x8001, 0x4) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) listen(r0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$midi(0x1, 0x76, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x34, 0x0, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0xc, [@ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x3}, @ms_header={0x7, 0x24, 0x1, 0xe, 0x7}, @midi_out_jack={0x19, 0x24, 0x3, 0x0, 0xfe, 0x9, [{0x10, 0x3f}, {0x3, 0x3}, {0xfe, 0x7f}, {0x0, 0xb}, {0x3, 0x4}, {0x6, 0x2}, {0x8, 0xf}, {0x8}, {0x1, 0xe}], 0x8}], [{{0x9, 0x5, 0xd, 0x10, 0x400, 0xa, 0x8, 0x8, {0x9, 0x25, 0x1, 0x5, "5b434ef953"}}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0xf5, 0x1, 0xe, {0xa, 0x25, 0x1, 0x6, "665db4b80496"}}}]}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x9, 0xed, 0x0, 0x10, 0x2}, 0x37, &(0x7f0000000600)={0x5, 0xf, 0x37, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x4, 0xfffd, 0xb}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x0, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0xb, 0x5, 0x7ffffff, 0xff00, 0x8, [0xffc0cf, 0xf, 0x9f0f, 0x0, 0xcf]}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'vlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x1, 0x19c1}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000660000000800030023c05d5e404e56dc333ee90fc48582dec5dfba067aa0c03fd1e27a39c936255be635d995784b2a3d817d4b203e160dd7fffd9127", @ANYRES32=r7, @ANYBLOB="08002600940900000400b8000800b70099000000"], 0x30}}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x0, 0x1, 0xffffffff, 0x81, 0xffffffff}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000001800010018000000040000000100000000000010040000000e00000000000012050000000061000073ef993da2b79447fe3f67f919a1cbe27ba28e7d5272dbdc07435c233429cf84316db8d236936fad0eef2137940fe1df37dc4b4b71a6e5ed08294cd19220eda316cafafba9d26a852f9e21877862e25375bde02d9562970fbf586a9fcf1a421b9c4eebf9411a9d834041fb3dfab887b9b8c58410"], &(0x7f00000002c0)=""/83, 0x34, 0x53, 0x1, 0xcbd, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r11, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r13 = socket$netlink(0x10, 0x3, 0x4) write(r13, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2m57.094538581s ago: executing program 35 (id=4603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m5.986917579s ago: executing program 36 (id=4992): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0xde, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2, 0x10000, 0xe, 0xf0, 0x44, 0xfd, 0xd4, 0xd4, 0x67, 0x4, 0x7, 0x78}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0xa3, 0x6, 0x8, 0xc, 0x2, 0x3, 0xca}, {0x3000, 0xe6e50002, 0x3, 0x2, 0x2, 0x5, 0x8, 0x5, 0xc, 0xb, 0xff, 0x5}, {0x80a0000, 0x6000, 0xb, 0x7, 0x1, 0x44, 0x2, 0x6, 0x6, 0x3, 0x0, 0xdb}, {0x4, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0x10, 0xc}, {0x2, 0xe000, 0x0, 0x7, 0x3, 0xe1, 0x1, 0xff, 0x4, 0x7c, 0x1, 0xa}, {0xeeee8000, 0x1000, 0x6, 0x5, 0xf, 0x38, 0xfd, 0xb, 0x0, 0x80, 0x4, 0x58}, {0xffff1000, 0x8000000, 0xd, 0x45, 0x3, 0x1, 0xa, 0x9, 0x54, 0x43, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x6}, 0x2, 0x0, 0x4000, 0x436d, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff49, 0x4, 0x9000000000000, 0x3]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x1, 0x0, [{0x7, 0x2, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x45, 0xb3, 0x81, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x6, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x0, 0xb6, 0x89, '\x00', 0x80}, {0x6, 0xa, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x3, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x8}, {0xd, 0x10, 0x8c, '\x00', 0x7}, {0x0, 0xc0, 0x7, '\x00', 0x3}, {0x8, 0x2, 0xf6, '\x00', 0x2}, {0x7, 0x1, 0x8, '\x00', 0x5}, {0x9, 0x40, 0xfa, '\x00', 0x5}, {0x1, 0x4, 0xbc, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xb7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0x99, 0x2, '\x00', 0xff}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000800)={[0x9, 0x2, 0x100000000, 0x5, 0xed3, 0x6, 0x101, 0x2, 0x0, 0x0, 0x8, 0x7f, 0x3b, 0x57, 0x9], 0x3000, 0x1004}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m3.449623437s ago: executing program 37 (id=5021): r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'batadv0\x00', {}, 0x9}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) ppoll(&(0x7f0000000480)=[{r4, 0x2000}], 0x1, &(0x7f0000000500), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1m12.039361169s ago: executing program 8 (id=5900): mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$getflags(r1, 0x403) r2 = open(&(0x7f0000000300)='.\x00', 0x1500, 0x0) fcntl$setsig(r2, 0xa, 0x5) flock(r2, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x2}, &(0x7f0000000180)=0x8) syz_emit_ethernet(0x87a2f, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) finit_module(r2, &(0x7f0000000000)='\x00', 0x1) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r6, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) recvmsg$can_raw(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=""/132, 0x84}, 0x2020) 1m11.580957159s ago: executing program 8 (id=5901): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) syz_clone(0x0, &(0x7f00000013c0)="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", 0x1047, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)="45848cafb2165aa60f9a3fa988d336a2e4d693b5e7e338b4d5beedc495a2757a7f90700854ca7b47edc032c90e6e96918a7670da152798b563c697c6321d2210e767c9c92b89e722c0373f1f0e334563833f8b727b1648968d10f7ada6a979e91c27783fb7107c0ed3b98f56586cd26cb89a7420d5") ptrace$cont(0x19, r2, 0xc, 0x274b) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x50c, 0x1fd, r2}) unlink(&(0x7f0000000100)='./file0\x00') (async) unlink(&(0x7f0000000100)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m10.680017202s ago: executing program 8 (id=5909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_clone(0x43028080, 0x0, 0x18, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xc4, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffff0f, 0x70}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x35, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @fd=r0}]}]}, 0x20}}, 0x0) 1m5.375123653s ago: executing program 38 (id=5789): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x2000, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0xad, 0xb3, @buffer={0x0, 0x1d, &(0x7f0000000040)=""/29}, &(0x7f0000000100)="87e9af1f1ebfc43b1a99c51a4cc15a3878af18663dc33e6674742ec72450a77b036936d06a72c4010033c13833611434c2d6c27bc2711d9af56b18a5642c9c0b8d3195dc0817b519266d0de21d1002487c3706b87d777f7a46fa2a1fe5e439f254f49949001bcb3e63ad9e817867efca377e9cb4b951809c6978e8466e1f88156e98b6f1107496af01d71a07705a57954de4d8ba2281b006e44b771554a2c87c4eab0d368c5919779df868bf30", &(0x7f0000000080)=""/43, 0x12c, 0x10000, 0x1, &(0x7f00000001c0)}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000280)={0x0, 0x4}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) sync() ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db1cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1m3.193986293s ago: executing program 9 (id=5961): madvise(&(0x7f0000bdd000/0x4000)=nil, 0x4000, 0xe) (async) madvise(&(0x7f0000bdd000/0x4000)=nil, 0x4000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, r1, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xffffffffffffffcd, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)={0x54, r1, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xffffffffffffffcd, 0x8f, 0xfffffffffffffffa}, {0xc, 0x90, 0xfffffffffffffff8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x44004) r2 = getpid() mremap(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000bdf000/0x3000)=nil) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x44200, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000000)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_pidfd_open(r2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000000c0)={0xc94, 0x18, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) setns(r7, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x106, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r8, 0x104, 0x2, 0x0, &(0x7f0000000040)) (async) getsockopt$rose(r8, 0x104, 0x2, 0x0, &(0x7f0000000040)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c"], 0xfc}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r10, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000000), 0x880) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RGETLOCK(r11, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x2, 0x7, 0x10001, r2, 0x1, '\''}}, 0x1f) (async) write$P9_RGETLOCK(r11, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x2, 0x7, 0x10001, r2, 0x1, '\''}}, 0x1f) 1m2.420277497s ago: executing program 9 (id=5967): accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffff8001}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x55a9}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x4800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x98, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x9, @private2, 0x1}, @in6={0xa, 0x4e21, 0x8, @loopback, 0xfffffffa}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000280)=0x10) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x98, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x9, @private2, 0x1}, @in6={0xa, 0x4e21, 0x8, @loopback, 0xfffffffa}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={r2, 0x3}, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x408002, 0x0) (async) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x408002, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=@unlock_all, 0xb) (async) write$vga_arbiter(r3, &(0x7f0000000340)=@unlock_all, 0xb) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000003c0)={0x10003, 0x38a5e1b262bd1e00, 0x7000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) getpeername$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) (async) getpeername$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@newtfilter={0x2c, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7, 0xb}, {0xb, 0xffff}, {0xfff3, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f0000000640)={&(0x7f0000000580)=[{0x5, 0x4, 0x7, 0x6}, {0x1000, 0x0, 0x87, 0x1}, {0x5, 0x0, 0x380000, 0x9}, {0x5, 0x9, 0x5, 0x6}, {0x1, 0x5, 0x10001, 0xb}, {0x8001, 0x0, 0x5, 0x6}], 0x6, 0x20, 0xb23, 0xe}) r6 = socket$inet6_sctp(0xa, 0xb, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1, 0x8}}, 0x8, 0x3}, 0x90) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x4, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xcd}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200080d1}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000880)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) (async) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000bc0)={0xffffffffffffffff, &(0x7f0000000ac0)='^!', 0x420000, &(0x7f0000000b00)={@_ha_fsid={[0x120, 0x8]}, {0xe1, 0x56b, 0x6, 0x4}}, 0x2, &(0x7f0000000b40)={@_ha_fsid}, &(0x7f0000000b80)=0xf}) sendmsg$inet6(r8, &(0x7f0000000e80)={&(0x7f0000000c00)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10001}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="00a6a09106bad8c197e3cc8e5089300925b8dd1930555f373832aeed58e41ad5260d0d6a223a7dffa18b38ac8ded5edaa220e73f6a2f3111e1c74e5261a73a1c4cc36c64e7f4ac539a37e953360abce6b16f106235612af6fa95786cd2b7728c", 0x60}, {&(0x7f0000000cc0)="4912646ba491d86676746f9f41c890ea4fd6305001db539f1c6c4529410da0e5d22ab3e5f5d9ba7a0d2926276f5c1813f6b05987c6d03dec2eba9731ef14baff90fd289b7d1b89576770b143c4d2de2e91219050b56a0c7660a47aded1f21758e9b1cc3e06f0254ac2ca485a45ce39bdb7eb98dcc04600f57379c39437c764e1f259b686da1f10dfb30a80648760dcf9da4a64fda53311c3e150cdd6dd1db781c66fab127a29a6c1fbbb60f5d88e641f4956c25e0aadc94ee6621378e5c8dbf4a41af411b44b0137f124c9f8b061cd20cfdd4bbd018b0ac0", 0xd8}], 0x2, &(0x7f0000000e00)=[@hopopts={{0x50, 0x29, 0x36, {0x32, 0x7, '\x00', [@generic={0x4, 0x2e, "2590e07ff475966d302c4c47f0efd296cabd1f0690fe39e4b2756274f501638c16ddfa248e9046234bf3c4e4ac3b"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x50}, 0x4000011) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000ec0)=@sack_info={r2, 0x5, 0x8}, &(0x7f0000000f00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000f40)={{{@in6=@private1, @in6}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000001040)=0xe8) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000001080)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000001080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r8, 0xc08c5334, &(0x7f00000010c0)={0x80000000, 0x9, 0x0, 'queue0\x00', 0x9}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r7, 0x4008941a, &(0x7f0000001180)) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000011c0)=0x16000) (async) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000011c0)=0x16000) socket$kcm(0x29, 0x5, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001200)={{r3}, "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"}) 1m2.290676711s ago: executing program 9 (id=5968): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @generic={0x9, 0x6, 0x3, 0xb1, 0xfffffffc}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1m2.288999199s ago: executing program 9 (id=5969): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc97a, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) listen(r0, 0xa) landlock_restrict_self(r1, 0x0) listen(r0, 0x0) 1m2.199364924s ago: executing program 9 (id=5970): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x78, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3bd9f1d5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3f2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x22}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x94}]}, 0x78}}, 0x4004000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) fcntl$notify(r4, 0x402, 0x0) (async) sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0) (async) r5 = gettid() setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240)=0xd18, 0x4) (async) rt_sigqueueinfo(r5, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x194, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x148, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x58, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x194}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r7, 0x13, 0x0) (async) rt_sigqueueinfo(r7, 0x2e, &(0x7f0000000300)={0x9, 0x5, 0x1}) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) 1m1.770651232s ago: executing program 9 (id=5971): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 55.618434027s ago: executing program 39 (id=5909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_clone(0x43028080, 0x0, 0x18, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xc4, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffffff0f, 0x70}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x35, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @fd=r0}]}]}, 0x20}}, 0x0) 46.010862592s ago: executing program 40 (id=5971): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, 0x0) 40.770002503s ago: executing program 2 (id=6074): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0xa, r2, 0x0, r1}) 40.769764863s ago: executing program 2 (id=6075): r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS_MASK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) fallocate(r0, 0x0, 0x0, 0x400001) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x40010, r0, 0x3d32a000) 40.647026685s ago: executing program 2 (id=6076): r0 = syz_clone(0x0, 0x0, 0xc0, 0x0, 0x0, &(0x7f0000000080)="30ee25") process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/93, 0x5d}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/187, 0xbb}], 0x1, 0x0) (async) process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/93, 0x5d}], 0x1, &(0x7f0000000d40)=[{&(0x7f0000000740)=""/187, 0xbb}], 0x1, 0x0) 40.548990933s ago: executing program 2 (id=6077): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x204, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x420208}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc0100003700010029bd7000fbdbdf2502000000f9dda382c9f10acc4cf6d3e25b19dfe197495f79fa14a4cac84db0e7cca260088815d496b8b49802d1e0e0537901bf144d2d038165ca72e330188fb4a47762bc2c728c12b90c65b09dacc93ea146d7993d83f21cf9b987438a8e147f2d98c13db3f148b7f9233cb547acd4b11b4676683f00118008000200", @ANYRES32=r2, @ANYBLOB="140062002001000000000000000000000000000108006900", @ANYRES32=r3, @ANYBLOB="04003380ca5976eb7685823ed16d5704ba478c24264c3500fc64d61ce892519c8b6b97836592c2bfa13167eba94d7667a333335716668cc734b81619e7bfc734e1e165da3adfcddc7ccddacab98e9e58a0c73b2bc149aa5613cf4e4f497363083c68a91ed86032e1e5eb73e2bd30b9325e917b9072858d0e6ee629bb6ecfd066b6b0abb0605b2dbd44628d91808c2490ce068e1276ab1e4c3f6492177d7521f3b09b4489ac2198eb4eb0deba1eaceb4ac4c60c11da4bfd2c2e1e57ee0d9c2de4cc6fc2dbfe208ba3ea0c63965f76c46b474229f5b74813d51c5af1de62be5199904992bad5f40e19c82bace6cce401238caf76c41d0cada192ffae515239b6cbebe048d328dc2452799ea3409451f0ea"], 0x1bc}, 0x1, 0x0, 0x0, 0x4}, 0x10000) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/80, 0x50}, 0x5}], 0x1, 0x40010000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x2, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000009440)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000300)='*', 0x1}], 0x1, 0x0, 0x0, 0x40}}], 0x1, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x2, 0xc84cf8fe4733a687, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x8, 0x8) 40.380605146s ago: executing program 2 (id=6078): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0xffffffffffffffff, 0x4, 0x8}, 0x4}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x20000000) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 40.30096685s ago: executing program 2 (id=6079): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) lseek(r0, 0xfff7ffffffffff73, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r3, 0x40049409, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000040)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f0000000040)='\x00') ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) 37.250795082s ago: executing program 3 (id=6119): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0xedff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xffff}, 0x80, &(0x7f0000000240)}, 0x20044080) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b69f0291ca820fae9d6dcd3292ea54", 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x2}], 0xf7, 0x0, &(0x7f0000000100)="a9d54c67cec7fa4547baae219f6b4f6374c879839bfbe3855dab9bc34720c004d2689fd2c6cfbc74671ef7318844c89b2e866220162c0ceac67cb101850605e422500da2c347fe30f38c9b5f272810067fa566ac00564af51e8670418484de7109ad6d7a4871c994a664cbbd9881903e7afbd366014566271f2622b54cd1326167b6ac0c6e482869e1c1d147addb68fc5b5b8dc3b648100eb6e48d3669af2913bbde9a18d75d521abc809bc275c1155640df67a7b72b1e1ad48ac6f3f6deda8e8a6a62922602ccabbafd9d7490412ac0c0a70e2502e9ee6482e85b0d302b440b333f98f340102c4e8749be4c13d2288540fd1064b13fd6"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x15, 0x0, &(0x7f0000000280)) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) 37.07198873s ago: executing program 3 (id=6124): unshare(0x8000280) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff08) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x18, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c811}, 0x4000) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE(r3, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$can_raw(0x1d, 0x3, 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003080)={r4, &(0x7f0000002300)="3b58a67128", &(0x7f0000002f80)=""/193}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x100000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x9, 0x9, 0xf, 0x80000006, 0x8000000000000001}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180080000000000000000000000000009500000000100000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r6, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xde8a, 0x0, 0xffffffffffffffff, 0x1000, '\x00', r8, r10, 0x2, 0x0, 0x1}, 0x50) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff07004b1a0400000001bd420004004880100001800c0010800400088004000f800c000200000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 33.998166519s ago: executing program 3 (id=6169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x2) (rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001e80)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (rerun: 64) 33.809211023s ago: executing program 3 (id=6174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a280000000c0a010200000000000000000200000308000440000000010900020073797a310000000030000000000a01080000000000000000050000090900010073797a3000000000040006000900010073797a3100000000140000000c0a020200000000000000000200000620000000000a01030000000000000000010000080900010073797a310000000030000000160a01040000000000000000050000090900010073797a310000000004000380090002"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0xc840) openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x88000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x9901) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r2, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32, @ANYBLOB="1b0001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1f) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000032680)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 