last executing test programs: 4m45.452845872s ago: executing program 32 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyprintk(0xffffff9c, &(0x7f0000001b40), 0x101000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000001b80)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, 0x1405, 0x800, 0x70bd2a, 0x0, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(xeta)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r7, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="ed66", 0x2}], 0x1}], 0x1, 0x40010000) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r8, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/236, 0xec}], 0x1, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/186, 0xba}], 0x1, 0x0) r9 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WAKE(r9, 0x8010aa02, &(0x7f00000005c0)={&(0x7f000067e000/0x8000)=nil, 0x8000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd7000fedbdf250a0000000c00038008000100010000008e6347e0223c38aad794d82fade9ca"], 0x20}}, 0x20048880) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000b80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x108, r11, 0x209, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5a9d}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x84}, 0xc0) 4m21.723248442s ago: executing program 0 (id=995): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000002380)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x4}, {0x7fffffffffff, 0x5, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e23, @in6=@private0}}]}, 0x154}}, 0x4810) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 4m21.692680108s ago: executing program 0 (id=996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1) read$FUSE(r2, &(0x7f0000004580)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 4m21.593003271s ago: executing program 0 (id=997): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2833000}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x38}}, 0x44) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) socketpair(0xa, 0xa, 0x3c3b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080), 0x3) 4m21.514200148s ago: executing program 0 (id=999): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x9a, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x5, {0x2, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r4, r5, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff9046dce8, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000000)={0x2, 0x102, 0x4fdb9280, 0x6, 0x6, "2febb950ea33f268654a9e60dc6fcc71eb3150", 0x1, 0xd}) ioctl$TCXONC(r6, 0x540a, 0x0) pread64(r2, &(0x7f0000000040)=""/103, 0x67, 0x9) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r9, 0x0) syz_clone(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 4m21.111559971s ago: executing program 0 (id=1002): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc9}, 0xb}], 0x1, 0x100, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc9}, 0xb}], 0x1, 0x100, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) (async) 4m20.654450951s ago: executing program 0 (id=1009): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 4m20.650249522s ago: executing program 33 (id=1009): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0) 3m16.373271178s ago: executing program 4 (id=1835): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000056c0), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$rds(0x15, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x7) chroot(&(0x7f0000000100)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x440683, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000d3c8b0c20002018300000000000008000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x4c040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r6}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r7, 0x0, 0xffffffff000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0xf, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x25000, 0x4, 0xb, 0x0, 0x40, 0x5, 0x7e, 0x9, 0x58, 0x3, 0x26, 0x1}, {0xdddd1000, 0xe000, 0x10, 0x7f, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5}, {0x30000, 0x2000, 0x3, 0x5c, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0xf, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0xb, 0xa0, 0xb1, 0xf4, 0x1, 0xd, 0x88, 0x13, 0x1, 0x53}, {0x54000, 0x2, 0x4, 0x6, 0x25, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x10000, 0xe, 0x5, 0xf, 0x7, 0xff, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x0, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m16.371993131s ago: executing program 4 (id=1836): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x4, 0x800) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x24a, &(0x7f0000000540)={@broadcast, @local, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @tcp={{0x45, 0x4, 0x2, 0x5, 0x234, 0x64, 0x0, 0x2, 0x6, 0x0, @multicast1, @remote, {[@generic={0x88, 