33.490053071s ago: executing program 3 (id=6178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000008a99cb09f80000400000"], 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 32.419539516s ago: executing program 3 (id=6185): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedreceive(r1, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d65b1f34", @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb25210000330882d200", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) syz_open_dev$media(&(0x7f00000012c0), 0x62, 0x725203) 32.303975235s ago: executing program 41 (id=6185): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedreceive(r1, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d65b1f34", @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb25210000330882d200", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) syz_open_dev$media(&(0x7f00000012c0), 0x62, 0x725203) 25.248244668s ago: executing program 42 (id=6079): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) lseek(r0, 0xfff7ffffffffff73, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r3, 0x40049409, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, &(0x7f0000000040)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40046201, &(0x7f0000000040)='\x00') ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) 24.530119884s ago: executing program 6 (id=6247): syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x9, 0x14000) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004074}, 0x4000844) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x15}, 0x20) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r4, 0x1, 0x3d, 0x0, &(0x7f0000000100)) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfffffffffffffffc, 0x100000) 24.470005828s ago: executing program 6 (id=6249): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@fwd={0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x8, 0x0, 0x0, 0xf, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x46}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800011702000000fcffff7f00000000000000000c00020001000000040000000800010001"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 24.398606699s ago: executing program 6 (id=6252): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x10001, {0x3ffffffffffffffc, 0xfffffff7, 0x0, '\x00', {0x2fff, 0x80000, 0x8000000000010000, 0x904, r2, r3, 0xc000, '\x00', 0x8, 0x27efc00800000, 0x81, 0x3, {0xa, 0x3ff}, {0xa, 0x7fff}, {0x5, 0x1}, {0xffffffffe, 0xa03}, 0x80008001, 0xa, 0xfffffffe, 0x5}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0xffffffff, 0x5000145, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r4, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "5ccc4d7e83cf2134148d201d1a5ec3c278ab1d7a5f46bd8423f0dea408817bad", "146d2e1133e7bc1a4f3a3b06e63746c47c7f68d7e3d6b785795fdc68d94c0b4a", "f203b1df578bfd30116a43e42d764d9de85464edfadef5f4039622b74b035f4e", "151dc9949e69c4fd2a112a36c00b330695aaca7b9e25a645d59f984dfbfbcaa1", "83b587777a177887fc343eecf537d7ba5b0208f283a8438c690e95c9dd673137", "acf065ec5a148b6fd797a58f", 0x5, 0x9, 0x9, 0x1, 0x1}}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000000010000001300000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000001c0)={'geneve0\x00', &(0x7f0000000180)=@ethtool_test={0x1a, 0x7, 0x2000, 0x5, [0x4, 0x2, 0x0, 0x1ff, 0x4]}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x800004, 0x810, r5, 0x24387000) (async) statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, &(0x7f0000000240)) (async) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x6, 0x1, 'b'}, 0xa, 0x0) 24.286701015s ago: executing program 6 (id=6254): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3], 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r6, &(0x7f00000002c0)=""/106, 0x6a) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001700)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05042fbd7000ffdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400da0008000600", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0) 24.122703397s ago: executing program 6 (id=6259): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000400)) r2 = socket(0x11, 0xa, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000040)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x4008041}, 0x20004040) sendmsg$sock(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="74383cf4d86106b496c371dfdec70e69221eece2bc2686626f94cd7b93cb12437b9cb0621bb5fdc8b3127d825966dcd514900cff029863dcbc263bb0a1e87a19afac2efb838226495b9e4e5b8ddc20409c260610bef8249c6060a055b51fa4087f1e85a2456721530012117138816ae0aeca5cf1bc262f4ee79eb1caf6f0064e398d1a816fc31359a15881bbe4638bc7302a1255d32efc1dc38e4f979691f521a8c612fbe05bc1b555dba409f369dcfc7af54294b30d02afdce8162ab2", 0xbd}], 0x1}, 0x20000000) (async) sendmsg$sock(r2, &(0x7f0000000240)={&(0x7f00000000c0)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="74383cf4d86106b496c371dfdec70e69221eece2bc2686626f94cd7b93cb12437b9cb0621bb5fdc8b3127d825966dcd514900cff029863dcbc263bb0a1e87a19afac2efb838226495b9e4e5b8ddc20409c260610bef8249c6060a055b51fa4087f1e85a2456721530012117138816ae0aeca5cf1bc262f4ee79eb1caf6f0064e398d1a816fc31359a15881bbe4638bc7302a1255d32efc1dc38e4f979691f521a8c612fbe05bc1b555dba409f369dcfc7af54294b30d02afdce8162ab2", 0xbd}], 0x1}, 0x20000000) 23.770619933s ago: executing program 6 (id=6263): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000280)=0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20009f608caa0c9b25590000000000000800030001000000080001000000004e1f69cfa0adb3c9383f1eefdfe1a58d177bb8a3e1f708c9e2dfdbd14fb0e82334fbe233fc4f965475bccfacdca96e1483538b8d1aab32219e493c7e6d1f437913592eb93960e74160fcff30b8d4ed6184d540d4437df182da4a3f6696725e690a1aecd714dd5531a8e0aaf7a37835ba814e77c8973857c3c4fe36"], 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0x4004080) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x3, r2, 0x3ff}) write$rfkill(r0, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1406, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0xff}, 0x8) 23.716001772s ago: executing program 43 (id=6263): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000280)=0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20009f608caa0c9b25590000000000000800030001000000080001000000004e1f69cfa0adb3c9383f1eefdfe1a58d177bb8a3e1f708c9e2dfdbd14fb0e82334fbe233fc4f965475bccfacdca96e1483538b8d1aab32219e493c7e6d1f437913592eb93960e74160fcff30b8d4ed6184d540d4437df182da4a3f6696725e690a1aecd714dd5531a8e0aaf7a37835ba814e77c8973857c3c4fe36"], 0x20}, 0x1, 0x0, 0x0, 0x4000880}, 0x4004080) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x3, r2, 0x3ff}) write$rfkill(r0, &(0x7f0000000080)={0x5, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1406, 0x300, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x8, 0x2, 0xff}, 0x8) 19.379303432s ago: executing program 5 (id=6306): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x1c, r2, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf8, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004c}, 0x20000000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x7c, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x4c810) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000b80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)=@dellinkprop={0x2d4, 0x6d, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x120, 0x20000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xf466}, @IFLA_WEIGHT={0x8, 0xf, 0xffffffff}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1ed}, @IFLA_OPERSTATE={0x5, 0x10, 0x8}, @IFLA_PHYS_SWITCH_ID={0x1b, 0x24, "e01868371c69443947eb2e453554b6913ce6c1543f934f"}, @IFLA_VFINFO_LIST={0x270, 0x16, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0xfffffffc}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xa8, 0x59e, 0x4, 0x8100}}, {0x14, 0x1, {0x4, 0x9f, 0x1, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffff7, 0xce2, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x65f5, 0x200}}, @IFLA_VF_TRUST={0xc, 0x9, {0x88, 0x5}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0xc6c, 0x19a}}, @IFLA_VF_RATE={0x10, 0x6, {0xf, 0x8, 0x10000}}]}, {0x100, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xae3, 0x9, 0x88a8}}, {0x14, 0x1, {0x1, 0x5e4, 0x5, 0x59770acc3f4f0925}}, {0x14, 0x1, {0x6, 0x737, 0x14, 0x8100}}, {0x14, 0x1, {0x5, 0xe94, 0x1000, 0x8100}}, {0x14, 0x1, {0x2, 0x613, 0x6, 0x88a8}}, {0x14, 0x1, {0x4, 0x4a2, 0x6, 0x8100}}, {0x14, 0x1, {0x2, 0x466, 0x8, 0x88a8}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x8000, 0x100000001}}, @IFLA_VF_VLAN_LIST={0x4}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0xf}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xd, 0x10000}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x7fffffff, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x7ff}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x379, 0x7, 0x9a8}}]}]}, {0xa0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x432, 0xffff, 0x8100}}, {0x14, 0x1, {0x9, 0xf4f, 0xfffffff7, 0x88a8}}, {0x14, 0x1, {0x401, 0xc25, 0x6, 0x8100}}, {0x14, 0x1, {0x3, 0xc99, 0xf4, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000000, 0xaa}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0xffe}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0xdd8d}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffc01, 0xaf0}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x81, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffffff7f, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x2}}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r7, 0x25, 0x0, @void}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f59efb0ec9008600"], 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket(0x10, 0x803, 0x0) syz_open_dev$MSR(&(0x7f00000003c0), 0x100000000006, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_int(r11, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r12, r12, 0x0, 0x81) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r13, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x40040) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x148, r13, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff00}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5c}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xba, 0x3, "b21163a37e810ce48cc44db5dd668edb4887cb23f410f4943f8889d461a6c873fa98c1f9cd78a07a81f14f2a4cc8b4a1ba585c4e3f87202c30b906040e4c738383e7be4913b2528ea7fada9e5a66163bc14d6014b3f89831e5ba84d12bbbeba9b52a2657200aa6f6572ffecc9abaa89388d6dadcdbd78d8d70167631f42b1cf249401da7399ec4754a9a3ae84bbe86f060000e2676242d25985ac4b65807a9fdde0d959eeb7e3d13e98eb16508d8261090593cb11273"}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) 19.250254963s ago: executing program 5 (id=6307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_ev_le_phy_update_complete={{}, {0x0, 0x1eb3bd57ae0283e1, 0xd, 0xc}}}}, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x20048010) r3 = dup(r1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000800)=0x5) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) write$tun(r0, &(0x7f0000000080)={@val={0x18, 0xfbfb}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xb, 0x0, @void}}}}}}}}, 0x32) 19.129948758s ago: executing program 5 (id=6308): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) mount$fuse(0x0, 0x0, 0x0, 0xf280c4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="ea3de7", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0]) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r2, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000002580)=[@request_death], 0x0, 0x0, 0x0}) (async) ioctl$CDROMVOLCTRL(0xffffffffffffffff, 0x530a, &(0x7f0000000280)={0x1, 0xe, 0x0, 0x2}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="a4e90e43ffdf0f1cd37a26bd7c8c8dee1f11869f949a103103eb589d73d65ebb0d42304e925261983ac1a4a9a9f4a7d12c369b042a4073db6e0fe72cc14a041a1cd310450c38d33bdc41c51b66e0bdfc"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0049364, &(0x7f0000000180)) r7 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d"], 0x0, 0x46, 0x0, 0x7, 0x2}, 0x28) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000200)=0x1000) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000040)={{0x8, 0xc}, {0x2, 0x5}, 0x3, 0x7, 0x5}) (async) mmap(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0x8, 0x30, r8, 0x3fbc2000) 19.079541932s ago: executing program 5 (id=6310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0xda, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x7, 0x11, 0x0, @empty, @mcast2, {[@srh], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x759c37e1a8885cfa}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x64}, 0x1, 0x0, 0x0, 0xa65b18a8d310763f}, 0x8000) 19.018830939s ago: executing program 5 (id=6312): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x181ac2, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/219, 0xdb) 18.997164677s ago: executing program 5 (id=6315): r0 = socket(0xa, 0x3, 0x3a) clock_gettime(0x2, &(0x7f0000000280)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xd, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13d00000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x537e43a2065aa18a}, 0x48) 12.200577837s ago: executing program 0 (id=6402): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @remote, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr=0x64010100, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}]}]}}}}}}}, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000000)="5e0f77b8f51205289f78ff1ecf1878e3974729a451ae325eb99d97a85b42ecd7535429d886921fc2aa5b3c9990a51e495216760e722c27f9b00f758a9dd83b6b372ac85b685e0d5f3bb7b5b1502d5ecc5b3bc81a87f8b57a743aac0a3d5bd39aba61410aeb5835d9e4c8ca7f1cb233cceaf8abeaa55de2ac1f1533e5ab", 0x7d, 0xfffffffffffffffe) 12.120442422s ago: executing program 0 (id=6403): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000400000a118000200000000000000fa1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080ff60b7c0703b00a0e408e8d8ef075c11503c6bbace8017cb09", 0x6b}, {&(0x7f0000002a00)="cee05e8788753e17958fdee7f1d5d4faa3cc35d952f80d608a05555286d236185f49d62f1dfa7b996904100c7a91d13c47af61b9588dd8387b86fc4e1d4b75374ad68a91248f7f983391bd22b5a4c9d913f64dc2abaa5f694d8c396e1e118fb2b00961632cb84e625dc9767a34", 0x6d}], 0x2, 0x0, 0x0, 0x7400}, 0x4011) 12.060477947s ago: executing program 0 (id=6404): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000000c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e00028042e76623000000000000", 0x2e}], 0x1}, 0x8090) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) 11.985483511s ago: executing program 0 (id=6405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x72) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x1000}}, './cgroup\x00'}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r6, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r3, &(0x7f00000001c0)="11eb03", 0x3, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @multicast}, 0x14) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_TDX_CAPABILITIES(r1, 0xc008aeba, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x4, 0x0, [{}, {}, {}, {}]}}}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x867, 0x0, 0x7fe}]}) 11.790147677s ago: executing program 0 (id=6408): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x4b564d05}]}) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000085c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRESOCT=r1, @ANYRES32=r4, @ANYRES8=r2], 0xfc}, 0x1, 0x0, 0x0, 0x2000d811}, 0x20000080) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, r5, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000500000000d4e468ab6fee6700000000000000000000000000000000963d52ea6d363ff041fbc3cb76c38e6c3fb1b934ef98c83ea6a53251da3a36abd9e392e1eaadf460f85125b1228649dc1accdd1846635dcdcd473cccb94c3d666c825718c3e0036f3cd818197667f8ee98a36dcc"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) (async) read$FUSE(r8, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) fstat(r5, &(0x7f00000001c0)) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r11, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x4, 0x808051, 0x8090, 0x101, 0x10000004, 0x1, 0x0, 0x0, 0x10, 0xfffffffd}}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r13, r14, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getresuid(&(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280)) (async) lstat(&(0x7f00000041c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r8, &(0x7f0000008340)=ANY=[@ANYRES16=r10, @ANYRES64=r9, @ANYBLOB="020000000000000003000000000000006e00000000000000ee0000000000000000100000010000000100000000000000490c000000000000ff070000000000000600000000000000000001000000000005000000000000000f00000000000100070000000010000001000080", @ANYRESHEX=0x0, @ANYRES32=r14, @ANYBLOB="08000000ff070000000000000500000000000000090000000000000008000000080000006272696467653000040000000000000002000000000000000e0000000000000028f500000000000007000000040000000500000000000000faffffffffffffff0200000000000000f800000000000000ffffffffffffffffc70200000000000002000000eec500000500000000c0000000000100", @ANYBLOB="d76d9731a4f5587531c9808e47ee8a5c32f5845a0912092460cbda5e075db07aff718249d05f0c8786e3e62d814ad3130dd3e33f3897f321020909afc8380c16b630bcaee5bc237f809d09efd81dbb7db1cbc6bd245c7d16a87c3822740857b9e3c0b821a6726d20d47aa375cb50878ada4dd177f434061f54b25b63b05cd0c62c87fd5b9233bce88e83dc4758d5e6acb939d8", @ANYRES32=r15, @ANYBLOB="01000100f9000000000000000600000000000000050000000000000008000000080000006272696467653000"], 0x150) (async) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) (async) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) 10.339668231s ago: executing program 0 (id=6427): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) 10.179601393s ago: executing program 44 (id=6427): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) 4.668121352s ago: executing program 7 (id=6497): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) rmdir(&(0x7f0000000080)='.\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in6=@mcast2, 0x4e62, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x4, 0x0, 0x5000007ffffffc, 0x1, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x400, 0x100000000c, 0x1f}, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1}, {{@in=@remote, 0x800, 0xff}, 0x0, @in=@multicast2, 0x34ff, 0x4, 0x2, 0x0, 0x0, 0x2, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000380)=0x4) mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='gfs2\x00', 0x10003, &(0x7f00000000c0)='norecovery') 3.958169851s ago: executing program 45 (id=6315): r0 = socket(0xa, 0x3, 0x3a) clock_gettime(0x2, &(0x7f0000000280)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xd, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x3, 0x0, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x45, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x537e43a2065aa18a}, 0x48) 3.380333386s ago: executing program 7 (id=6507): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b600884709"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r2, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xa, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.227773731s ago: executing program 7 (id=6508): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async, rerun: 32) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1, 0x400, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "7b442856bfec870b"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x202, 0x80000000, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "4c86b8b1f25c1517"}}, 0x38}}, 0x40000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) (async, rerun: 64) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x286f7, 0x10100, 0x40000000, 0x7ffffc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) (async) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r10}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[], 0x15) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) read$FUSE(r11, &(0x7f0000000300)={0x2020}, 0x2020) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x54}}, 0x440b0) (async) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) (async) shutdown(r13, 0x1) 3.169214173s ago: executing program 7 (id=6509): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e1626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x0, 0x1, 0x3, 0xfff}, 0xffffffffffffff03, 0x7}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-neon\x00'}, 0x58) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x31, "3eccd8000000000000000010000000040100"}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 3.16788405s ago: executing program 7 (id=6510): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x54, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x2004851}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4092c0000008510000002000000850000002a197f2e6e97ca35be0004009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f00000000c0)={0x5, 0xfffffffffffffc00, 0x9, 0x0, 0x6}) 1.692550412s ago: executing program 1 (id=6530): r0 = socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000280)=0x10, 0x80800) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f00000002c0)) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.639787059s ago: executing program 1 (id=6531): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040), 0xfffffe4a}, {&(0x7f0000000680)='\x00'}, {&(0x7f0000000040)="c94813b290b0cfa998d3eebc0836af5dc0b6b19713027174c935c2509cd95aaaf46d5d47929bd6ccf4eddb6d74d031ac3a0941b3d4ce04314fa5fa021b7af9c994a405117a5e34373b0410c68a7e3743593b4f1aedbaac3cb24106806c4960baf3915ae30d2fc2f8423cc4a1215ae01e2980e914992f2e77a059bb24b2fb751a3a0cefdba2b457c33dbf998e4530bf37e2c02bc06649a0d9b78d23d57afd80d4ed1a8106bbe0e2cc691ef77879eef8438e1364f23f5c837ebd21ce7efc6d3f35399360"}, {&(0x7f0000000140)="3afb20f92d4c33ad048c6b01c3b9c76924e3799973b9c660b2cba161238a3d3bbfbb88893fef0330957aa72b2fbaa62c60219a24e311e40ce2f130634c822e754dec84395bfdc27898175e41736ef71bc0dcca6638d0b3b5812c1aad1e6cbb8c787fbaf4f53adfbc6e691d0a6a35b5727f7213fa9620827f7b4f7197ef47db6724d1d1756d1453fb43b343a245bd4e72145bdcb21ce214c345d1a9a3a15ccb41f5208b355e90309ae80ef1bd6292f936e6978d51d0b8782d4ad6f2d6549d12616057e2af0e8d0e537c1dfb5a3324a0f5a974664f3304bbf0e9214cb60eda3109ea06595f17"}, {&(0x7f0000000280)="9968934d1a5e6c721ec3c7f70543f60ae6e76f32d21080e50bdce9fa66ed72bdaf061153167b726897b9e2553cd5fa5be9d90b7d3d2d19e93e265322da009944823d231f9993f4715d35983728169ae5feb9e2e51e35b9458b68207ab4c976d166bccfdd40cef420126ff411f5af515c696cf39e74a01411280eafeed5b40ba5199e21f2942164d04db76fb48d6465eef509d048cdb30d6eeee6087f3ccb0b2a7840d2543dc9046af7bfd679732215b7be"}, {&(0x7f00000006c0)="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"}, {&(0x7f0000000380)="aad3f1edc56a87349005f1afca18f11393203f84a331a16d2ddf8a8269570275ddf3f389126f03e9ae877d801f7339f9b4ba4aad494be24c11e645814906fc9f9a97adfbeecb198c847ba28c977250c2d276958afaead4e28b4356bd242665eed773082af4b685e003bceb1584cb268eedc7a05a9193539969d3308570fcb2524d51ea6d09084400ec952bd1b89396"}], 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x100) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x1000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x6, 0x6, 0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r6, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000840)) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x3}, 0x0, 0x0, 0x4, 0x2, 0xffffffffffff8000, 0x4, 0x4b}}], 0x58}, 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000001780)={0xa4, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x63}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x30}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c040}, 0x40010) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000004c0)={0x1a, &(0x7f0000000600)=[{0x7, '\x00', @st={0x4, [{0x1, @uvalue=0x7}, {0x0, @svalue=0x8}, {0x0, @svalue=0x8000}, {0x2, @svalue=0x7}]}, 0x4}]}) ioctl$CDROMRESUME(0xffffffffffffffff, 0x5302) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 866.739146ms ago: executing program 8 (id=6504): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000940)=ANY=[@ANYRES64=r0, @ANYBLOB="a6bb556e4e3dd4b2b7b1837aa54980b25e1768b2013b75db5379baa8aa1a5e9392447823f991084f21e3f7763d042e3edd7fab804b6a8a79caa656d471ac0dd53f58dca39d835a7434b9214dfc297f2d9b71512500c4261e6cd6eaf1dfa0f67aaf30ea9d796a18e2ab15b01ecb5dbfb9c25e6eeb99498cdad5", @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0, @ANYRES8=0x0, @ANYRESOCT=r0]) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xff7ffffffffffffc) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x7) ioctl$TCSETSF2(r2, 0x8910, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0x0, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x9, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb3, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x5}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="7472706e733d76697274696f2c64666c747503003d", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f00000000c0)={0x4, 0x6}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000e1ffffff00020000004000068018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000208000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000380)={0x6, 0x80000, r0}) clock_gettime(0x0, &(0x7f0000000340)) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r8, 0x3ba0, &(0x7f00000003c0)={0x48, 0x8, r10, 0x0, 0x6, 0x51de8, 0x0, 0x0, 0x10001}) 727.686553ms ago: executing program 4 (id=6534): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) read(r0, &(0x7f0000000040)=""/4096, 0x1000) close_range(r0, r1, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendfile(r0, r2, &(0x7f0000001040)=0x8, 0x7) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000001080)=0x400) sendfile(r2, r0, &(0x7f00000010c0)=0x400000000000, 0x7) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000001100)=0x400) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000001140)={0x6, 0x79}) socket$netlink(0x10, 0x3, 0xa) write$sequencer(r0, &(0x7f0000001180)=[@s={0x5, @generic=0x6, 0x18, 0x8}, @n={0x3, 0xf, @generic=0x2, 0x5}, @v={0x93, 0x0, 0x0, 0x9, @generic=0x9, 0x3e, 0x6}, @l={0x92, 0x8, 0xb0, 0x5, 0x9, 0x0, 0x1}], 0x18) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000011c0)=0x1ff, 0x4) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x6, 0x2d0840) r3 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) r4 = open(&(0x7f0000001240)='./file0\x00', 0x18c03, 0x8) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000001280)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f00000012c0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001300)=0x0) sched_setscheduler(r5, 0x5, &(0x7f0000001340)=0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f0000001380)={0xc7, 0x0, 0x1}) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f0000001400)={0x74, 0x0, 0x2}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17) syz_kvm_setup_cpu$x86(r6, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001500)=[@textreal={0x8, &(0x7f0000001480)="0fc79e0000360f01c50f550a0f06ba4200ec0f01cb66b9800000c00f326635008000000f302e67f30fc7b43107000000baf80c66b85c0dfc8166efbafc0cb095ee0f01d1", 0x44}], 0x1, 0x6c, &(0x7f0000001540)=[@cstype0={0x4, 0x1}, @cstype3={0x5, 0xc}], 0x2) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000001580)={0xc, 0x2, 0xfffffeff}) r7 = io_uring_setup(0x2ebf, &(0x7f00000015c0)={0x0, 0xa13f, 0x4, 0x2, 0x378}) open(&(0x7f0000001640)='./file0\x00', 0x2041c2, 0x16) ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000001680)={{0xeeee8000, 0x60000, 0xf, 0x8, 0x6, 0xe, 0x4, 0x48, 0xd, 0x87, 0xb3, 0x3}, {0x1000, 0x22000, 0xc, 0x8, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x81}, {0xb000, 0x30000, 0xd, 0x2, 0x10, 0xea, 0x7, 0x4, 0xa3, 0x6, 0x7, 0x1}, {0xa000, 0xeeef0000, 0x0, 0x6, 0x3, 0x98, 0x5, 0x7f, 0xff, 0x81, 0x9}, {0xa000, 0x9000, 0x0, 0x9, 0x52, 0x6f, 0x3, 0x6, 0x1, 0x8, 0x2, 0x7}, {0x70000, 0x41000, 0x0, 0x0, 0xe, 0x80, 0x4d, 0x3, 0xfd, 0x1, 0x17, 0xa}, {0xe000, 0x6000, 0xb, 0x3, 0x4, 0x6, 0x9, 0xf7, 0x6, 0xf4, 0x56}, {0x200000, 0x41000, 0x8, 0x3, 0x8, 0x0, 0xa, 0x6, 0x0, 0x10, 0x10}, {0xdddd1000, 0xff81}, {0x3000, 0x3}, 0x0, 0x0, 0x3000, 0x444ca, 0xe, 0x1000, 0x80a0000, 0x0, [0x5, 0x0, 0x4800000000, 0x3]}) ppoll(&(0x7f00000017c0)=[{r7, 0x508}], 0x1, &(0x7f0000001800)={0x0, 0x989680}, &(0x7f0000001840)={[0x6e]}, 0x8) syz_kvm_add_vcpu$x86(r3, &(0x7f0000001dc0)={0x0, &(0x7f0000001880)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x4, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5c8, 0x6, 0xb, 0x80000000}}, @nested_vmlaunch={0x12f, 0x18}, @in_dx={0x69, 0x20, {0xa887, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host_nat=0x6c04, 0x4, 0x100000000, 0x4}}, @wrmsr={0x65, 0x20, {0x4000009b, 0xffff}}, @nested_load_syzos={0x136, 0x68, {0x3, 0x8, [@out_dx={0x6a, 0x28, {0x4ba9, 0x5, 0x7f}}, @nested_load_syzos={0x136, 0x20, {0x2, 0x2}}]}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0x3de0}}, @uexit={0x0, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0x330, 0xfffffffffffffff9}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x46, 0x1, 0x8, 0x3}}, @code={0xa, 0x85, {"66baf80cb8ac48ad85ef66bafc0cec66baf80cb8ca85dd8bef66bafc0c66b80f0066ef8fe9c092424064402b93c41b38dc66baf80cb886471e82ef66bafc0c66b87c0066efc744240039000000c7442402d51a9c79c7442406000000000f011c24c4c27105e536f20f2cd036470f0017f3430f09"}}, @nested_amd_vmsave={0x183, 0x18}, @out_dx={0x6a, 0x28, {0x98ea, 0x2, 0x100000000}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x55, 0x1, 0xa, 0x3}}, @set_irq_handler={0xc8, 0x20, {0x74, 0x1}}, @code={0xa, 0x76, {"2e364d0fc76c0b00460f5cf3b9ec020000b800000000ba008000000f3048b800800000000000000f23c00f21f835030008000f23f80f20d835080000000f22d88fa940931d08000000f20f03f6c4e2190425050000000f20c035000000200f22c026f20f08"}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_vmresume={0x130, 0x18}, @uexit={0x0, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x200000, 0x97ed}}, @code={0xa, 0x6a, {"b9800000c00f3235000400000f30b9800000c00f3235000400000f300f20e035040000000f22e0f3430f58e965400f01c20fc79b0700000066baf80cb8a2ff9187ef66bafc0c66ed0fc72d03000000c4e39d42d600400f981a"}}, @nested_amd_invlpga={0x17d, 0x20, {0x60000, 0x13ea}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x6e, 0x7, 0x10001, 0x1}}, @wr_crn={0x67, 0x20, {0x0, 0x2}}, @wr_drn={0x68, 0x20, {0x6, 0x6}}], 0x53d}) 725.231155ms ago: executing program 4 (id=6535): r0 = openat2(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x109, 0x1}, 0x18) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000640)=@x86={0x5, 0x9, 0x1, 0x0, 0xfffffffb, 0x5d, 0x3, 0xd, 0x3, 0xc2, 0x2, 0x15, 0x0, 0xfff, 0x80, 0x5, 0x7, 0x3, 0x0, '\x00', 0x4, 0x4}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0}) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) close(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x40, r9, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x8880) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048008000700"], 0xc0}}, 0x0) 640.316975ms ago: executing program 8 (id=6536): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000019c0)={0x88, 0x1e, 0x21, 0x70bd2b, 0x0, {0xaa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x69, 0x1, 0x0, 0x0, @str='\x85\x95\x1aq\vT\xd4\xc5:\xd8\x7f:_\xa9\xe2mb:\x8e_\xaa\x9b\xc7\x80\xc3\x91\xe7\xfe\xf3S\xa6\xffg\xbe\x1d\xc1!q\x8a\xbb\xa1\xc6\xb3r#W\x98\xe7:\xf2\x92!\xc8\xfdi\xd2}\xf2\x88\x87\x11M\x1e\b\xf2\xa6\x14\xcf\x9d\xbeX\x9a&?\x98\xe4o\xec\xb2\x1fA.CX\x8f-\x88\xcf\x05\x14\xa1n\x9e\xc3F\xf1\x9ft\f\xe4]'}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) 520.045714ms ago: executing program 4 (id=6537): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2081, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x0}) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000080)="0437f8246f3e981b16ab3810e2641f49df6a1fc0ccf2f9d4e56481f449222f3f5b2a8ab486e79138547474e4457448adb3b068c3971d26fc97d1f36caf4692551e2d322a54499c1b2f5051e0550b8e11347fd89ef157e16975d32e914018f16b8bb40bb36d8d1a69008932edd86f523c51271d4f63a0335da9849aee253f03c81441", 0x82}, {&(0x7f0000000000)="30da88a00e6e70322b252a022ad9250bc6a12b28d90166a47ab88a5ff6c20a", 0x1f}], 0x2) 518.720486ms ago: executing program 4 (id=6538): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x3, 0x7}, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x3b2, @tick=0x3, 0x0, {0x0, 0xf8}, 0x67, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x9101) fspick(r1, &(0x7f0000000140)='./file0/../file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1a008c8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=virtio,dmfcontext=sysadm\x00u,\x00']) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 431.429824ms ago: executing program 7 (id=6539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000002440)={0x0, 0x0, 0x6, 0x0, '\x00', [{0xebfc, 0x2, 0x5, 0xa4a9, 0x9, 0x3}, {0x9, 0x4, 0x8, 0x7, 0x8, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) openat$tun(0xffffffffffffff9c, 0x0, 0x315c80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f00000002c0)=0x10401, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0x3}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) 428.344939ms ago: executing program 4 (id=6540): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYRES8=r5], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)="00d9", 0x2}], 0x1, 0x0, 0x0, 0x6000}, 0x21) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000180)) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x23) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000940)={0x7, 0x0, [{0x80000000, 0x5, 0x2, 0x5, 0x2d, 0x5d3e, 0x2}, {0x80000019, 0x3, 0x1, 0x7, 0xc, 0xffffffff}, {0x7, 0x1, 0x3, 0x6, 0xe, 0x7f, 0x9}, {0x2, 0x9, 0x3, 0x3, 0x6, 0x6c3874fa, 0x2}, {0x2, 0x3, 0x4, 0x4, 0x0, 0xc, 0x6}, {0x6, 0x16d, 0x0, 0x8, 0x1a4b, 0x80, 0x1}, {0x4, 0x8, 0x1, 0x9, 0x7d1, 0xc, 0xfffffe00}]}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000004140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x8, 0x0, 0x0, {0x43, 0x3, 0x6, 0xffff, 0x1000, 0x80000000400000ff, 0x10000000, 0x1, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r10, &(0x7f0000000440)={0x50, 0x0, r11, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8001, 0x1, 0x2, 0xc, 0x6b, 0x8}, 0x20) 419.097509ms ago: executing program 8 (id=6541): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) write(r1, &(0x7f0000000440)="31bfcf47c30bd12aa11bcb1e0583dee644351e37b897bd672a9c096df42d3135e486f2dd722d422e273871e3296575299bb6bfaa49083ea8bfd5fcc0f925d86aaa19795b2bf07ca441ad5f35d0931301a41cd2cc9a93e6d783ce274d69a23cba689996374efbde5c0602c76b12b57812d5ec67b03b5d22", 0x77) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 288.584309ms ago: executing program 4 (id=6542): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0400000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000098065c262879548d00"/28], 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000c}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x40c4) fanotify_mark(r4, 0x201, 0x4000003e, r3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000640)={@rand_addr=0x64010102, @multicast1, 0x0, 0x1, [@private=0xa010100]}, 0x14) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000003a000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000b3f779b3"], 0x48) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r9, &(0x7f00000004c0)=""/57, 0x39) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r11 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r12 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r13 = dup3(r11, r12, 0x0) ioctl$MON_IOCG_STATS(r13, 0xc0109207, &(0x7f00000001c0)) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3ff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r14 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r14, 0xc100565c, &(0x7f0000000080)={0x3, 0x1, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3]}}}) close(0x3) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c10000000000000000000", 0x58}], 0x1) 288.121351ms ago: executing program 1 (id=6543): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x10}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x0, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x7ffffffe}]}}]}, 0x3c}}, 0x2) 160.338865ms ago: executing program 1 (id=6544): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000580)=""/117, 0x75}], 0x1) (async, rerun: 64) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="a137f5b87731e51b2540", 0xa}], 0x1) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000030025feffff6124000000030000001f0000000a0000000400000009000000030000000d00384b040000000000000009000000000000"], 0x0, 0x3f, 0x0, 0x8}, 0x20) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) shutdown(r2, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x701500, 0x111, 0x2}, 0x18) open_tree(r4, &(0x7f0000000180)='\x00', 0x80100) (async, rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x100}]}) 80.248353ms ago: executing program 1 (id=6545): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x103801, 0x80) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000680)="84cfb2111f", 0x5}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x1170, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @loopback, [0xffffff00, 0xffffffff, 0x80, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff0000ff], 'lo\x00', 'vlan0\x00', {}, {0xff}, 0x3a, 0x7, 0x0, 0x20}, 0x0, 0x1108, 0x1170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x1, './cgroup/syz0\x00', 0x4f6, {0xd}}}, @common=@frag={{0x30}, {[0x6, 0x3], 0x3, 0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x10, 0xc0000000, 'pptp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', [0xff, 0xffffff00, 0xff000000, 0xff], [0xff, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) (async) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 1 (id=6546): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="48000000100037040000000000000000000000009e2e9a8c5b106821e73844ad574deaee5b2de345749c6685be65fa9fd91b0a2c15c696f1d65e581b7470077f57eccdb069a9845fbaece74dbc5d00cf1778b37ce94d8acf6eedee23dac8f87c3dcac01dd5e9aba5042f7ce0123711c378e04ee141b1765323e74287fce4150d8ebed0b42e2c0261478b3a0cc8e2ec2eec2fac1cad1607d335306b10", @ANYRES32=r4, @ANYBLOB="8304050000000000280012800b000100697036746e6c0000180002800400130008000800310100000500090004000000"], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast2}}}], 0x20}}], 0x1, 0x4880) r5 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x18, 0x2, 0x281}) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) kernel console output (not intermixed with test programs): 6][T28434] kmem: usage 6680kB, limit 9007199254740988kB, failcnt 0 [ 594.728865][T28434] Memory cgroup stats for /syz9: [ 594.728949][T28434] cache 307691520 [ 594.732058][T28434] rss 24576 [ 594.733152][T28434] rss_huge 0 [ 594.734251][T28434] shmem 307634176 [ 594.735493][T28434] mapped_file 12288 [ 594.736831][T28434] dirty 0 [ 594.737835][T28434] writeback 0 [ 594.751132][T28434] workingset_refault_anon 8 [ 594.752754][T28434] workingset_refault_file 13766 [ 594.754372][T28434] swap 52076544 [ 594.755569][T28434] swapcached 161124352 [ 594.756971][T28434] pgpgin 286980 [ 594.758149][T28434] pgpgout 211850 [ 594.762157][T28434] pgfault 49606 [ 594.763802][T28434] pgmajfault 157 [ 594.765342][T28434] inactive_anon 75341824 [ 594.767136][T28434] active_anon 231809024 [ 594.768843][T28434] inactive_file 4096 [ 594.770744][T28434] active_file 0 [ 594.772581][T28434] unevictable 0 [ 594.774598][T28434] hierarchical_memory_limit 314572800 [ 594.777894][T28434] hierarchical_memsw_limit 9223372036854771712 [ 594.782989][T28434] total_cache 307691520 [ 594.784798][T28434] total_rss 24576 [ 594.786471][T28434] total_rss_huge 0 [ 594.788215][T28434] total_shmem 307634176 [ 594.790568][T28434] total_mapped_file 12288 [ 594.792521][T28434] total_dirty 0 [ 594.794358][T28434] total_writeback 0 [ 594.796501][T28434] total_workingset_refault_anon 8 [ 594.799637][T28434] total_workingset_refault_file 13766 [ 594.801941][T28434] total_swap 52076544 [ 594.803801][T28434] total_swapcached 161124352 [ 594.805716][T28434] total_pgpgin 286980 [ 594.807354][T28434] total_pgpgout 211850 [ 594.809056][T28434] total_pgfault 49606 [ 594.811330][T28434] total_pgmajfault 157 [ 594.813265][T28434] total_inactive_anon 75341824 [ 594.815766][T28434] total_active_anon 231809024 [ 594.818064][T28434] total_inactive_file 4096 [ 594.820480][T28434] total_active_file 0 [ 594.822327][T28434] total_unevictable 0 [ 594.824284][T28434] anon_cost 0 [ 594.826037][T28434] file_cost 0 [ 594.827865][T28434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5970,pid=28436,uid=0 [ 594.835018][T28434] Memory cgroup out of memory: Killed process 28436 (syz.9.5970) total-vm:49400kB, anon-rss:0kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 594.849740][T28457] syz.9.5970 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 594.853184][T28457] CPU: 1 UID: 0 PID: 28457 Comm: syz.9.5970 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.853204][T28457] Tainted: [L]=SOFTLOCKUP [ 594.853208][T28457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 594.853215][T28457] Call Trace: [ 594.853220][T28457] [ 594.853226][T28457] dump_stack_lvl+0x100/0x190 [ 594.853253][T28457] dump_header+0xfb/0x606 [ 594.853267][T28457] oom_kill_process.cold+0xd/0x330 [ 594.853291][T28457] out_of_memory+0x340/0x14f0 [ 594.853314][T28457] ? __pfx_out_of_memory+0x10/0x10 [ 594.853334][T28457] mem_cgroup_out_of_memory+0xc6/0x130 [ 594.853350][T28457] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 594.853364][T28457] ? find_held_lock+0x2b/0x80 [ 594.853382][T28457] ? do_raw_spin_unlock+0x145/0x1e0 [ 594.853396][T28457] ? _raw_spin_unlock+0x28/0x50 [ 594.853411][T28457] try_charge_memcg+0x652/0xc90 [ 594.853426][T28457] ? __pfx_try_charge_memcg+0x10/0x10 [ 594.853437][T28457] ? find_held_lock+0x2b/0x80 [ 594.853451][T28457] ? rcu_read_unlock+0x17/0x60 [ 594.853463][T28457] ? rcu_read_unlock+0x17/0x60 [ 594.853479][T28457] charge_memcg+0xa6/0x280 [ 594.853490][T28457] __mem_cgroup_charge+0x2b/0x1e0 [ 594.853504][T28457] shmem_alloc_and_add_folio+0x451/0xd40 [ 594.853525][T28457] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 594.853543][T28457] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 594.853563][T28457] shmem_get_folio_gfp+0x6ab/0x1900 [ 594.853582][T28457] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 594.853603][T28457] shmem_write_begin+0x1a4/0x420 [ 594.853621][T28457] ? __pfx_shmem_write_begin+0x10/0x10 [ 594.853639][T28457] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 594.853652][T28457] ? lockdep_hardirqs_on+0x78/0x100 [ 594.853668][T28457] generic_perform_write+0x292/0xa40 [ 594.853689][T28457] ? __pfx_generic_perform_write+0x10/0x10 [ 594.853707][T28457] ? file_update_time_flags+0x373/0x500 [ 594.853725][T28457] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 594.853736][T28457] shmem_file_write_iter+0x10e/0x140 [ 594.853749][T28457] __kernel_write_iter+0x2ac/0x920 [ 594.853768][T28457] ? __pfx___kernel_write_iter+0x10/0x10 [ 594.853785][T28457] ? cgroup1_freezing+0x12c/0x3b0 [ 594.853802][T28457] ? cgroup1_freezing+0x136/0x3b0 [ 594.853816][T28457] ? freezing_slow_path+0xb5/0x1a0 [ 594.853832][T28457] dump_user_range+0x3f9/0xb50 [ 594.853851][T28457] ? __pfx_dump_user_range+0x10/0x10 [ 594.853872][T28457] ? __pfx_writenote+0x10/0x10 [ 594.853893][T28457] elf_core_dump+0x2d5f/0x3d10 [ 594.853918][T28457] ? __pfx_elf_core_dump+0x10/0x10 [ 594.853936][T28457] ? kasan_save_stack+0x3f/0x50 [ 594.853952][T28457] ? kasan_save_stack+0x30/0x50 [ 594.853969][T28457] ? __kasan_kmalloc+0xaa/0xb0 [ 594.853986][T28457] ? __kvmalloc_node_noprof+0x360/0xa00 [ 594.854004][T28457] ? vfs_coredump+0x2105/0x5570 [ 594.854019][T28457] ? asm_exc_page_fault+0x26/0x30 [ 594.854033][T28457] ? 