0xd, "4ed51f40747bbd75c330bc"}, @noop, @timestamp_addr={0x44, 0x4c, 0x8, 0x1, 0x6, [{@broadcast, 0x8}, {@private=0xa010100, 0x2}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010100, 0x8}, {@local, 0x1000}, {@remote, 0x80000000}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@private=0xa010101, 0x9}]}, @noop, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x2, 0xe, "9948df3f1cc69006791ed386"}]}, @cipso={0x86, 0x6e, 0x1, [{0x2, 0x2}, {0x6, 0x2}, {0x0, 0xf, "489753dbc41bf94541c40f886e"}, {0x5, 0x10, "acb867948ce92966f71dc2046cad"}, {0x5, 0x9, "3adfc143f19fcc"}, {0x7, 0x4, "ed8b"}, {0x0, 0xc, "b855d48676ca341a523c"}, {0x0, 0x11, "425ae503af5ad16190752bfe134771"}, {0x0, 0xe, "4719dce9d95d7f1ad8e9bf5b"}, {0x0, 0xd, "f17e11fb038c11517b798d"}]}, @rr={0x7, 0x1b, 0x9b, [@private=0xa010101, @rand_addr=0x64010101, @empty, @multicast2, @empty, @multicast1]}, @rr={0x7, 0x7, 0x39, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e22, 0x4e24, r2, r3, 0x1, 0x0, 0xb, 0x20, 0x9c, 0x0, 0x5, {[@exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "040d7ba8f98044a554a86f6b07d20552"}]}}, {"e61f49056757fc84c2c6e51920f305928ddd2997501bd1eba49b387a460a7853585937cfc953754e9040c45b2ef513bf013b8f46a78ae074440da59ce80d3ec708d9ba1cd962670150692d19c4d4b2b07f15d7687efb42e9066d09443d83855bc2f85ce29d6a063d3850bf725507c00cf7882ed5e4c71fce9f1e15375201831061b087a216946c3e000aa2f1717febdba9cc253be338bc0d6955fa24c11a834516c568744e3d6cc54a626c0493801acdf9fb79f33b0ab379ff8fc38c3d2ae6b0ffa497855e7da02e32a571238c6c5838d350c1b0eeccb52268941a637297b6cdeb33c234a3cc29ed0d97f456fac2d390849ddd38"}}}}}}, &(0x7f0000000500)={0x0, 0x2, [0x6d9, 0xe1c, 0x149, 0x7f4]}) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) syz_open_pts(r5, 0x4000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000200)=0x2) 3m16.113586422s ago: executing program 4 (id=1838): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0xffffffffffffffff, r2, r2) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 3m15.082759651s ago: executing program 4 (id=1855): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x9a) socketpair(0x24, 0x800, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r5, &(0x7f0000000440)=""/67, 0x43, 0x1, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x2) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x8, 0x34, 0x1, 0x91d2}]}) socket$vsock_stream(0x28, 0x1, 0x28) write$selinux_context(r7, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) symlinkat(&(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00') r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x95, 0x4) sendmmsg$inet6(r8, &(0x7f0000003b00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xf, @remote, 0x8}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="48a8285a7bd05009be219d1a4bf923435c187be0d8ece303deaa4feaf04912be6a895841c7e6d5e9930388bac8468df9eab91a6af1b92dc90da34a3a253df4a861d21f9eaf755d81fa447f742aec30565151feb932c6c45369c79bb8f6e50791a2a4b16443b0be3895b9b29edeb51cd18ad8aeb794e53a5f24213af00d90323917550ed28224fe4a802262269b0f62eadf0963e88881d2", 0x97}], 0x1, &(0x7f0000000540)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x32}}}], 0x18}}], 0x1, 0x4001c00) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f0000000000)=0x1) read$FUSE(r1, &(0x7f0000000d80)={0x2020}, 0x2020) unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x0) 3m14.993129676s ago: executing program 4 (id=1856): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86) r2 = socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=virtio,', {[{@posixacl}]}}) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000240)={0xa, 0xfffe, 0x400, @loopback, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000200)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000740)=ANY=[], 0x18}}], 0x1, 0x800) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 3m14.873603315s ago: executing program 4 (id=1858): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000240)=""/11, 0xb}], 0x4, &(0x7f0000000500)=""/94, 0x5e}, 0xff}, {{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f00000008c0)=""/205, 0xcd}, {&(0x7f00000009c0)=""/63, 0x3f}], 0x6}, 0x8000}], 0x2, 0x2, &(0x7f0000000b00)={0x0, 0x3938700}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000140)={&(0x7f00000bc000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) r3 = syz_ublk_setup_io_uring(0x257f, &(0x7f0000000000)={0x0, 0x7c54, 0x400, 0x1, 0x170}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000480)={@hyper}) io_uring_setup(0x4e9f, &(0x7f00000001c0)={0x0, 0x1154, 0x4, 0x2, 0x1ce, 0x0, r3}) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000240)=""/11, 0xb}], 0x4, &(0x7f0000000500)=""/94, 0x5e}, 0xff}, {{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f00000008c0)=""/205, 0xcd}, {&(0x7f00000009c0)=""/63, 0x3f}], 0x6}, 0x8000}], 0x2, 0x2, &(0x7f0000000b00)={0x0, 