0xffffffffff600000 [ 594.854069][T28457] ? vfs_coredump+0x27bc/0x5570 [ 594.854083][T28457] vfs_coredump+0x27bc/0x5570 [ 594.854104][T28457] ? __pfx_vfs_coredump+0x10/0x10 [ 594.854120][T28457] ? __lock_acquire+0x4a5/0x2630 [ 594.854138][T28457] ? lock_acquire+0x1cf/0x380 [ 594.854155][T28457] ? is_bpf_text_address+0x8a/0x1a0 [ 594.854173][T28457] ? bpf_ksym_find+0x128/0x1c0 [ 594.854188][T28457] ? __kernel_text_address+0xd/0x30 [ 594.854201][T28457] ? unwind_get_return_address+0x59/0xa0 [ 594.854217][T28457] ? arch_stack_walk+0xa6/0xf0 [ 594.854241][T28457] ? __sigqueue_free+0xbe/0x2a0 [ 594.854259][T28457] ? stack_trace_save+0x8e/0xc0 [ 594.854274][T28457] ? __pfx_stack_trace_save+0x10/0x10 [ 594.854290][T28457] ? stack_depot_save_flags+0x27/0x9d0 [ 594.854304][T28457] ? __lock_acquire+0x4a5/0x2630 [ 594.854341][T28457] ? proc_coredump_connector+0x2d3/0x4f0 [ 594.854357][T28457] ? __pfx_proc_coredump_connector+0x10/0x10 [ 594.854375][T28457] ? rcu_is_watching+0x12/0xc0 [ 594.854392][T28457] get_signal+0x1f2a/0x21e0 [ 594.854414][T28457] ? __pfx_get_signal+0x10/0x10 [ 594.854434][T28457] arch_do_signal_or_restart+0x91/0x7a0 [ 594.854452][T28457] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 594.854473][T28457] ? do_user_addr_fault+0x8d6/0x12f0 [ 594.854490][T28457] irqentry_exit+0x1f8/0x670 [ 594.854508][T28457] asm_exc_page_fault+0x26/0x30 [ 594.854520][T28457] RIP: 0033:0x7f0d4299c799 [ 594.854535][T28457] Code: Unable to access opcode bytes at 0x7f0d4299c76f. [ 594.854541][T28457] RSP: 002b:00007f0d4380afd8 EFLAGS: 00010246 [ 594.854551][T28457] RAX: 0000000000000000 RBX: 00007f0d42c16090 RCX: 00007f0d4299c799 [ 594.854558][T28457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 594.854565][T28457] RBP: 00007f0d42a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 594.854572][T28457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.854579][T28457] R13: 00007f0d42c16128 R14: 00007f0d42c16090 R15: 00007ffec2a12ed8 [ 594.854595][T28457] [ 594.854642][T28457] memory: usage 307200kB, limit 307200kB, failcnt 44675 [ 595.019684][ T5940] Bluetooth: hci6: command tx timeout [ 595.026189][T28457] memory+swap: usage 334496kB, limit 9007199254740988kB, failcnt 0 [ 595.032799][ T6027] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 595.039311][T28457] kmem: usage 6608kB, limit 9007199254740988kB, failcnt 0 [ 595.041729][T28457] Memory cgroup stats for /syz9: [ 595.041833][T28457] cache 287838208 [ 595.044725][T28457] rss 24576 [ 595.045886][T28457] rss_huge 0 [ 595.047164][T28457] shmem 287825920 [ 595.048470][T28457] mapped_file 0 [ 595.050037][T28457] dirty 0 [ 595.051126][T28457] writeback 0 [ 595.052275][T28457] workingset_refault_anon 8 [ 595.053882][T28457] workingset_refault_file 13781 [ 595.055594][T28457] swap 47833088 [ 595.056829][T28457] swapcached 161124352 [ 595.057250][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 595.057270][ T40] audit: type=1400 audit(1774000998.230:52161): avc: denied { search } for pid=28672 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.058203][T28457] pgpgin 287015 [ 595.058211][T28457] pgpgout 216732 [ 595.058216][T28457] pgfault 49611 [ 595.058221][T28457] pgmajfault 159 [ 595.058225][T28457] inactive_anon 151298048 [ 595.058230][T28457] active_anon 136568832 [ 595.058235][T28457] inactive_file 0 [ 595.058240][T28457] active_file 12288 [ 595.058246][T28457] unevictable 0 [ 595.081296][T28457] hierarchical_memory_limit 314572800 [ 595.083205][T28457] hierarchical_memsw_limit 9223372036854771712 [ 595.085302][T28457] total_cache 287838208 [ 595.086690][T28457] total_rss 24576 [ 595.087901][T28457] total_rss_huge 0 [ 595.089261][T28457] total_shmem 287825920 [ 595.090753][T28457] total_mapped_file 0 [ 595.091732][ T40] audit: type=1400 audit(1774000998.270:52162): avc: denied { read open } for pid=28674 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.092185][T28457] total_dirty 0 [ 595.092195][T28457] total_writeback 0 [ 595.107017][T28457] total_workingset_refault_anon 8 [ 595.107288][ T40] audit: type=1400 audit(1774000998.270:52163): avc: denied { getattr } for pid=28674 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.108937][T28457] total_workingset_refault_file 13781 [ 595.108948][T28457] total_swap 47833088 [ 595.108953][T28457] total_swapcached 161124352 [ 595.108959][T28457] total_pgpgin 287015 [ 595.108964][T28457] total_pgpgout 216732 [ 595.108969][T28457] total_pgfault 49611 [ 595.108975][T28457] total_pgmajfault 159 [ 595.108980][T28457] total_inactive_anon 151298048 [ 595.128656][ T40] audit: type=1400 audit(1774000998.300:52164): avc: denied { add_name } for pid=28673 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 595.129896][T28457] total_active_anon 136568832 [ 595.129905][T28457] total_inactive_file 0 [ 595.129911][T28457] total_active_file 12288 [ 595.129915][T28457] total_unevictable 0 [ 595.129920][T28457] anon_cost 0 [ 595.129924][T28457] file_cost 0 [ 595.129929][T28457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 595.135593][ T40] audit: type=1400 audit(1774000998.300:52165): avc: denied { create } for pid=28673 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 595.142075][T28457] ,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5970,pid=28434,uid=0 [ 595.142148][T28457] Memory cgroup out of memory: Killed process 28434 (syz.9.5970) total-vm:49400kB, anon-rss:0kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 595.269297][ T40] audit: type=1400 audit(1774000998.300:52166): avc: denied { write open } for pid=28673 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=18687 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 595.323367][ T40] audit: type=1400 audit(1774000998.300:52167): avc: denied { append } for pid=28673 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=18687 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 595.399558][ T40] audit: type=1400 audit(1774000998.310:52168): avc: denied { getattr } for pid=28673 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 595.430403][ T40] audit: type=1400 audit(1774000998.370:52169): avc: denied { read write } for pid=28670 comm="syz.6.6026" name="lp0" dev="devtmpfs" ino=3846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 595.489309][ T40] audit: type=1400 audit(1774000998.370:52170): avc: denied { open } for pid=28670 comm="syz.6.6026" path="/dev/usb/lp0" dev="devtmpfs" ino=3846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 595.677742][T28449] syz.9.5970 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 595.728579][T28449] CPU: 2 UID: 0 PID: 28449 Comm: syz.9.5970 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.728617][T28449] Tainted: [L]=SOFTLOCKUP [ 595.728625][T28449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 595.728638][T28449] Call Trace: [ 595.728646][T28449] [ 595.728656][T28449] dump_stack_lvl+0x100/0x190 [ 595.728698][T28449] dump_header+0xfb/0x606 [ 595.728725][T28449] oom_kill_process.cold+0xd/0x330 [ 595.728752][T28449] out_of_memory+0x340/0x14f0 [ 595.728790][T28449] ? __pfx_out_of_memory+0x10/0x10 [ 595.728829][T28449] mem_cgroup_out_of_memory+0xc6/0x130 [ 595.728857][T28449] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 595.728883][T28449] ? find_held_lock+0x2b/0x80 [ 595.728917][T28449] ? do_raw_spin_unlock+0x145/0x1e0 [ 595.728943][T28449] ? _raw_spin_unlock+0x28/0x50 [ 595.728971][T28449] try_charge_memcg+0x652/0xc90 [ 595.728998][T28449] ? __pfx_try_charge_memcg+0x10/0x10 [ 595.729017][T28449] ? find_held_lock+0x2b/0x80 [ 595.729040][T28449] ? rcu_read_unlock+0x17/0x60 [ 595.729058][T28449] ? rcu_read_unlock+0x17/0x60 [ 595.729087][T28449] charge_memcg+0xa6/0x280 [ 595.729106][T28449] __mem_cgroup_charge+0x2b/0x1e0 [ 595.729129][T28449] shmem_alloc_and_add_folio+0x451/0xd40 [ 595.729180][T28449] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 595.729210][T28449] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 595.729243][T28449] shmem_get_folio_gfp+0x6ab/0x1900 [ 595.729273][T28449] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 595.729306][T28449] shmem_write_begin+0x1a4/0x420 [ 595.729334][T28449] ? __pfx_shmem_write_begin+0x10/0x10 [ 595.729360][T28449] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 595.729385][T28449] ? lockdep_hardirqs_on+0x78/0x100 [ 595.729410][T28449] generic_perform_write+0x292/0xa40 [ 595.729444][T28449] ? __pfx_generic_perform_write+0x10/0x10 [ 595.729472][T28449] ? file_update_time_flags+0x373/0x500 [ 595.729499][T28449] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 595.729518][T28449] shmem_file_write_iter+0x10e/0x140 [ 595.729539][T28449] __kernel_write_iter+0x2ac/0x920 [ 595.729569][T28449] ? __pfx___kernel_write_iter+0x10/0x10 [ 595.729594][T28449] ? cgroup1_freezing+0x12c/0x3b0 [ 595.729619][T28449] ? cgroup1_freezing+0x136/0x3b0 [ 595.729639][T28449] ? freezing_slow_path+0xb5/0x1a0 [ 595.729663][T28449] dump_user_range+0x3f9/0xb50 [ 595.729693][T28449] ? __pfx_dump_user_range+0x10/0x10 [ 595.729723][T28449] ? __pfx_writenote+0x10/0x10 [ 595.729752][T28449] elf_core_dump+0x2d5f/0x3d10 [ 595.729791][T28449] ? __pfx_elf_core_dump+0x10/0x10 [ 595.729815][T28449] ? kasan_save_stack+0x3f/0x50 [ 595.729838][T28449] ? kasan_save_stack+0x30/0x50 [ 595.729863][T28449] ? __kasan_kmalloc+0xaa/0xb0 [ 595.729887][T28449] ? __kvmalloc_node_noprof+0x360/0xa00 [ 595.729914][T28449] ? vfs_coredump+0x2105/0x5570 [ 595.729938][T28449] ? asm_exc_page_fault+0x26/0x30 [ 595.729961][T28449] ? 0xffffffffff600000 [ 595.730028][T28449] ? vfs_coredump+0x27bc/0x5570 [ 595.730049][T28449] vfs_coredump+0x27bc/0x5570 [ 595.730086][T28449] ? __pfx_vfs_coredump+0x10/0x10 [ 595.730112][T28449] ? __lock_acquire+0x4a5/0x2630 [ 595.730142][T28449] ? lock_acquire+0x1cf/0x380 [ 595.730173][T28449] ? is_bpf_text_address+0x8a/0x1a0 [ 595.730201][T28449] ? bpf_ksym_find+0x128/0x1c0 [ 595.730227][T28449] ? __kernel_text_address+0xd/0x30 [ 595.730249][T28449] ? unwind_get_return_address+0x59/0xa0 [ 595.730273][T28449] ? arch_stack_walk+0xa6/0xf0 [ 595.730305][T28449] ? __sigqueue_free+0xbe/0x2a0 [ 595.730332][T28449] ? stack_trace_save+0x8e/0xc0 [ 595.730357][T28449] ? __pfx_stack_trace_save+0x10/0x10 [ 595.730388][T28449] ? stack_depot_save_flags+0x27/0x9d0 [ 595.730410][T28449] ? __lock_acquire+0x4a5/0x2630 [ 595.730473][T28449] ? proc_coredump_connector+0x2d3/0x4f0 [ 595.730498][T28449] ? __pfx_proc_coredump_connector+0x10/0x10 [ 595.730527][T28449] ? rcu_is_watching+0x12/0xc0 [ 595.730555][T28449] get_signal+0x1f2a/0x21e0 [ 595.730591][T28449] ? __pfx_get_signal+0x10/0x10 [ 595.730623][T28449] arch_do_signal_or_restart+0x91/0x7a0 [ 595.730651][T28449] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 595.730684][T28449] ? do_user_addr_fault+0x8d6/0x12f0 [ 595.730714][T28449] irqentry_exit+0x1f8/0x670 [ 595.730742][T28449] asm_exc_page_fault+0x26/0x30 [ 595.730761][T28449] RIP: 0033:0x7f0d4299c799 [ 595.730784][T28449] Code: Unable to access opcode bytes at 0x7f0d4299c76f. [ 595.730793][T28449] RSP: 002b:00007f0d4380afd8 EFLAGS: 00010246 [ 595.730809][T28449] RAX: 0000000000000000 RBX: 00007f0d42c16090 RCX: 00007f0d4299c799 [ 595.730821][T28449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.730832][T28449] RBP: 00007f0d42a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 595.730843][T28449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.730854][T28449] R13: 00007f0d42c16128 R14: 00007f0d42c16090 R15: 00007ffec2a12ed8 [ 595.730915][T28449] [ 596.049287][T28449] memory: usage 307200kB, limit 307200kB, failcnt 48528 [ 596.053161][T28449] memory+swap: usage 358104kB, limit 9007199254740988kB, failcnt 0 [ 596.057477][T28449] kmem: usage 6512kB, limit 9007199254740988kB, failcnt 0 [ 596.061430][T28449] Memory cgroup stats for /syz9: [ 596.061551][T28449] cache 307863552 [ 596.065615][T28449] rss 24576 [ 596.067140][T28449] rss_huge 0 [ 596.068696][T28449] shmem 307712000 [ 596.070645][T28449] mapped_file 0 [ 596.072650][T28449] dirty 0 [ 596.074421][T28449] writeback 0 [ 596.076438][T28449] workingset_refault_anon 10 [ 596.078663][T28449] workingset_refault_file 14329 [ 596.081086][T28449] swap 52125696 [ 596.082790][T28449] swapcached 170074112 [ 596.084686][T28449] pgpgin 299246 [ 596.086266][T28449] pgpgout 224074 [ 596.088022][T28449] pgfault 50353 [ 596.089716][T28449] pgmajfault 171 [ 596.091369][T28449] inactive_anon 137318400 [ 596.093550][T28449] active_anon 170434560 [ 596.095428][T28449] inactive_file 139264 [ 596.097211][T28449] active_file 0 [ 596.098781][T28449] unevictable 0 [ 596.100550][T28449] hierarchical_memory_limit 314572800 [ 596.103122][T28449] hierarchical_memsw_limit 9223372036854771712 [ 596.105790][T28449] total_cache 307863552 [ 596.107751][T28449] total_rss 24576 [ 596.109777][T28449] total_rss_huge 0 [ 596.112023][T28449] total_shmem 307712000 [ 596.114334][T28449] total_mapped_file 0 [ 596.116447][T28449] total_dirty 0 [ 596.117976][T28449] total_writeback 0 [ 596.119728][T28449] total_workingset_refault_anon 10 [ 596.122032][T28449] total_workingset_refault_file 14329 [ 596.124700][T28449] total_swap 52125696 [ 596.126712][T28449] total_swapcached 170074112 [ 596.128816][T28449] total_pgpgin 299246 [ 596.130945][T28449] total_pgpgout 224074 [ 596.132924][T28449] total_pgfault 50353 [ 596.135267][T28449] total_pgmajfault 171 [ 596.138185][T28449] total_inactive_anon 137318400 [ 596.141030][T28449] total_active_anon 170434560 [ 596.143401][T28449] total_inactive_file 139264 [ 596.145521][T28449] total_active_file 0 [ 596.147309][T28449] total_unevictable 0 [ 596.149060][T28449] anon_cost 0 [ 596.151217][T28449] file_cost 0 [ 596.152954][T28449] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.5970,pid=28452,uid=0 [ 596.160724][T28449] Memory cgroup out of memory: Killed process 28452 (syz.9.5970) total-vm:49400kB, anon-rss:0kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 596.298679][T28566] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 596.466514][T28566] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 596.705170][T28566] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 596.771282][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 596.788140][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 596.804220][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 596.811473][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 596.811801][T28566] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 596.842496][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 596.929120][T21976] IPVS: stop unused estimator thread 0... [ 597.091212][T28566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.191705][ T5340] usb 11-1: USB disconnect, device number 29 [ 597.199587][ T5340] usblp0: removed [ 597.245799][T28701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.270565][T28686] lo speed is unknown, defaulting to 1000 [ 597.306177][T28566] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.377629][T28701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.397621][T21976] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.400977][T21976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.407068][T28706] QAT: failed to copy from user cfg_data. [ 597.411613][T28706] binder: 28705:28706 ioctl f50f 0 returned -22 [ 597.473396][T16915] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.476912][T16915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.573445][T28701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.685401][T28686] chnl_net:caif_netlink_parms(): no params data found [ 597.730144][T28701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.745281][T28726] netlink: 'syz.6.6033': attribute type 11 has an invalid length. [ 597.747909][T28443] syz.9.5970 (28443) used greatest stack depth: 18888 bytes left [ 597.871093][T28686] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.874742][T28686] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.878713][T28686] bridge_slave_0: entered allmulticast mode [ 597.884905][T28686] bridge_slave_0: entered promiscuous mode [ 597.891500][T28686] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.895661][T28686] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.899023][T28686] bridge_slave_1: entered allmulticast mode [ 597.905147][T28686] bridge_slave_1: entered promiscuous mode [ 597.923891][T28566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.997936][T28686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.025040][T28686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.032956][T28734] hpfs: Bad magic ... probably not HPFS [ 598.032976][T21976] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.076614][T21976] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.105013][T28745] program syz.6.6035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 598.108864][T28745] ata1.00: invalid service action 31 [ 598.135914][T28748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6036'. [ 598.140335][T16915] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.141092][T28748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6036'. [ 598.147209][T28686] team0: Port device team_slave_0 added [ 598.164617][ T212] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.172024][T28566] veth0_vlan: entered promiscuous mode [ 598.178234][T28686] team0: Port device team_slave_1 added [ 598.193300][T28566] veth1_vlan: entered promiscuous mode [ 598.217194][T28686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.221984][T28686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.232595][T28686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.237552][T28686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.240855][T28686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.250236][T28686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.309897][T28686] hsr_slave_0: entered promiscuous mode [ 598.313530][T28686] hsr_slave_1: entered promiscuous mode [ 598.316966][T28686] debugfs: 'hsr0' already exists in 'hsr' [ 598.321081][T28686] Cannot create hsr debugfs directory [ 598.329116][T28566] veth0_macvtap: entered promiscuous mode [ 598.345087][T28566] veth1_macvtap: entered promiscuous mode [ 598.366697][T28566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.397121][T28566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.467506][T21974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.485272][T21974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.515242][T21974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.528674][T28777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6044'. [ 598.540682][T21974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.600298][T21974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.603793][T21974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.670968][T28783] veth1_macvtap: left promiscuous mode [ 598.673864][T28783] macsec0: entered allmulticast mode [ 598.685723][T28783] veth1_macvtap: entered promiscuous mode [ 598.688158][T28783] veth1_macvtap: entered allmulticast mode [ 598.693099][T28783] macsec0: left allmulticast mode [ 598.695271][T28783] veth1_macvtap: left allmulticast mode [ 