0x3938700}) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) (async) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000140)={&(0x7f00000bc000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) (async) syz_ublk_setup_io_uring(0x257f, &(0x7f0000000000)={0x0, 0x7c54, 0x400, 0x1, 0x170}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000480)={@hyper}) (async) io_uring_setup(0x4e9f, &(0x7f00000001c0)={0x0, 0x1154, 0x4, 0x2, 0x1ce, 0x0, r3}) (async) 3m14.869732207s ago: executing program 34 (id=1858): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000240)=""/11, 0xb}], 0x4, &(0x7f0000000500)=""/94, 0x5e}, 0xff}, {{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f00000008c0)=""/205, 0xcd}, {&(0x7f00000009c0)=""/63, 0x3f}], 0x6}, 0x8000}], 0x2, 0x2, &(0x7f0000000b00)={0x0, 0x3938700}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000140)={&(0x7f00000bc000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) r3 = syz_ublk_setup_io_uring(0x257f, &(0x7f0000000000)={0x0, 0x7c54, 0x400, 0x1, 0x170}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000480)={@hyper}) io_uring_setup(0x4e9f, &(0x7f00000001c0)={0x0, 0x1154, 0x4, 0x2, 0x1ce, 0x0, r3}) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b40)=""/128, 0x80}, {&(0x7f0000000300)=""/182, 0xb6}, {&(0x7f00000003c0)=""/141, 0x8d}, {&(0x7f0000000240)=""/11, 0xb}], 0x4, &(0x7f0000000500)=""/94, 0x5e}, 0xff}, {{&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000000840)=""/80, 0x50}, {&(0x7f00000008c0)=""/205, 0xcd}, {&(0x7f00000009c0)=""/63, 0x3f}], 0x6}, 0x8000}], 0x2, 0x2, &(0x7f0000000b00)={0x0, 0x3938700}) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) (async) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) (async) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000140)={&(0x7f00000bc000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) (async) syz_ublk_setup_io_uring(0x257f, &(0x7f0000000000)={0x0, 0x7c54, 0x400, 0x1, 0x170}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000480)={@hyper}) (async) io_uring_setup(0x4e9f, &(0x7f00000001c0)={0x0, 0x1154, 0x4, 0x2, 0x1ce, 0x0, r3}) (async) 3m2.624149416s ago: executing program 5 (id=2052): ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) r0 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0x5, 0x1, 0x7f, 0x0, 0x9, 0x8080000, 0x7000, '\x00', 0x1}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@int=0x7f, 0x4) r1 = getpgrp(0x0) syz_clone3(&(0x7f0000000500)={0x58084280, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {}, &(0x7f0000000380)=""/23, 0x17, &(0x7f00000003c0)=""/232, &(0x7f00000004c0)=[0x0, r1], 0x2, {r0}}, 0x58) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r2, &(0x7f0000000640)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001800)={0x70, 0x0, &(0x7f0000001740)=[@dead_binder_done, @release={0x40046306, 0x1}, @clear_death, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001680)={@fda={0x66646185, 0x8, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/4096, 0x1000, 0x2, 0x3d}}, &(0x7f0000001700)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, &(0x7f00000017c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ac0)={0x5c, 0x0, &(0x7f0000001940)=[@clear_death={0x400c630f, 0x2}, @release={0x40046306, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001880)={@ptr={0x70742a85, 0x0, &(0x7f0000001840)=""/40, 0x28, 0x1, 0x17}, @fda={0x66646185, 0x6, 0x0, 0x12}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000001900)={0x0, 0x28, 0x48}}}], 0xe4, 0x0, &(0x7f00000019c0)="2d786553d2771f3db12def4fd48b8bf486b367bb0cc37ec14f968a011f3d423cc6ba2ca71d3b011bee9d8c5111a7b044441ceac5cfbfc1246977a294c55c42dca45df8d21ccde21fd5937e728fe5e2eb060d83cd7c9ff353009a79e81c1d8a0b0fc0d7c8cabea907ea78b471a2079d3834db0a1ad7ff04bac300b1ea19a96e1aa3bbafbe9e153cddf3b14438496fc37bf1453d4c5c1f4623a4f97245a3a05bb55673ecee66ef1b92c113acdf68aa96e2014adeee968d453849806cc05d3c357490344dc2ea8a14cdbcc98064638527ffc8cb1fc18eeef2713717116f043d61ef6a25389f"}) r3 = syz_open_dev$sndctrl(&(0x7f0000001b00), 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000001b40)={0x2, 0x1, 0x1, 0x8, '\x00', 0x81}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001b80)={0x0, @in6={{0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ad7e684}}, 0x2, 0x9, 0xde000000, 0x4, 0x3}, &(0x7f0000001c40)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001c80)={r4, @in6={{0xa, 0x4e21, 0x3, @private0, 0x3ff}}, 0x8, 0x1000}, 0x90) r5 = openat2(r0, &(0x7f0000001d40)='./file0/file0\x00', &(0x7f0000001d80)={0x0, 0x2, 0x8}, 0x18) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f0000001dc0)=0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) userfaultfd(0x0) syz_open_dev$MSR(&(0x7f0000001e00), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000001e40)=0x9) ioctl$XFS_IOC_GETBMAPA(r6, 0xc020582c, &(0x7f0000001e80)={0x800, 0x1f1860000, 0x9, 0x9, 0x10a}) ioctl$BSG_IO(r5, 0x2285, &(0x7f0000003080)={0x51, 0x0, 0x1, 0x6, &(0x7f0000001ec0)="6f3c3ac1f875", 