598.711509][T16915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.714514][T16915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.742397][T28783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6043'. [ 598.939631][ T5934] Bluetooth: hci2: command tx timeout [ 598.963952][T28808] loop6: detected capacity change from 0 to 7 [ 598.976928][ C1] blk_print_req_error: 138 callbacks suppressed [ 598.976943][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 598.983292][ C1] buffer_io_error: 138 callbacks suppressed [ 598.983309][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 598.990522][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 598.994071][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 598.997382][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.001851][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.006769][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.010389][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.010659][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.010680][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.012596][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.025608][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.029215][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.034765][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.037842][T28808] ldm_validate_partition_table(): Disk read failed. [ 599.041443][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.045921][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.054130][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.058522][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.062441][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.066578][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 599.082396][T28808] Dev loop6: unable to read RDB block 0 [ 599.086548][T28808] loop6: unable to read partition table [ 599.091211][T28808] loop6: partition table beyond EOD, truncated [ 599.094184][T28808] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 599.104205][T28814] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.6050'. [ 599.166774][T28820] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 599.187855][T28823] tun0: tun_chr_ioctl cmd 1074025672 [ 599.191295][T28823] tun0: ignored: set checksum disabled [ 599.197394][T28823] overlay: ./file0 is not a directory [ 599.346195][T28686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 599.352658][T28686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 599.365265][T28686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 599.371457][T28686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 599.444768][T28686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.460871][T28686] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.471164][T23058] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.474142][T23058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.485823][T16915] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.488496][T16915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.621116][T28842] hpfs: Bad magic ... probably not HPFS [ 599.690927][T28686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.707873][T28866] macsec1: entered promiscuous mode [ 599.712413][T28866] macsec1: entered allmulticast mode [ 599.757499][T28686] veth0_vlan: entered promiscuous mode [ 599.768927][T28686] veth1_vlan: entered promiscuous mode [ 599.797227][T28686] veth0_macvtap: entered promiscuous mode [ 599.802377][T28686] veth1_macvtap: entered promiscuous mode [ 599.811917][T28686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.823109][T28686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.830556][T16915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.833776][T16915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.838071][T16915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.842878][T16915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.894426][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.898034][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.901347][ T5934] Bluetooth: hci0: command tx timeout [ 599.931838][T21976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.935524][T21976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.003341][T28880] hfsplus: unable to find HFS+ superblock [ 600.085296][ T40] kauditd_printk_skb: 297 callbacks suppressed [ 600.085313][ T40] audit: type=1400 audit(1774001003.260:52468): avc: denied { read } for pid=28885 comm="syz.0.6059" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 600.100883][ T40] audit: type=1400 audit(1774001003.270:52469): avc: denied { open } for pid=28885 comm="syz.0.6059" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 600.110194][ T40] audit: type=1400 audit(1774001003.280:52470): avc: denied { ioctl } for pid=28885 comm="syz.0.6059" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 600.121190][ T40] audit: type=1400 audit(1774001003.280:52471): avc: denied { allowed } for pid=28885 comm="syz.0.6059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 600.128912][ T40] audit: type=1400 audit(1774001003.290:52472): avc: denied { create } for pid=28885 comm="syz.0.6059" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 600.142626][ T40] audit: type=1400 audit(1774001003.290:52473): avc: denied { map } for pid=28885 comm="syz.0.6059" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=120522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 600.152287][ T40] audit: type=1400 audit(1774001003.290:52474): avc: denied { read write } for pid=28885 comm="syz.0.6059" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=120522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 600.161596][ T40] audit: type=1400 audit(1774001003.290:52475): avc: denied { create } for pid=28885 comm="syz.0.6059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 600.169777][ T40] audit: type=1400 audit(1774001003.290:52476): avc: denied { bind } for pid=28885 comm="syz.0.6059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 600.176946][ T40] audit: type=1400 audit(1774001003.290:52477): avc: denied { setopt } for pid=28885 comm="syz.0.6059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 600.207490][T28893] xt_hashlimit: size too large, truncated to 1048576 [ 600.444196][T28904] veth0_virt_wifi: default FDB implementation only supports local addresses [ 600.558001][T28913] geneve2: entered promiscuous mode [ 600.636593][T28916] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 600.733490][T28920] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 600.744423][T28919] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6068'. [ 600.765620][T28919] netlink: 9 bytes leftover after parsing attributes in process `syz.6.6068'. [ 601.019420][ T5934] Bluetooth: hci2: command tx timeout [ 601.359834][T28942] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 601.362218][T28942] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 601.367258][T28942] vhci_hcd vhci_hcd.0: Device attached [ 601.602459][T28943] vhci_hcd: connection closed [ 601.609269][T16915] vhci_hcd vhci_hcd.6: stop threads [ 601.618533][T16915] vhci_hcd vhci_hcd.6: release socket [ 601.622254][ T5950] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 601.624872][T16915] vhci_hcd vhci_hcd.6: disconnect device [ 601.629034][ T5950] usb 49-1: enqueue for inactive port 0 [ 601.661072][T28955] netlink: 424 bytes leftover after parsing attributes in process `syz.2.6077'. [ 601.699974][ T5950] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 602.240890][T28970] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 602.248312][T28970] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6081'. [ 602.614043][T28983] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6085'. [ 602.930955][T22185] usb 11-1: new low-speed USB device number 30 using dummy_hcd [ 603.099328][ T5934] Bluetooth: hci2: command tx timeout [ 603.105778][T22185] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 603.111849][T22185] usb 11-1: config 0 has no interface number 0 [ 603.114061][T22185] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.117820][T22185] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 603.123186][T22185] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 603.127270][T22185] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 603.131607][T22185] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 603.135498][T22185] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 603.140413][T22185] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 603.143626][T22185] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.152852][T22185] usb 11-1: config 0 descriptor?? [ 603.170127][T28993] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 603.185673][T22185] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 603.375693][T28993] ldusb 11-1:0.55: Couldn't submit interrupt_in_urb -90 [ 603.383260][ T5988] usb 11-1: USB disconnect, device number 30 [ 603.403089][ T5988] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 603.593331][T29027] netlink: 'syz.3.6099': attribute type 5 has an invalid length. [ 604.148597][T29052] __nla_validate_parse: 1 callbacks suppressed [ 604.148616][T29052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6108'. [ 604.157671][T29051] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6107'. [ 604.171640][T29055] siw: device registration error -23 [ 605.020751][ T2068] block nbd2: Possible stuck request ffff888029a38000: control (read@0,1024B). Runtime 120 seconds [ 605.022652][T29097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29712 sclass=netlink_route_socket pid=29097 comm=syz.0.6121 [ 605.026387][ T2068] block nbd2: Possible stuck request ffff888029a38200: control (read@1024,1024B). Runtime 120 seconds [ 605.036870][ T2068] block nbd2: Possible stuck request ffff888029a38400: control (read@2048,1024B). Runtime 120 seconds [ 605.044262][ T2068] block nbd2: Possible stuck request ffff888029a38600: control (read@3072,1024B). Runtime 120 seconds [ 605.127241][ T40] kauditd_printk_skb: 279 callbacks suppressed [ 605.127256][ T40] audit: type=1400 audit(1774001008.300:52757): avc: denied { create } for pid=29107 comm="syz.3.6124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 605.149399][ T40] audit: type=1400 audit(1774001008.300:52758): avc: denied { write } for pid=29107 comm="syz.3.6124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 605.157220][ T40] audit: type=1400 audit(1774001008.300:52759): avc: denied { read write } for pid=29107 comm="syz.3.6124" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 605.167724][ T40] audit: type=1400 audit(1774001008.300:52760): avc: denied { open } for pid=29107 comm="syz.3.6124" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 605.176833][ T40] audit: type=1400 audit(1774001008.300:52761): avc: denied { create } for pid=29107 comm="syz.3.6124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 605.184685][ T40] audit: type=1400 audit(1774001008.300:52762): avc: denied { read write } for pid=29107 comm="syz.3.6124" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 605.189972][ T5934] Bluetooth: hci2: command tx timeout [ 605.194525][ T40] audit: type=1400 audit(1774001008.300:52763): avc: denied { open } for pid=29107 comm="syz.3.6124" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 605.194556][ T40] audit: type=1400 audit(1774001008.300:52764): avc: denied { ioctl } for pid=29107 comm="syz.3.6124" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 605.194582][ T40] audit: type=1400 audit(1774001008.310:52765): avc: denied { create } for pid=29110 comm="syz.0.6126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 605.194606][ T40] audit: type=1400 audit(1774001008.310:52766): avc: denied { write } for pid=29110 comm="syz.0.6126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 605.988236][T29146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=29146 comm=syz.6.6134 [ 606.483495][T29148] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 606.841201][T29166] openvswitch: netlink: Key type 321 is out of range max 32 [ 607.025887][T29184] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 607.304493][T29200] overlay: Unknown parameter 'permit_directio' [ 607.335227][T29202] netlink: 256 bytes leftover after parsing attributes in process `syz.6.6153'. [ 607.338768][T29202] unsupported nlmsg_type 40 [ 607.421858][ T5940] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 607.426895][ T5940] Bluetooth: hci3: Injecting HCI hardware error event [ 607.435169][ T5940] Bluetooth: hci3: hardware error 0x00 [ 607.598394][T29215] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6158'. [ 607.654064][T29217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.658037][T29217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.011087][T29235] random: crng reseeded on system resumption [ 608.228425][T29250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29250 comm=syz.3.6169 [ 608.235224][T29250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29250 comm=syz.3.6169 [ 608.241460][T29250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29250 comm=syz.3.6169 [ 608.247753][T29250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29250 comm=syz.3.6169 [ 608.255149][T29250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29250 comm=syz.3.6169 [ 608.261545][T29250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29250 comm=syz.3.6169 [ 608.268069][T29250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29250 comm=syz.3.6169 [ 608.273554][T29250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29250 comm=syz.3.6169 [ 608.558226][T29265] overlayfs: failed lookup in lower (newroot/54, name='file1', err=-40): overlapping layers [ 608.562177][T29265] overlayfs: failed lookup in lower (newroot/54, name='file1', err=-40): overlapping layers [ 608.863462][ T5942] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 608.882826][T29284] fuse: Bad value for 'user_id' [ 608.884953][T29284] fuse: Bad value for 'user_id' [ 608.949576][ T5942] Bluetooth: hci0: command tx timeout [ 609.421234][ T5942] Bluetooth: hci2: command 0x0405 tx timeout [ 609.500724][ T5940] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 609.753667][T29294] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6184'. [ 609.763664][T21976] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.865911][T21976] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.934609][T29301] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6188'. [ 609.955537][T21976] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.972769][T29299] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 609.976129][ T5934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 609.983155][T29298] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6187'. [ 609.994734][T29305] sp0: Synchronizing with TNC [ 609.995338][ T5934] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 610.002399][ T5934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 610.009051][ T5934] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 610.015179][ T5934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 610.028526][T21976] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.062626][T29302] lo speed is unknown, defaulting to 1000 [ 610.147004][ T40] kauditd_printk_skb: 206 callbacks suppressed [ 610.147026][ T40] audit: type=1400 audit(1774001013.320:52973): avc: denied { module_request } for pid=29302 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 610.202006][T29302] chnl_net:caif_netlink_parms(): no params data found [ 610.269741][ T40] audit: type=1400 audit(1774001013.450:52974): avc: denied { execmem } for pid=29313 comm="syz.0.6191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 610.277015][ T40] audit: type=1400 audit(1774001013.450:52975): avc: denied { execute } for pid=29313 comm="syz.0.6191" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=122404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 610.360009][T21976] bridge_slave_1: left allmulticast mode [ 610.363163][T21976] bridge_slave_1: left promiscuous mode [ 610.369355][T21976] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.377469][T21976] bridge_slave_0: left allmulticast mode [ 610.380388][T21976] bridge_slave_0: left promiscuous mode [ 610.384066][T21976] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.565140][T21976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.572148][T21976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.577115][T21976] bond0 (unregistering): Released all slaves [ 610.592357][T29302] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.595088][T29302] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.597663][T29302] bridge_slave_0: entered allmulticast mode [ 610.600786][T29302] bridge_slave_0: entered promiscuous mode [ 610.604747][T29302] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.607519][T29302] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.611257][T29302] bridge_slave_1: entered allmulticast mode [ 610.615551][T29302] bridge_slave_1: entered promiscuous mode [ 610.658247][T29302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.663804][T29302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.663925][ T40] audit: type=1400 audit(1774001013.840:52976): avc: denied { search } for pid=5644 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.674960][ T40] audit: type=1400 audit(1774001013.840:52977): avc: denied { search } for pid=5644 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.683618][ T40] audit: type=1400 audit(1774001013.840:52978): avc: denied { search } for pid=5644 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.689081][T29302] team0: Port device team_slave_0 added [ 610.693618][ T40] audit: type=1400 audit(1774001013.840:52979): avc: denied { read } for pid=5644 comm="dhcpcd" name="n164" dev="tmpfs" ino=19191 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 610.697521][T29302] team0: Port device team_slave_1 added [ 610.703041][ T40] audit: type=1400 audit(1774001013.840:52980): avc: denied { open } for pid=5644 comm="dhcpcd" path="/run/udev/data/n164" dev="tmpfs" ino=19191 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 610.713549][ T40] audit: type=1400 audit(1774001013.840:52981): avc: denied { getattr } for pid=5644 comm="dhcpcd" path="/run/udev/data/n164" dev="tmpfs" ino=19191 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 610.724734][T29302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.727709][T29302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.740005][T29302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.746274][T29302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.747793][ T40] audit: type=1400 audit(1774001013.920:52982): avc: denied { read open } for pid=29323 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.749402][T29302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.749423][T29302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.827781][T29302] hsr_slave_0: entered promiscuous mode [ 610.836282][T29302] hsr_slave_1: entered promiscuous mode [ 610.839609][T29302] debugfs: 'hsr0' already exists in 'hsr' [ 610.841649][T29302] Cannot create hsr debugfs directory [ 611.196288][T21976] hsr_slave_0: left promiscuous mode [ 611.199636][T21976] hsr_slave_1: left promiscuous mode [ 611.202299][T21976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.204798][T21976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.213150][T21976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.216136][T21976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.225830][T21976] veth1_macvtap: left promiscuous mode [ 611.228355][T21976] veth0_macvtap: left promiscuous mode [ 611.234345][T21976] veth1_vlan: left promiscuous mode [ 611.236510][T21976] veth0_vlan: left promiscuous mode [ 611.409886][T21976] team0 (unregistering): Port device team_slave_1 removed [ 611.419132][T21976] team0 (unregistering): Port device team_slave_0 removed [ 611.437663][T29348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.450236][T29348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.062108][ T5940] Bluetooth: hci3: command tx timeout [ 612.326358][T29302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 612.336815][T29302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 612.344864][T29302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.352335][T29302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 612.426415][T29302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.445658][T29302] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.451586][T29390] fuse: Bad value for 'fd' [ 612.455901][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.459334][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.470444][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.472975][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.668551][T29302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.691220][T29409] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 612.694452][T29409] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 612.716727][T29302] veth0_vlan: entered promiscuous mode [ 612.719369][T29409] vhci_hcd vhci_hcd.0: Device attached [ 612.723326][T29410] usbip_core: unknown command [ 612.724993][T29410] vhci_hcd: unknown pdu 825766964 [ 612.726713][T29410] usbip_core: unknown command [ 612.729588][T23058] vhci_hcd vhci_hcd.0: stop threads [ 612.732237][T23058] vhci_hcd vhci_hcd.0: release socket [ 612.734336][T29302] veth1_vlan: entered promiscuous mode [ 612.734763][T23058] vhci_hcd vhci_hcd.0: disconnect device [ 612.783715][T29302] veth0_macvtap: entered promiscuous mode [ 612.791015][T29302] veth1_macvtap: entered promiscuous mode [ 612.808612][T29302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.825253][T29302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.837144][T21976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.851025][T21969] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.855253][T21969] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.857804][T29424] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 612.858814][T21969] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.914919][T29425] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6202'. [ 612.980202][T23058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.983619][T23058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.004378][T21969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.008265][T21969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.100882][T29434] selinux_netlink_send: 57 callbacks suppressed [ 613.100896][T29434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=29434 comm=syz.6.6203 [ 613.180965][ T5940] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 613.185961][ T5940] Bluetooth: hci0: Injecting HCI hardware error event [ 613.189589][ T5940] Bluetooth: hci0: hardware error 0x00 [ 613.309341][T25338] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 613.465952][T25338] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.473607][T25338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 613.477428][T25338] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 613.483782][T25338] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.488081][T25338] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.491321][T25338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.502877][T25338] usb 6-1: config 0 descriptor?? [ 613.559016][T29463] netlink: 'syz.0.6207': attribute type 1 has an invalid length. [ 613.583643][T29463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.606587][T29463] bond1: (slave bridge1): making interface the new active one [ 613.611987][T29463] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 613.720782][T29475] trusted_key: encrypted_key: keyword 'u' not recognized [ 613.913638][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.918690][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.921708][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.924386][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.927139][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.930342][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.933025][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.935481][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.939311][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.945939][T25338] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 613.956338][T25338] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 614.137061][T29501] xt_hashlimit: invalid rate [ 614.139918][ T5934] Bluetooth: hci3: command tx timeout [ 614.146870][T29501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6212'. [ 614.149800][T29501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6212'. [ 614.157275][T21976] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.160510][T29501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6212'. [ 614.161102][T21976] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.163905][T29501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6212'. [ 614.167233][T21976] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.171815][ T6076] usb 6-1: USB disconnect, device number 64 [ 614.172937][T21976] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.622509][T29532] pimreg: entered allmulticast mode [ 614.740428][T29538] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 614.865656][T29541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29541 comm=syz.1.6221 [ 615.167127][ T40] kauditd_printk_skb: 299 callbacks suppressed [ 615.167140][ T40] audit: type=1400 audit(1774001018.340:53282): avc: denied { ioctl } for pid=29540 comm="syz.1.6221" path="/dev/virtual_nci" dev="devtmpfs" ino=709 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 615.241672][ T40] audit: type=1400 audit(1774001018.420:53283): avc: denied { write } for pid=29553 comm="syz.1.6223" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 615.252443][ T40] audit: type=1400 audit(1774001018.420:53284): avc: denied { open } for pid=29553 comm="syz.1.6223" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 615.259002][T29554] syzkaller1: entered promiscuous mode [ 615.264548][ T5940] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 615.265781][T29554] syzkaller1: entered allmulticast mode [ 615.267810][ T40] audit: type=1400 audit(1774001018.420:53285): avc: denied { name_bind } for pid=29553 comm="syz.1.6223" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 615.267839][ T40] audit: type=1400 audit(1774001018.420:53286): avc: denied { node_bind } for pid=29553 comm="syz.1.6223" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 615.267863][ T40] audit: type=1400 audit(1774001018.420:53287): avc: denied { create } for pid=29553 comm="syz.1.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 615.267886][ T40] audit: type=1400 audit(1774001018.420:53288): avc: denied { bind } for pid=29553 comm="syz.1.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 615.267908][ T40] audit: type=1400 audit(1774001018.420:53289): avc: denied { setopt } for pid=29553 comm="syz.1.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 615.267931][ T40] audit: type=1400 audit(1774001018.420:53290): avc: denied { accept } for pid=29553 comm="syz.1.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 615.267952][ T40] audit: type=1400 audit(1774001018.420:53291): avc: denied { write } for pid=29553 comm="syz.1.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 615.938517][ T5988] hid-generic 0006:0004:0009.0012: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 615.983441][T29568] fido_id[29568]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 616.219542][ T5940] Bluetooth: hci3: command tx timeout [ 616.607738][T29589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6232'. [ 616.849094][T29599] binder: BINDER_SET_CONTEXT_MGR already set [ 616.853324][T29599] binder: 29594:29599 ioctl 4018620d 2000000001c0 returned -16 [ 616.898159][T29604] netlink: 'syz.6.6235': attribute type 4 has an invalid length. [ 616.920793][T29604] netlink: 'syz.6.6235': attribute type 4 has an invalid length. [ 616.978663][ T5934] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 616.990877][ T5934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 616.992289][T29612] input: syz1 as /devices/virtual/input/input50 [ 616.996768][ T5934] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 617.003667][ T5934] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 617.007500][ T5934] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 617.011344][T29610] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6238'. [ 617.045971][T29607] lo speed is unknown, defaulting to 1000 [ 617.191890][T29607] chnl_net:caif_netlink_parms(): no params data found [ 617.282106][T29607] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.285432][T29607] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.288214][T29607] bridge_slave_0: entered allmulticast mode [ 617.291410][T29607] bridge_slave_0: entered promiscuous mode [ 617.297870][T29607] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.300447][T29607] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.303009][T29607] bridge_slave_1: entered allmulticast mode [ 617.303696][T29639] netlink: 'syz.0.6242': attribute type 16 has an invalid length. [ 617.305845][T29607] bridge_slave_1: entered promiscuous mode [ 617.307754][T29639] netlink: 'syz.0.6242': attribute type 17 has an invalid length. [ 617.334821][T29639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 617.354250][T29607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.357421][T29637] lo speed is unknown, defaulting to 1000 [ 617.360475][T29607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.385754][T29641] tmpfs: Bad value for 'mpol' [ 617.389726][T29607] team0: Port device team_slave_0 added [ 617.392191][T29641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6243'. [ 617.397740][T29607] team0: Port device team_slave_1 added [ 617.433071][T29607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.435657][T29607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.445417][T29607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.453198][T29607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.455515][T29607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.464751][T29607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.553239][T29607] hsr_slave_0: entered promiscuous mode [ 617.557010][T29607] hsr_slave_1: entered promiscuous mode [ 617.561221][T29607] debugfs: 'hsr0' already exists in 'hsr' [ 617.564015][T29607] Cannot create hsr debugfs directory [ 617.652392][T29655] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 617.852252][T29673] bond2: entered promiscuous mode [ 617.930540][T29687] openvswitch: netlink: IPv4 tunnel dst address is zero [ 617.938577][T29688] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6256'. [ 617.942333][T29687] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6256'. [ 617.945706][T29687] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6256'. [ 617.951807][T29688] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6256'. [ 618.043259][T29696] netlink: 'syz.0.6258': attribute type 2 has an invalid length. [ 618.098047][T29700] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6258'. [ 618.122067][T29696] !: entered promiscuous mode [ 618.140749][T27732] bridge0: port 3(syz_tun) entered disabled state [ 618.166955][T27732] syz_tun (unregistering): left allmulticast mode [ 618.170505][T27732] syz_tun (unregistering): left promiscuous mode [ 618.173027][T27732] bridge0: port 3(syz_tun) entered disabled state [ 618.213172][T29707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6261'. [ 618.229133][T29707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 618.233318][T29707] gretap1: entered promiscuous mode [ 618.235618][T29707] gretap1: entered allmulticast mode [ 618.301001][ T5940] Bluetooth: hci3: command tx timeout [ 618.427690][T21974] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.510795][T29728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6264'. [ 618.549585][ T6061] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 618.558099][T21974] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.576107][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.579035][T29734] openvswitch: netlink: IP tunnel dst address not specified [ 618.581741][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.586853][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.591359][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.596155][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 618.709367][T21974] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.731581][ T6061] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 618.733312][T29731] lo speed is unknown, defaulting to 1000 [ 618.735627][ T6061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.746062][ T6061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.751159][ T6061] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 618.757269][ T6061] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 618.779394][ T6061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.784502][ T6061] usb 6-1: config 0 descriptor?? [ 618.787413][T21974] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.836504][T29607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 618.846652][T29607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 618.876044][T29607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 618.894366][T29607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 618.900981][T29746] nvme_fabrics: missing parameter 'transport=%s' [ 618.906668][T29746] nvme_fabrics: missing parameter 'nqn=%s' [ 619.036382][T29731] chnl_net:caif_netlink_parms(): no params data found [ 619.050267][T21974] bridge_slave_1: left allmulticast mode [ 619.052478][T21974] bridge_slave_1: left promiscuous mode [ 619.054597][T21974] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.060725][T21974] bridge_slave_0: left allmulticast mode [ 619.063300][T21974] bridge_slave_0: left promiscuous mode [ 619.065916][T21974] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.100234][ T5940] Bluetooth: hci5: command tx timeout [ 619.201651][ T6061] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 619.231584][T21974] erspan0 (unregistering): left promiscuous mode [ 619.236890][ T6061] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 619.307015][T21974] bridge0 (unregistering): left promiscuous mode [ 619.488111][T21974] bond0 (unregistering): left promiscuous mode [ 619.491141][T21974] bond_slave_0: left promiscuous mode [ 619.493725][T21974] bond_slave_1: left promiscuous mode [ 619.501768][T21974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.512209][T21974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.517896][T21974] bond0 (unregistering): Released all slaves [ 619.550267][ T6004] usb 6-1: USB disconnect, device number 65 [ 619.627873][T29731] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.630499][T29731] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.633937][T29731] bridge_slave_0: entered allmulticast mode [ 619.637042][T29731] bridge_slave_0: entered promiscuous mode [ 619.662964][T29731] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.666288][T29731] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.670662][T29731] bridge_slave_1: entered allmulticast mode [ 619.674577][T29731] bridge_slave_1: entered promiscuous mode [ 619.733684][T29731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.741776][T29731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.767984][T29731] team0: Port device team_slave_0 added [ 619.791172][T29731] team0: Port device team_slave_1 added [ 619.814430][T29731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.817103][T29731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.826904][T29731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.831755][T29731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.834181][T29731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.843300][T29731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.939445][T21974] hsr_slave_0: left promiscuous mode [ 619.945552][T21974] hsr_slave_1: left promiscuous mode [ 619.948525][T21974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.968627][T21974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.973646][T21974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.976321][T21974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.988840][T21974] veth1_macvtap: left promiscuous mode [ 619.993153][T21974] veth0_macvtap: left promiscuous mode [ 619.995781][T21974] veth1_vlan: left promiscuous mode [ 619.998451][T21974] veth0_vlan: left promiscuous mode [ 620.124886][T29812] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 620.175528][ T40] kauditd_printk_skb: 396 callbacks suppressed [ 620.175541][ T40] audit: type=1400 audit(1774001023.350:53688): avc: denied { create } for pid=29813 comm="syz.1.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 620.186998][ T40] audit: type=1400 audit(1774001023.350:53689): avc: denied { create } for pid=29813 comm="syz.1.6277" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 620.194988][ T40] audit: type=1400 audit(1774001023.360:53690): avc: denied { write } for pid=29813 comm="syz.1.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 620.210654][ T40] audit: type=1400 audit(1774001023.360:53691): avc: denied { nlmsg_write } for pid=29813 comm="syz.1.6277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 620.224529][T21974] team0 (unregistering): Port device team_slave_1 removed [ 620.240666][T21974] team0 (unregistering): Port device team_slave_0 removed [ 620.281440][ T40] audit: type=1400 audit(1774001023.460:53692): avc: denied { map_create } for pid=29817 comm="syz.1.6279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 620.380862][T29731] hsr_slave_0: entered promiscuous mode [ 620.384540][ T40] audit: type=1400 audit(1774001023.560:53693): avc: denied { create } for pid=29819 comm="syz.1.6280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 620.385231][T29731] hsr_slave_1: entered promiscuous mode [ 620.397356][ T40] audit: type=1400 audit(1774001023.570:53694): avc: denied { setopt } for pid=29819 comm="syz.1.6280" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 620.398094][T29731] debugfs: 'hsr0' already exists in 'hsr' [ 620.408389][T29731] Cannot create hsr debugfs directory [ 620.432771][T29820] bond1: Unable to set up delay as MII monitoring is disabled [ 620.438092][T29820] bond1 (unregistering): Released all slaves [ 620.485663][T29823] pim6reg: entered allmulticast mode [ 620.494396][T29607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.547506][ T40] audit: type=1400 audit(1774001023.720:53695): avc: denied { module_request } for pid=29819 comm="syz.1.6280" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 620.577539][ T40] audit: type=1400 audit(1774001023.750:53696): avc: denied { recv } for pid=5919 comm="syz-executor" saddr=127.0.0.1 src=46464 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 620.599737][ T40] audit: type=1400 audit(1774001023.750:53697): avc: denied { mount } for pid=29819 comm="syz.1.6280" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 620.653630][T29821] pim6reg: left allmulticast mode [ 620.699658][ T5940] Bluetooth: hci0: command tx timeout [ 620.717428][T29607] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.750836][T23058] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.754190][T23058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.770930][T23056] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.773515][T23056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.848870][T29731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.858495][T29731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.179567][ T5940] Bluetooth: hci5: command tx timeout [ 621.304728][T29731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.311540][T29731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.400337][T29870] 9p: Bad value for 'rfdno' [ 621.404477][T29731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.408714][T29731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.437598][T29607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.510238][T29731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.514785][T29731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.586418][T29884] ALSA: seq fatal error: cannot create timer (-19) [ 621.646367][T29893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7704 sclass=netlink_route_socket pid=29893 comm=syz.0.6293 [ 621.681267][T29607] veth0_vlan: entered promiscuous mode [ 621.708586][T29607] veth1_vlan: entered promiscuous mode [ 621.764887][T29607] veth0_macvtap: entered promiscuous mode [ 621.771662][T29607] veth1_macvtap: entered promiscuous mode [ 621.791538][T29607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.798200][T29607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.824947][T21974] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.828312][T21974] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.833903][T29903] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 621.834501][T21974] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.842969][T21974] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.848549][T29731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 621.861297][T29731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 621.868029][T29731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 621.877201][T29731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 621.960531][ T5988] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 