0x557b217d, 0x0, 0x6, 0x4, 0x60, &(0x7f0000001f00), 0x0, 0x4a, 0x0, 0x74, &(0x7f0000001f80)="f69687fc883e1b000ca72e37870755f47b8a714aa0f04f1291e84b0652699d090d30653859d381a1124caec47b805887acb2cec946ffe10a3f32338b224da9b010f8e85b03a28e7c77c7", &(0x7f0000002000)=""/116, 0x378, 0x0, &(0x7f0000002080)="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", 0x7}) write$binfmt_register(0xffffffffffffffff, &(0x7f0000003140)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x8000000000000001, 0x3a, '%', 0x3a, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3a, './file0/file0', 0x3a, [0x4f, 0x4f, 0x50, 0x50, 0x43, 0x4f]}, 0x44) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000003200)=@attr_other={0x0, 0x8, 0x3, &(0x7f00000031c0)=0x5}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1c, &(0x7f0000003240)="985c1467a0d7798e8a9d5c37056b01461695fa59e48e7e965ab100976247958888a4163ac8116e83bcca302c787a6c517e86267981c6807c5e5dc82da5c69b26c41d13ed0b670c5c459eec5e3c8baf89", 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000032c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x81, '\x00', 0x0, r0, 0x2, 0x1, 0x3}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003380)={r0, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000003340)=@map_fd=r8, 0x10}}, 0x20) sendto$inet_nvme_pdu(r5, &(0x7f00000033c0)=@cmd={{0x4, 0xc, 0x48, 0xc2}, {@create_cq={0x5, 0x2, 0x7c2, '\x00', 0x9ad, 0x0, 0x9, 0x5, 0x3969, 0x5}}}, 0x80, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3m2.568754751s ago: executing program 5 (id=2054): r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x6}, 0x94) 3m2.453098495s ago: executing program 5 (id=2056): open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x8004, 0x1, 0x1}, 0x18, 0x1) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x24004881}, 0x10) 3m2.452733852s ago: executing program 5 (id=2058): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a2", 0x2, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$dh_compute(0x17, &(0x7f0000000300)={0x0, r0}, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r0, r0}, &(0x7f0000000340)=""/66, 0x42, &(0x7f0000000540)={&(0x7f00000003c0)={'michael_mic-generic\x00'}, &(0x7f0000000480)="fffa6c7435ab3fa991f3e7b7f7ef0eae6d2a6c73bd34490811f9b52b6d75020351b26ba4deab8b836139bb7be5ecf615864903caaeaf2ced64c0d4c45d84feb0bd090bdad50709472a9c282184415983e3f40a7eb862b53796581b348ddddbc160e3943af0d36ae2f6d7c3bece72e9d32e840fcc467ad1a81ee85214a73122635e", 0x81}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x8a4004, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 3m2.38148909s ago: executing program 5 (id=2059): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000001c0)=0x6, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x2d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x564}, 0x1c) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2000000000000153, &(0x7f0000000100)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r8 = dup3(r7, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x26}, @fda={0x66646185, 0x800008, 0x1, 0x2d}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r10}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0xc98, 0x7fff, 0x3, 0x0, 0xad, 0x200001, r10}) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x9) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x8040ae9f, &(0x7f0000000280)=@arm64) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040), &(0x7f00000000c0)=0x10) write$binfmt_script(r2, &(0x7f0000000480)={'#! ', './file0', [], 0xa, "ac7ef26749fe43fe4db29e399f663037caa700000000e069df051988e271c631075ece0c5635c66287ca1e81ec63ca914e65122b560f26b2a88a7f39e55318e584073b130d2acc23c9eb1486fe57a3648595e200"/98}, 0x6d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x7c, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000200)={r3}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x8000) 3m2.379935283s ago: executing program 5 (id=2062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0xffff, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m2.293797413s ago: executing program 35 (id=2062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0xffff, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m8.575358618s ago: executing program 7 (id=2667): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f044, 0x7fe}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000000c00198008000100ad0800003c0001800c000280050001003a0000002c000180140003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x221008a, 0x0) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, 0xfffffffffffffffe) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/54, 0x36}], 0x1, 0x146d, 0xd) 2m8.572996248s ago: executing program 7 (id=2668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_ublk_setup_io_uring(0x3ea4, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) (async) timer_create(0x7, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18452267f2aca96e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x3fffd, 