622.000102][T23056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.004247][T23056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.043443][T29731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.067319][T23056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.073697][T23056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.081409][T29731] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.105041][T23056] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.108528][T23056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.115058][T23056] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.118541][T23056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.121352][ T5988] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 622.125807][ T5988] usb 6-1: config 0 has no interface number 0 [ 622.128146][ T5988] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 622.148986][ T5988] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 622.162079][ T5988] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 622.170399][ T5988] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 622.174706][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 622.177550][T29932] __nla_validate_parse: 2 callbacks suppressed [ 622.177562][T29932] netlink: 45 bytes leftover after parsing attributes in process `syz.5.6236'. [ 622.177586][ T5988] usb 6-1: Product: syz [ 622.186033][ T5988] usb 6-1: SerialNumber: syz [ 622.192224][ T5988] usb 6-1: config 0 descriptor?? [ 622.196853][ T5988] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 622.212353][ T5988] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input53 [ 622.293615][T29942] xt_cgroup: xt_cgroup: no path or classid specified [ 622.387509][T29947] bond1: Unable to set down delay as MII monitoring is disabled [ 622.393994][T29947] bond1 (unregistering): Released all slaves [ 622.467446][T29731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.530754][T29939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.538566][T29939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.545492][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.550823][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.553624][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.556139][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.558926][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.559763][T29939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.561552][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.566486][T29939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.567778][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.573799][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.578547][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.581443][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 622.585428][ T5988] usb 6-1: USB disconnect, device number 66 [ 622.587689][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 622.597364][ T5988] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 622.698117][T29970] random: crng reseeded on system resumption [ 622.731756][T29731] veth0_vlan: entered promiscuous mode [ 622.739041][T29731] veth1_vlan: entered promiscuous mode [ 622.759649][T29731] veth0_macvtap: entered promiscuous mode [ 622.769796][T29731] veth1_macvtap: entered promiscuous mode [ 622.779642][ T5940] Bluetooth: hci0: command tx timeout [ 622.791503][T29731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.801861][T29731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.813776][T16915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.817129][T29973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=29973 comm=syz.5.6306 [ 622.817216][T16915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.828126][T16915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.834332][T16915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.905747][T23058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.910471][T23058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.957720][T16915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.961654][T16915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.010496][T29978] QAT: Stopping all acceleration devices. [ 623.012417][T29981] No control pipe specified [ 623.081037][T29990] netlink: 'syz.5.6310': attribute type 5 has an invalid length. [ 623.147826][T29994] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 623.158455][T29994] afs: Unknown parameter 'dynr/fscreate' [ 623.233717][T29994] misc userio: Can't change port type on an already running userio instance [ 623.273929][ T5940] Bluetooth: hci5: command tx timeout [ 623.294258][T30007] hpfs: Bad magic ... probably not HPFS [ 623.418252][T30017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6321'. [ 623.493047][T30029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6325'. [ 623.625379][T30046] netlink: 'syz.0.6330': attribute type 166 has an invalid length. [ 623.706162][T30049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6331'. [ 623.710697][T30049] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6331'. [ 623.817832][T30052] bridge_slave_1: left allmulticast mode [ 623.825875][T30052] bridge_slave_1: left promiscuous mode [ 623.828517][T30052] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.844604][T30052] bridge_slave_0: left allmulticast mode [ 623.847280][T30052] bridge_slave_0: left promiscuous mode [ 623.851707][T30052] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.163027][T30073] bond3: Unable to set down delay as MII monitoring is disabled [ 624.167265][T30073] bond3 (unregistering): Released all slaves [ 624.187086][T30067] netlink: 'syz.1.6336': attribute type 4 has an invalid length. [ 624.409745][T30081] netlink: 'syz.0.6339': attribute type 1 has an invalid length. [ 624.455032][T30081] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.476989][T30084] bridge3: entered allmulticast mode [ 624.483750][T30084] bond3: (slave bridge3): making interface the new active one [ 624.488258][T30084] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 624.869788][ T5940] Bluetooth: hci0: command tx timeout [ 625.068546][T30095] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 625.073694][T30099] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 625.075661][T30095] kvm: requested 36038 ns i8254 timer period limited to 200000 ns [ 625.083252][T30095] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 625.112034][T30095] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 625.118768][T30095] kvm: requested 15923 ns i8254 timer period limited to 200000 ns [ 625.124264][T30095] kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 625.129424][T30095] kvm: requested 155885 ns i8254 timer period limited to 200000 ns [ 625.134948][T30095] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 625.142183][T30104] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 625.147198][T30095] kvm: requested 133257 ns i8254 timer period limited to 200000 ns [ 625.156541][T30095] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 625.246939][ T40] kauditd_printk_skb: 418 callbacks suppressed [ 625.246956][ T40] audit: type=1400 audit(1774001028.420:54116): avc: denied { create } for pid=30103 comm="syz.4.6345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 625.260237][ T40] audit: type=1400 audit(1774001028.440:54117): avc: denied { setopt } for pid=30103 comm="syz.4.6345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 625.268897][ T40] audit: type=1400 audit(1774001028.440:54118): avc: denied { map } for pid=30103 comm="syz.4.6345" path="socket:[130135]" dev="sockfs" ino=130135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 625.280272][ T40] audit: type=1400 audit(1774001028.440:54119): avc: denied { read } for pid=30103 comm="syz.4.6345" path="socket:[130135]" dev="sockfs" ino=130135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 625.339718][ T5940] Bluetooth: hci5: command tx timeout [ 625.368114][T30109] netlink: 'syz.1.6347': attribute type 21 has an invalid length. [ 625.372658][T30109] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6347'. [ 625.372706][ T40] audit: type=1400 audit(1774001028.520:54120): avc: denied { read write } for pid=30106 comm="syz.0.6346" name="video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 625.380516][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6347'. [ 625.390734][ T40] audit: type=1400 audit(1774001028.520:54121): avc: denied { open } for pid=30106 comm="syz.0.6346" path="/dev/video37" dev="devtmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 625.400279][ T40] audit: type=1400 audit(1774001028.520:54122): avc: denied { ioctl } for pid=30106 comm="syz.0.6346" path="/dev/video37" dev="devtmpfs" ino=1073 ioctlcmd=0x563f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 625.408110][ T40] audit: type=1400 audit(1774001028.520:54123): avc: denied { create } for pid=30106 comm="syz.0.6346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 625.428975][ T40] audit: type=1400 audit(1774001028.520:54124): avc: denied { setopt } for pid=30106 comm="syz.0.6346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 625.438534][ T40] audit: type=1400 audit(1774001028.530:54125): avc: denied { read write } for pid=30106 comm="syz.0.6346" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 625.659383][ T59] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 625.810561][ T59] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 625.813470][ T59] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.820484][ T59] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 625.823455][ T59] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 625.826217][ T59] usb 9-1: Manufacturer: syz [ 625.830486][ T59] usb 9-1: config 0 descriptor?? [ 625.910855][ T59] rc_core: IR keymap rc-hauppauge not found [ 625.913432][ T59] Registered IR keymap rc-empty [ 625.920738][ T59] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 625.933107][ T59] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input54 [ 626.061613][ T6020] usb 9-1: USB disconnect, device number 54 [ 626.463317][T30181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6358'. [ 626.493321][T30181] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30181 comm=syz.0.6358 [ 626.627172][T30184] binder: BC_ACQUIRE_RESULT not supported [ 626.629746][T30184] binder: 30183:30184 ioctl c0306201 2000000001c0 returned -22 [ 626.782624][T30194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=30194 comm=syz.4.6360 [ 626.939584][ T5940] Bluetooth: hci0: command tx timeout [ 627.158565][T30214] netlink: 'syz.1.6364': attribute type 10 has an invalid length. [ 627.168494][T30214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.175892][T30214] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 627.356908][T30220] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 627.367336][T30221] affs: No valid root block on device nullb0 [ 627.495024][T30232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6371'. [ 628.041778][T30261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.147938][T30261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.236683][T30261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.244439][T30265] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6381'. [ 628.352643][T30261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.374774][T30269] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 628.376987][T30269] PKCS7: Only support pkcs7_signedData type [ 628.381482][T30269] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 628.397805][T30269] cramfs: wrong magic [ 628.500520][T30273] mkiss: ax0: crc mode is auto. [ 628.584200][T23056] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.602840][T23056] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.628361][T23056] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.648132][T23056] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.713114][T30284] 9pnet_virtio: no channels available for device syz [ 628.775249][T30289] netlink: 'syz.4.6390': attribute type 1 has an invalid length. [ 628.791670][T30289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.797565][T30289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6390'. [ 629.011445][T30303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6393'. [ 629.947128][T30322] lo speed is unknown, defaulting to 1000 [ 629.972129][T30324] trusted_key: encrypted_key: insufficient parameters specified [ 630.040738][T30322] pimreg9: entered allmulticast mode [ 630.188046][T30335] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 630.198498][T30335] VFS: Can't find a romfs filesystem on dev nullb0. [ 630.198498][T30335] [ 630.253875][ T40] kauditd_printk_skb: 320 callbacks suppressed [ 630.253894][ T40] audit: type=1400 audit(1774001033.430:54446): avc: denied { create } for pid=30337 comm="syz.1.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 630.279738][ T40] audit: type=1400 audit(1774001033.430:54447): avc: denied { map } for pid=30337 comm="syz.1.6406" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=128828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 630.283092][T30344] netlink: 'syz.4.6407': attribute type 8 has an invalid length. [ 630.293185][ T40] audit: type=1400 audit(1774001033.430:54448): avc: denied { read write } for pid=30337 comm="syz.1.6406" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=128828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 630.295781][T30344] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 630.339421][ T40] audit: type=1400 audit(1774001033.430:54449): avc: denied { write } for pid=30334 comm="syz.0.6405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 630.349080][ T40] audit: type=1400 audit(1774001033.500:54450): avc: denied { unmount } for pid=28686 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 630.452204][T30345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6407'. [ 630.481382][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6407'. [ 630.484472][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6407'. [ 630.499697][ T231] pimreg9 (unregistering): left allmulticast mode [ 630.624072][ T40] audit: type=1400 audit(1774001033.800:54451): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 630.636878][ T40] audit: type=1400 audit(1774001033.800:54452): avc: denied { sendto } for pid=23 comm="ksoftirqd/2" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 630.651510][ T40] audit: type=1400 audit(1774001033.830:54453): avc: denied { read } for pid=30346 comm="syz.1.6410" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 630.656350][T30347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.664228][ T40] audit: type=1400 audit(1774001033.830:54454): avc: denied { open } for pid=30346 comm="syz.1.6410" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 630.683354][ T40] audit: type=1400 audit(1774001033.830:54455): avc: denied { ioctl } for pid=30346 comm="syz.1.6410" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 630.724296][T30349] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 630.848210][T30362] overlayfs: missing 'lowerdir' [ 631.797819][T30397] Invalid ELF header type: 0 != 1 [ 631.926743][T23056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.933503][T23056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.070333][T23056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.073881][T23056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.125450][ T5934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 632.132333][ T5934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 632.137411][ T5934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 632.141443][ T5934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 632.144338][ T5934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 632.177012][T23056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.185900][T23056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.270901][T23056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.274849][T23056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.286771][T30405] lo speed is unknown, defaulting to 1000 [ 632.468765][T30405] chnl_net:caif_netlink_parms(): no params data found [ 632.539786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.628915][T23056] bridge_slave_1: left allmulticast mode [ 632.631911][T23056] bridge_slave_1: left promiscuous mode [ 632.634707][T23056] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.651103][T23056] bridge_slave_0: left allmulticast mode [ 632.653504][T23056] bridge_slave_0: left promiscuous mode [ 632.656080][T23056] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.799687][T25472] SELinux: failure in sel_netif_sid_slow(), invalid network interface (87) [ 632.999773][T25472] SELinux: failure in sel_netif_sid_slow(), invalid network interface (75) [ 633.013000][T23056] bond1 (unregistering): (slave bridge1): Releasing active interface [ 633.142723][T23056] bond3 (unregistering): (slave bridge3): Releasing active interface [ 633.207896][T23056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.215083][T23056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.220885][T23056] bond0 (unregistering): Released all slaves [ 633.228772][T23056] bond1 (unregistering): Released all slaves [ 633.245214][T23056] bond2 (unregistering): Released all slaves [ 633.257022][T23056] bond3 (unregistering): Released all slaves [ 633.268458][T30405] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.273300][T30405] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.276612][T30405] bridge_slave_0: entered allmulticast mode [ 633.280972][T30405] bridge_slave_0: entered promiscuous mode [ 633.307513][T30405] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.311343][T30405] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.314752][T30405] bridge_slave_1: entered allmulticast mode [ 633.322502][T30405] bridge_slave_1: entered promiscuous mode [ 633.361647][T30405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.369084][T30405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.393202][T23056] !: left promiscuous mode [ 633.446412][T30405] team0: Port device team_slave_0 added [ 633.452395][T30405] team0: Port device team_slave_1 added [ 633.480301][T30405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.483849][T30405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.505385][T30405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.512502][T30405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.516209][T30405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.528566][T30405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.589969][T30405] hsr_slave_0: entered promiscuous mode [ 633.605970][T30405] hsr_slave_1: entered promiscuous mode [ 633.610061][T30405] debugfs: 'hsr0' already exists in 'hsr' [ 633.612654][T30405] Cannot create hsr debugfs directory [ 633.839838][T30454] netlink: 'syz.4.6441': attribute type 10 has an invalid length. [ 633.890142][T30454] veth1_macvtap: left promiscuous mode [ 633.902297][T30458] hpfs: hpfs_map_sector(): read error [ 633.968827][T30405] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.976174][T30405] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 634.094423][T30405] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.098972][T30405] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 634.173174][T23056] hsr_slave_0: left promiscuous mode [ 634.185629][T23056] hsr_slave_1: left promiscuous mode [ 634.188659][T23056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.201705][T23056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.205787][T23056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.207952][T30496] IPVS: set_ctl: invalid protocol: 218 172.20.20.187:20000 [ 634.211764][T23056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.220192][ T5934] Bluetooth: hci2: command tx timeout [ 634.231439][T23056] veth1_macvtap: left promiscuous mode [ 634.233903][T23056] veth0_macvtap: left promiscuous mode [ 634.236389][T23056] veth1_vlan: left promiscuous mode [ 634.238731][T23056] veth0_vlan: left promiscuous mode [ 634.308575][T30505] netlink: 'syz.4.6455': attribute type 21 has an invalid length. [ 634.335233][T23056] pimreg (unregistering): left allmulticast mode [ 634.480787][T23056] team0 (unregistering): Port device team_slave_1 removed [ 634.500167][T23056] team0 (unregistering): Port device team_slave_0 removed [ 634.641265][T30405] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.646063][T30405] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 634.668949][T30505] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6455'. [ 634.756409][T30405] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.762419][T30405] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 634.984371][T30515] IPVS: set_ctl: invalid protocol: 136 10.1.1.1:20001 [ 635.016900][T30405] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 635.025835][T30405] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 635.037045][T30405] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 635.050052][T30405] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 635.109359][ T2068] block nbd2: Possible stuck request ffff888029a38000: control (read@0,1024B). Runtime 150 seconds [ 635.114933][ T2068] block nbd2: Possible stuck request ffff888029a38200: control (read@1024,1024B). Runtime 150 seconds [ 635.119301][ T2068] block nbd2: Possible stuck request ffff888029a38400: control (read@2048,1024B). Runtime 150 seconds [ 635.124839][ T2068] block nbd2: Possible stuck request ffff888029a38600: control (read@3072,1024B). Runtime 150 seconds [ 635.126506][T30405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.143510][T30405] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.151590][T21969] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.154877][T21969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.163124][T21969] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.166847][T21969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.270675][ T40] kauditd_printk_skb: 210 callbacks suppressed [ 635.270696][ T40] audit: type=1400 audit(1774001038.450:54666): avc: denied { unlink } for pid=30540 comm="rm" name="resolv.conf.eth16.link" dev="tmpfs" ino=19683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 635.360131][T30405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.545321][T30405] veth0_vlan: entered promiscuous mode [ 635.554361][T30405] veth1_vlan: entered promiscuous mode [ 635.594324][T30405] veth0_macvtap: entered promiscuous mode [ 635.600611][T30405] veth1_macvtap: entered promiscuous mode [ 635.611846][T30405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.617066][ T40] audit: type=1400 audit(1774001038.790:54667): avc: denied { recv } for pid=5919 comm="syz-executor" saddr=127.0.0.1 src=46464 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 635.625046][T30405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.648125][ T1148] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.651794][ T1148] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.658460][ T1148] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.662805][ T1148] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.665458][ T40] audit: type=1400 audit(1774001038.830:54668): avc: denied { execute } for pid=30561 comm="syz.4.6459" name="file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 635.676388][ T40] audit: type=1400 audit(1774001038.830:54669): avc: denied { execute_no_trans } for pid=30561 comm="syz.4.6459" path="/62/file0" dev="tmpfs" ino=342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 635.687113][ T40] audit: type=1400 audit(1774001038.840:54670): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=46464 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 635.706502][T22183] libceph: connect (1)[c::]:6789 error -101 [ 635.714664][T22183] libceph: mon0 (1)[c::]:6789 connect error [ 635.754092][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.757033][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.773861][T30562] ceph: No mds server is up or the cluster is laggy [ 635.786795][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.799684][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.814884][ T40] audit: type=1400 audit(1774001038.980:54671): avc: denied { search } for pid=30568 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.841093][ T40] audit: type=1400 audit(1774001038.980:54672): avc: denied { search } for pid=30568 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.878606][ T40] audit: type=1400 audit(1774001038.980:54673): avc: denied { search } for pid=30568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.886786][ T40] audit: type=1400 audit(1774001038.980:54674): avc: denied { read open } for pid=30568 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 635.896169][ T40] audit: type=1400 audit(1774001038.980:54675): avc: denied { getattr } for pid=30568 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.188609][T30596] usb 2-1: USB disconnect, device number 3 [ 636.273678][T30599] overlayfs: failed to clone upperpath [ 636.299430][ T5934] Bluetooth: hci2: command tx timeout [ 636.483927][T30620] overlayfs: failed to clone upperpath [ 636.565606][T30622] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6475'. [ 636.693816][T30632] fuse: Bad value for 'fd' [ 636.696322][T30632] fuse: Bad value for 'fd' [ 636.698516][T30632] fuse: Bad value for 'fd' [ 636.703189][T30632] fuse: Bad value for 'fd' [ 637.142990][T30665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6492'. [ 637.195327][T30666] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6492'. [ 637.369628][T30670] macvtap1: entered promiscuous mode [ 637.372349][T30670] macvtap1: entered allmulticast mode [ 637.375098][T30670] veth1_vlan: entered allmulticast mode [ 637.720403][T30691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6499'. [ 637.769467][T25435] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 637.947189][T25435] usb 6-1: unable to get BOS descriptor or descriptor too short [ 637.960061][T25435] usb 6-1: not running at top speed; connect to a high speed hub [ 637.964848][T25435] usb 6-1: config 102 has an invalid descriptor of length 209, skipping remainder of the config [ 637.977092][T25435] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 1 [ 637.983324][T25435] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.986454][T25435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.989359][T25435] usb 6-1: Product: syz [ 637.990896][T25435] usb 6-1: Manufacturer: syz [ 637.992750][T25435] usb 6-1: SerialNumber: syz [ 638.199972][T30717] cgroup2: Unknown parameter 'euid' [ 638.336402][T30720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6493'. [ 638.341161][ T5940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 638.348077][ T5940] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 638.359688][ T5940] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 638.369623][ T5940] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 638.374363][T25435] usb 6-1: USB disconnect, device number 67 [ 638.377289][ T5940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 638.389438][ T5940] Bluetooth: hci2: command tx timeout [ 638.424049][T30725] lo speed is unknown, defaulting to 1000 [ 638.565713][T30725] chnl_net:caif_netlink_parms(): no params data found [ 638.610942][T30725] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.613368][T30725] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.615804][T30725] bridge_slave_0: entered allmulticast mode [ 638.618683][T30725] bridge_slave_0: entered promiscuous mode [ 638.626318][T30725] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.628754][T30725] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.631569][T30725] bridge_slave_1: entered allmulticast mode [ 638.634898][T30725] bridge_slave_1: entered promiscuous mode [ 638.640434][T30684] gfs2: error -5 reading superblock [ 638.650390][T30725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.655158][T30725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.670519][T30725] team0: Port device team_slave_0 added [ 638.673895][T30725] team0: Port device team_slave_1 added [ 638.687614][T30725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.690199][T30725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.698925][T30725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.703843][T30725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.706227][T30725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.714980][T30725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.746817][T30725] hsr_slave_0: entered promiscuous mode [ 638.750078][T30725] hsr_slave_1: entered promiscuous mode [ 638.752905][T30725] debugfs: 'hsr0' already exists in 'hsr' [ 638.755331][T30725] Cannot create hsr debugfs directory [ 638.815596][T30744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.847231][ T231] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.038429][ T231] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.171132][ T231] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.256689][ T231] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.266964][T25472] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 639.422112][T25472] usb 12-1: Using ep0 maxpacket: 32 [ 639.424921][T30779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.431432][T25472] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 639.434691][T25472] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 639.437674][T25472] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 639.444118][T30779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.453866][T25472] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 639.458232][T25472] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 639.459272][T30779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.462943][T25472] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 639.472515][T25472] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 639.474107][T30779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.476787][T25472] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.491531][T25472] usb 12-1: config 0 descriptor?? [ 639.517692][ T231] bridge_slave_1: left allmulticast mode [ 639.520032][ T231] bridge_slave_1: left promiscuous mode [ 639.522001][ T231] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.530456][ T231] bridge_slave_0: left allmulticast mode [ 639.532758][ T231] bridge_slave_0: left promiscuous mode [ 639.534977][ T231] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.679057][ T231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.690346][ T231] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.696774][ T231] bond0 (unregistering): Released all slaves [ 639.706355][T25472] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 639.718065][T25472] usb 12-1: USB disconnect, device number 9 [ 639.728504][T25472] usblp0: removed [ 639.766650][T30795] random: crng reseeded on system resumption [ 639.851313][T30725] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 639.882930][T30725] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 639.902479][T30725] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 639.912128][T30725] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 640.054701][T30725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.079048][T30725] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.095754][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.098978][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.118700][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.121927][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.169261][ T5340] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 640.188319][ T231] hsr_slave_0: left promiscuous mode [ 640.192384][ T231] hsr_slave_1: left promiscuous mode [ 640.195475][ T231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.198848][ T231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.207536][ T231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.211856][ T231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.229578][ T231] veth1_macvtap: left promiscuous mode [ 640.231806][ T231] veth0_macvtap: left promiscuous mode [ 640.233996][ T231] veth1_vlan: left promiscuous mode [ 640.236307][ T231] veth0_vlan: left promiscuous mode [ 640.340378][ T5340] usb 12-1: Using ep0 maxpacket: 32 [ 640.340449][ T40] kauditd_printk_skb: 334 callbacks suppressed [ 640.340466][ T40] audit: type=1400 audit(1774001043.520:55010): avc: denied { read write } for pid=30852 comm="syz.1.6529" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 640.346799][ T5340] usb 12-1: config index 0 descriptor too short (expected 29220, got 36) [ 640.358748][T30853] QAT: Device 2 not found [ 640.359440][ T40] audit: type=1400 audit(1774001043.520:55011): avc: denied { ioctl } for pid=30755 comm="syz.7.6510" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 640.359487][ T40] audit: type=1400 audit(1774001043.530:55012): avc: denied { open } for pid=30852 comm="syz.1.6529" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 640.359525][ T40] audit: type=1400 audit(1774001043.530:55013): avc: denied { ioctl } for pid=30852 comm="syz.1.6529" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 640.359573][ T40] audit: type=1400 audit(1774001043.530:55014): avc: denied { read } for pid=30852 comm="syz.1.6529" name="qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 640.359611][ T40] audit: type=1400 audit(1774001043.530:55015): avc: denied { open } for pid=30852 comm="syz.1.6529" path="/dev/qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 640.379978][ T40] audit: type=1400 audit(1774001043.550:55016): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=46464 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 640.381496][ T5340] usb 12-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 640.381532][ T5340] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 640.381583][ T5340] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 640.381609][ T5340] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 640.381637][ T5340] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 640.381685][ T5340] usb 12-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 640.381711][ T5340] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.385064][ T5340] usb 12-1: config 0 descriptor?? [ 640.449344][ T40] audit: type=1400 audit(1774001043.620:55017): avc: denied { read write } for pid=30855 comm="syz.1.6530" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 640.458880][ T40] audit: type=1400 audit(1774001043.620:55018): avc: denied { open } for pid=30855 comm="syz.1.6530" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 640.464869][ T5934] Bluetooth: hci7: command tx timeout [ 640.474062][ T40] audit: type=1400 audit(1774001043.630:55019): avc: denied { mount } for pid=30855 comm="syz.1.6530" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 640.483064][ T5940] Bluetooth: hci2: command tx timeout [ 640.568026][ T231] team0 (unregistering): Port device team_slave_1 removed [ 640.575732][ T231] team0 (unregistering): Port device team_slave_0 removed [ 640.594107][ T5340] usblp 12-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 640.785492][ T6004] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 640.788896][T30862] ip6t_srh: unknown srh match flags 4015 [ 640.793074][T30862] overlayfs: failed to clone upperpath [ 640.853379][T30725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.949572][ T6004] usb 6-1: Using ep0 maxpacket: 8 [ 640.953829][ T6004] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 640.956807][ T6004] usb 6-1: config 0 has no interface number 0 [ 640.961322][ T6004] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 640.965813][ T6004] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 640.971224][ T6004] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 640.976247][ T6004] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 640.981926][ T6004] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 640.985569][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.993410][ T6004] usb 6-1: config 0 descriptor?? [ 641.005010][ T6004] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 641.040342][T30725] veth0_vlan: entered promiscuous mode [ 641.048939][T30725] veth1_vlan: entered promiscuous mode [ 641.078093][T30725] veth0_macvtap: entered promiscuous mode [ 641.082578][T30725] veth1_macvtap: entered promiscuous mode [ 641.092773][T30725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.099853][T30725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.113271][T16915] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.116315][T16915] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.127693][T16915] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.137014][T16915] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.153749][ T1024] usb 12-1: USB disconnect, device number 10 [ 641.174263][ T1024] usblp0: removed [ 641.205123][T16915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.208776][T16915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.212480][T22185] usb 6-1: USB disconnect, device number 68 [ 641.215357][T22185] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 641.252018][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.269290][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.335605][T30896] sp0: Synchronizing with TNC [ 641.795939][T30928] netlink: 'syz.8.6541': attribute type 1 has an invalid length. [ 641.804010][T30921] syzkaller0: entered promiscuous mode [ 641.806984][T30921] syzkaller0: entered allmulticast mode [ 641.857567][T30934] openvswitch: netlink: IPv4 tun info is not correct [ 641.916707][T30941] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30941 comm=syz.4.6542 [ 642.069447][T30951] xt_cgroup: invalid path, errno=-2 [ 642.234313][T30956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6546'. [ 642.464974][T25338] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 642.469719][T25338] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 642.474081][T25338] CPU: 3 UID: 0 PID: 25338 Comm: kworker/3:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.479309][T25338] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc [ 642.481365][T25338] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 642.485321][T25338] Workqueue: events l2cap_info_timeout [ 642.487336][T25338] RIP: 0010:kasan_byte_accessible+0x15/0x30 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 642.489247][T25338] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 642.496176][T25338] RSP: 0018:ffffc900042c79f0 EFLAGS: 00010282 [ 642.498229][T25338] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 642.501006][T25338] RDX: 0000000000000000 RSI: ffffffff8957c441 RDI: dffffc000000004c [ 642.503827][T25338] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 642.506591][T25338] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff8957c441 [ 642.509383][T25338] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 642.512596][T25338] FS: 0000000000000000(0000) GS:ffff8880d6642000(0000) knlGS:0000000000000000 [ 642.516730][T25338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.519825][T25338] CR2: 0000001b33b24000 CR3: 000000004f2ed000 CR4: 0000000000352ef0 [ 642.522675][T25338] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 642.525322][T25338] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 642.528073][T25338] Call Trace: [ 642.529466][T25338] [ 642.530788][T25338] __kasan_check_byte+0x13/0x50 [ 642.533652][T25338] lock_acquire+0x148/0x380 [ 642.535827][T25338] ? __pfx___cancel_work+0x10/0x10 [ 642.537702][T25338] lock_sock_nested+0x41/0xf0 [ 642.539300][T25338] ? l2cap_sock_ready_cb+0x43/0x1a0 [ 642.541136][T25338] l2cap_sock_ready_cb+0x43/0x1a0 [ 642.542851][T25338] l2cap_conn_start+0x123/0xb40 [ 642.544484][T25338] ? __pfx_l2cap_conn_start+0x10/0x10 [ 642.546338][T25338] ? __pfx___mutex_lock+0x10/0x10 [ 642.548427][T25338] ? do_raw_spin_unlock+0x145/0x1e0 [ 642.550573][T25338] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 642.553344][T25338] ? finish_task_switch.isra.0+0x200/0xb80 [ 642.556509][T25338] l2cap_info_timeout+0x81/0xa0 [ 642.558522][T25338] process_one_work+0xa23/0x19a0 [ 642.560584][T25338] ? __pfx_process_one_work+0x10/0x10 [ 642.562910][T25338] ? __pfx_l2cap_info_timeout+0x10/0x10 [ 642.564916][T25338] worker_thread+0x5ef/0xe50 [ 642.566554][T25338] ? __pfx_worker_thread+0x10/0x10 [ 642.568410][T25338] ? kthread+0x13a/0x450 [ 642.570160][T25338] ? __pfx_worker_thread+0x10/0x10 [ 642.572111][ T5934] Bluetooth: hci7: command tx timeout [ 642.572560][T25338] kthread+0x370/0x450 [ 642.576659][T25338] ? __pfx_kthread+0x10/0x10 [ 642.578383][T25338] ret_from_fork+0x754/0xd80 [ 642.580348][T25338] ? __pfx_ret_from_fork+0x10/0x10 [ 642.582699][T25338] ? rcu_is_watching+0x12/0xc0 [ 642.584871][T25338] ? __switch_to+0x7b4/0x1120 [ 642.587173][T25338] ? __pfx_kthread+0x10/0x10 [ 642.588822][T25338] ret_from_fork_asm+0x1a/0x30 [ 642.590702][T25338] [ 642.591812][T25338] Modules linked in: [ 642.594673][T25338] ---[ end trace 0000000000000000 ]--- [ 642.598944][T25338] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 642.611946][T25338] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 642.618365][T25338] RSP: 0018:ffffc900042c79f0 EFLAGS: 00010282 [ 642.622507][T25338] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 642.625396][T25338] RDX: 0000000000000000 RSI: ffffffff8957c441 RDI: dffffc000000004c [ 642.628783][T25338] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 642.631978][T25338] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff8957c441 [ 642.634862][T25338] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 642.637714][T25338] FS: 0000000000000000(0000) GS:ffff8880d6642000(0000) knlGS:0000000000000000 [ 642.641426][T25338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.643740][T25338] CR2: 0000001b33b24000 CR3: 000000002acbf000 CR4: 0000000000352ef0 [ 642.646373][T25338] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 642.649114][T25338] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 642.653505][T25338] Kernel panic - not syncing: Fatal exception [ 642.658756][T25338] Kernel Offset: disabled [ 642.660297][T25338] Rebooting in 86400 seconds..