0x4, 0x1000}, 0x9) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$proc_mixer(r6, 0x0, 0x0) (async) chdir(&(0x7f0000000540)='./cgroup\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x134) (async) r7 = inotify_init() (async) r8 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$khugepaged_scan(r8, &(0x7f0000000480), 0x8) (async) r9 = inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x400017e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000001c0)='./file1\x00', 0x40) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES8=r9, @ANYRES32, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r10, @ANYRES16=r1, @ANYRES32=r11], 0x48}, 0x1, 0x0, 0x0, 0x24040080}, 0x40) 2m8.472225272s ago: executing program 7 (id=2669): syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffff4cb68726ff86dd60ecff8000481100fe8000000000000000000000000000bbff02000000000000000000000000000100004e220048907804000000000000007d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb0558fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"], 0x0) 2m8.47114894s ago: executing program 7 (id=2670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x262) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000ec0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x11, 0xde, {0xde, 0x2, "ad261276ef8de96c5bcfd720aca79085c1ade80447da810667a7ffaca77187e022ef5851dbfbc26b94e4aca907a085e1875d5e29fe25b7b14fc198794a5528d9622d9132473b3753b37e0a59cefedee023aa5d5bde38590399b41ec8d76ec14d2c8c4652f1345db9532bc2e888914c46c41fdc2f47225411a39251a8ebf629e17a697692826e563368bfcf2e9ef3f4ad6ca966401eed017e45389e2469c8e170be5ad25b3028500accef523817b980e9d74626c9949cdc6545dc693a2653b0eb307653f803430af1336441070857d86f8cddfdfd08b274d0d4f6bd75"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x0, 0x0, 0x16, "37e599835a4ed386f605fd0490084115c059cc30cdb4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc0}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x9, 0x5, 0x4, 0x0, 0x3, 0x400, 0x5623, 0x80000000, 0x2, 0x1, 0x4, 0xfc01}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000400)={0x20, 0x89, 0x2}}) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r5, 0x21e3}], 0x1, &(0x7f0000000580), 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m6.782212132s ago: executing program 7 (id=2679): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0xffffffffffffff8e}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec0000002100010004"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250200000008000100", @ANYRES32, @ANYRES32, @ANYBLOB="1c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006d625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000008"], 0x424}, 0x1, 0x0, 0x0, 0x408c0}, 0x40001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000100)="94", 0x1}], 0x1) 2m6.532350358s ago: executing program 7 (id=2682): r0 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fchmodat(r1, &(0x7f00000001c0)='./file0\x00', 0xfffffed3) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000000)=0x7) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) write$char_usb(r2, &(0x7f00000001c0)="64e9", 0x2) ioctl$KVM_CAP_HYPERV_VP_INDEX(r2, 0x4068aea3, &(0x7f0000000240)) mkdir(&(0x7f0000000200)='./file0\x00', 0x81) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'ipvlan0\x00', @multicast}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x988810, 0x0) 2m6.512706298s ago: executing program 36 (id=2682): r0 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fchmodat(r1, &(0x7f00000001c0)='./file0\x00', 0xfffffed3) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000000)=0x7) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) write$char_usb(r2, &(0x7f00000001c0)="64e9", 0x2) ioctl$KVM_CAP_HYPERV_VP_INDEX(r2, 0x4068aea3, &(0x7f0000000240)) mkdir(&(0x7f0000000200)='./file0\x00', 0x81) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'ipvlan0\x00', @multicast}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x988810, 0x0) 1m47.663771764s ago: executing program 6 (id=3027): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) (async) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f00000003c0)={[&(0x7f0000000040)='*\x00', &(0x7f00000000c0)=',%\x00', &(0x7f0000000140)='(,+*]$\x00', &(0x7f0000000180)='])#\x00', &(0x7f00000001c0)='!,\xac\x00', &(0x7f0000000200)='\\\x00', &(0x7f0000000380)='[[\x00'], 0xf000}, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42200, 0x8) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1m47.563857343s ago: executing program 6 (id=3036): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0xd, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x50881}, 0x24008040) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x20, 0x7fff7ffc}]}) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x0, 0x0, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000080)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f0000000140)="b2e4e2178f8a45533c02e7fddcb504145ff92ffaa347b7077eae4fd6584513d85c7333d34f2e99cb88943c2038c240e6d05831473667f5edfaae3441d0f80c778077d27a008fe5b834cbd812da") 1m47.255739299s ago: executing program 6 (id=3042): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) (async, rerun: 32) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000400180006801400040020"], 0xac}}, 0x0) (rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 32) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000018}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x20, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x8900}, 0x840d3) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x14, 0xfc, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r7}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x0, 0x0, 0x1, [@nested={0x4, 0xa8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000020c0)='lp', 0x2b) getsockopt$inet_tcp_buf(r10, 0x6, 0x1a, 0x0, &(0x7f0000000100)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x9, 0x1, 0xe2, 0x7f}, {0xa, 0x43, 0x0, 0x2}, {0xb, 0x6, 0x2}, {0xe, 0x9, 0x40, 0xff}, {0x5, 0x5f, 0xbf, 0xa}, {0x7, 0x0, 0x2, 0x8}, {0x7, 0x7, 0xe6, 0x8}, {0x2, 0x3, 0x2, 0x8}]}) 1m47.255548858s ago: executing program 6 (id=3043): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xc, 0x0, &(0x7f0000000000)) write$sequencer(r0, &(0x7f0000000080)=[@t={0x81, 0x5, 0x0, 0x9}], 0x8) 1m47.25508643s ago: executing program 6 (id=3044): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0x6}, {0x3}}}, 0x24}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000003c0)=[{0x0, 0x300}, {&(0x7f0000000200)="0ded7f81", 0x4}, {&(0x7f0000000280)="d7fab79c06e1d79932b86c88f0eb0056d7790d147f1cd694c2659d740a3a83ca76fbacea", 0x24}], 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r3, &(0x7f0000000c40)=[{&(0x7f00000001c0)="c2", 0x1}], 0x1) read$FUSE(r3, &(0x7f0000000c80)={0x2020}, 0x2020) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x2}, 0x2) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000008c403001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0x484c}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0x6}, {0x3}}}, 0x24}}, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) writev(r0, &(0x7f00000003c0)=[{0x0, 0x300}, {&(0x7f0000000200)="0ded7f81", 0x4}, {&(0x7f0000000280)="d7fab79c06e1d79932b86c88f0eb0056d7790d147f1cd694c2659d740a3a83ca76fbacea", 0x24}], 0x3) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) (async) writev(r3, &(0x7f0000000c40)=[{&(0x7f00000001c0)="c2", 0x1}], 0x1) (async) read$FUSE(r3, &(0x7f0000000c80)={0x2020}, 0x2020) (async) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) (async) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x2}, 0x2) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000008c403001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0x484c}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 1m46.407935288s ago: executing program 6 (id=3058): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001002010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1m30.118940241s ago: executing program 37 (id=3058): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001002010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 23.171140527s ago: executing program 9 (id=4315): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b8008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000003240)={0x2020}, 0x2020) 23.103766251s ago: executing program 9 (id=4316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000051}, 0x4004010) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff0001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000051}, 0x4004010) (async) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf250500000008000300f3"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff0001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) 22.974459533s ago: executing program 9 (id=4317): syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x3c00, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22.973791456s ago: executing program 9 (id=4318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1024, 0x0, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x1024}, 0x1, 0x0, 0x0, 0x400c850}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f00000004c0)={0x1, 'veth1_to_hsr\x00', {}, 0x542}) open_tree(r4, &(0x7f0000000480)='./bus\x00', 0x9802) unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0xf3) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x1b5) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x700, 0x186) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 22.897981138s ago: executing program 9 (id=4319): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000300)={0xf0f000, 0x8, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128", 0x0, 0x100000000, 0xfffffffffdfff003, 0x0, 0x9, 0x5, 0x2, 0x2, [0x9, 0x2, 0x0, 0xfffffffd]}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x1, 0x0, '\x00', {0x0, @bt={0x3605, 0x1, 0x0, 0x3, 0x4, 0x0, 0x164, 0x4, 0x1, 0xfffffffa, 0xf, 0xfffffffa, 0xff1, 0x5, 0xf, 0x1, {0x10, 0xfff}, 0x48, 0x4}}}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x10001}, 0x4000000) syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x420400, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0xd91, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r3, 0x401}, 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 22.774191349s ago: executing program 9 (id=4323): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x6, 0x6b, @scatter={0x4, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/244, 0xf4}]}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 22.718509811s ago: executing program 38 (id=4323): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x6, 0x6b, @scatter={0x4, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/244, 0xf4}]}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 1.548623606s ago: executing program 3 (id=4555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4000, 0x1ff, @mcast1, 0x7}}, {{0xa, 0x0, 0x400, @mcast2}}}, 0x108) bind$l2tp6(r1, &(0x7f0000002900)={0xa, 0x0, 0x202, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x638, 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {0x0, 0x0, 0xf5}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 1.546972221s ago: executing program 3 (id=4556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)}}, {{0x0, 0x0, &(0x7f0000001e00), 0x0, &(0x7f0000001e80)}}, {{&(0x7f00000042c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, 0x4}, 0x80, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000280)="6c2a169cec73b0f41758b868be84b2b4f723f84ce6", 0x15}, {&(0x7f0000000140)="8dbea351272237fb9fe2ae44210fbac2e4f8ba5f0b888ac873af463e5f7ab7a9b1d1ce7af8b3e56abbc7d7511996ae534d2185c99abc29774cdf4a6887bd49e293195f054fafda420623d35999c10eb3b1fbe8428d0e5120a519c3053c36ecd252fb8194ad1270998f196854d5a95388b7ba547b1a8c8548f6a249bd5ab7bb97633f15da1db8d3", 0x87}, {&(0x7f0000000380)="b69fdb67ac0c38852f080ad6d940c90ff8ca3faaeb1651a45e1b05b6ee1c1bb1ab3e9440319f64babc8b6b3d706599938b2f3b80d91b020dbc831f76d4a824f3bd97a3515e7fda85e490a3c4d9140d123aae575095542236e0b701488f724a0f1854cf73ca18b120c5306f4945400b4f8bae7b727f120fc20a350728a580c53123cc2d0724c72de25e12786f27e9f9d912f5c1495c9c7b65c118d8c23ab76f35", 0xa0}, {&(0x7f0000000440)="9c6d9f5fe75ab2697e38376f0197190451268e1515b04efb12f0ad3e449ca24eb96d1d23ae4be6a29ba4fa7127577d3bf06b2e0275a1d4d42edea2514cc519642ff6f2b7f5d152ef1f9535e35c7ee15d17eff8a9ee0484e788779fa82c8e0805cbf599d4be4a49695efff0237ec41ce8f02e031e6a8965fa1c67c2f10de9882df01b824ba87d58e66a28dfc8d00010a2", 0x90}, {&(0x7f0000000580)="4f0a305ba9e1e26bfd0d4c2806b7b61a950c7f5f6633f97ecf90e03048ef2217a1ab41ef51d8d64dfc3852c1ea401ad4e3c174d28e2bdda650b7e0ce9075f11c8a770ca27a9c6e909213cbf8b1f95a018a7624e9446edc89e3a6db3b061794e0860d35a78d6861", 0x67}, {&(0x7f0000000600)="06abffd7b295abe890d7b5c536eaac868db50e89e853c9646ee7710ccf6059a6fc37fbb396489dcfd89546b572fc36c80c0f5195f8cd97da57fcb871159cad56921345134284c4b1c8eff55af7795e7ac411f8af987eaf01d7646b4f24e4e5be9f8405317088bab8a1b57fcfca04adfa4d3421c8d132d0c0919c45eaf3ad0293175336504403ac72f340204f97824f7755df2b77ae753a063fe197fb4546979c2d0b106c1ca78e", 0xa7}], 0x7}}, {{0x0, 0x0, 0x0}}], 0x5, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x0, 0x1, {0x2, 0xff, 0x1}, {0x1}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.482026382s ago: executing program 1 (id=4560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x28f, 0x1001, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000340)={0x3, 0x0, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r3, 0x0, 0x2400c000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x85}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x2, 0x4, 0x4, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x101, 0x0, 0xffffffffffffffff}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f046}) r8 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) close(0x3) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x0, 0x3, 0x4, 0x2, 0x4, {0x0, 0x2710}, {0x2, 0x8, 0x9, 0xb9, 0x2, 0x6, "f1f425be"}, 0x10000, 0x1, {&(0x7f0000000180)=[{0x5, 0x9, {0x8}, 0x2}, {0x1, 0x41, {0x7}, 0x800}]}, 0x7e5a, 0x0, r6}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240080c1) close_range(r0, 0xffffffffffffffff, 0x0) 1.418351568s ago: executing program 3 (id=4562): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = gettid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x9, 0x5, 0x401, 0xffffffffffffffff, 0x3, r3}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ptrace(0x10, r3) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) setpgid(0x0, r8) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="090300000000000000002a000000"], 0x14}}, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) 1.417661974s ago: executing program 8 (id=4563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="22003300d0000802000000ffffff080011000000ffff0046ffff004404"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'gretap0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet(0x10, 0x2, 0x90b) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r11 = dup3(r10, r9, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$EVIOCSREP(r11, 0x40084503, &(0x7f0000000000)=[0x3, 0x101]) prctl$PR_SET_PDEATHSIG(0x1, 0xe) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x5, 0xf, 0x10, 0x7, 0x2, 0x5, 0x0, 0x0, 0x4, 0xb, 0xe, 0x4, 0x4, 0xf, 0x5, 0xd], 0x1, [0x0, 0x1, 0x0, 0x3c3, 0x7f, 0x442, 0x2, 0x6, 0x9, 0x8, 0x4, 0x3, 0xfff8, 0x5, 0xa, 0x3dd], [0x2, 0x7, 0x5, 0xfffa, 0xf, 0x1, 0x7, 0x40, 0x7, 0x4, 0x7, 0x7f, 0x5f94, 0x2, 0x9, 0xf46]}}]}}, @qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0xb0}}, 0x0) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) socket$unix(0x1, 0x1, 0x0) 1.353679611s ago: executing program 1 (id=4564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\b'], 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1.353407189s ago: executing program 3 (id=4565): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast1=0xe0000300, @private=0xa010100}, 0x8) 1.351459516s ago: executing program 8 (id=4566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000005c0)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0x26000, {}, 0x1, 0xc}, {"7d141eb7ad66d8daf4e38835d6e70d9d55296eb2c36e50d54f0d34613be4614ba1281c117b33fcb43767503fcaabbf284170937241093fa9cfbb624be8ec7b4e06bc4a4bfde3123549c3f753eada1e7c249e717905909988e09ac81179028ba71d10bbbd641f85bc53cf28086eb2df7f88ef2e2cbf50ed37810b684fdd2ee73e5f99688aa2a75681fa84c18240caa51200246c929bbd0b59e1d49135eb7e6c8b6546c6e8bc1eb9bed258f66c8def90f4244b8a9e91a5a4638265086e80d18e0cbd929d9b1628376e9809871af94bc9a293ef9d27abf84952b5452a3aad4d2516912489dee29d77815eba3bbeac3de7d8117601fd310c8d3da265f86f17fdba756856988d813fa47e9703eae6ab3e9a7f3869d2b3a3a7f2d039d4bd4d319d77fe3657d2ab04c8ef359d398357d5845d729b9e9d16ad74327050b8891503e8468a4f079babaebf007aa9cc25de29706e9a6c1bf3ab53afa10bef99a360dd6715e64d56d8c4e2063df16b3680fe56b3ae027d44d9cfad653981044d704e8c92121baf89c4cf76440e6089e486c1fbed86765f07938013da044ee260bf8fce020e049cec5e10332a2ffa81dc9c6c1b6bc56a9224649ecd591bdc8acd75e1b3b20129e2d6fab9e795ee6f2010ac8f242807a21d9631ce750c92cafac8c0a68d98dcee27982958463d89c10a20fec48eb2974cc022c7de74d39e2eed822f7e6668bb921a8db21f78e16cdd8e71e5757e063e1aaea6e1cea467cd3c2217a9ae20f721da27b1dd45c4a8471e837ec8c2ee2f763df2ea59d94c5b6be5f49ec640f6068b772e9fa5dfe4a02bc2fecbfa85a24375b2769268fdf756ababa469272ffc0969ecae8bd3a1122b8996ee77cf7947eb056b10bc099c3233db8dff9f97bbe3b8ff4f2a99555402a91971e8558c3af94bbb538c42fc05d8b5eedd1ceb306eae773b8d33a953906325104d11d9b4aa69ec7f32a30d6664a1cdb310944aee156ea713e37b4de2c8bd53156eabb3d6e494923289181102ba09d5cd707b895f89be0b66673b8520d475cc8e8d4fbb4b017033abdd13932bc41551966b959c55e943fa3efd92870a83fc2d917186e3eebc6ef75ddfdea52b44c51c45ef4297e065470d13fcad4c42f8f7dbd66545aa31a3f9e999b5cac5d8893d0dfafc63adb97610134507617bc93c77c4dcc9a0305c727eddde9ced309cd7ec72ddcd27f73b11835cb9de090f1fe93c9bd442af8f50d26e9789a255813e774804fcc36bacc50117bfea3cc2e2670d65226978c683f76d40412a9aedc8b002c835196929716b90233fd60b5a27eeabc5d93097a941ca5adf1c11a7a92755a73f0530ffe6b53a92127fd3cd897cd1496adebe1f46154845c91ca99027541d8f2df7d41abb1b016276a6aee113dde179fe18365655014a5b764482c56ece0533ae791a70ee0f4a19047e3847c971a45eef444b1748320970550965d021f626d8dd17091c3efcc5a26f702040b5d85e13dab48b66ffee27048d4eaf3092df1bb70489a6d02e0650bf3cd6d8c04df31d1ec6c7ce051c61724829a860062a28593e1016f2c94bcfafc2db3970f92aa04f15b8594f6c3f0c6cba18c1776785eaddc3510ad8f75a583d71c99072b15333c6031f90237f41336fb4318dfcdc271cbcb369d0085d178cc3ed73cbb8593993a894a2f4f7183524f70dd499f14d9dc225e5017085d501d170c7644909c0327cc867d2c99b1f77b62f827d17eae3899218047c456cbebfded12cfdc86cd42a7da91f394668bc6f4855faae32fa3b2410e2ba2fecf55242866ff8d2b2d1b66fc25f6958bec72c4aa2bab40683b1dc552fd5462ca255e0613648781768ece01e03bee42bf386b5cf14e05935a1fa3951b89267e9a72406ef5f78e510f3b5ebb6b2b390839316f58c7907c0f2e7b4eb5478b833705d3264a1724bb64267a5f28e35ac556ba28779ad3a8c1dba38194e9e56e41532fe4892041f71b3c72bbd25b4c7e2d49f27701ea18cfb375b63453c762bbc0411198d862dfba97fc876955e57f05834784699a88e73ff41cb5268a689d66a950780c11e0f70357a6a8e77fa5cbcac6281d6b3346452a4df5eedeb5e4171f3116bcf8c06cc3db746416754adc6f1a07d27e5be3241b64b116e27635a9cda80725452b0922edad97939853d546212bba8935f849f930ce04f15e45a7addc4699f6e89beaee18434cc34d9513a5827783f24eac29bf6aa7b1195c1f914343b93ecdb000d42d0d0775700e3830d16323191801ffd7a083abaef2a92b924babbe5610a9e040505d7930b3f2a2f7d5df9d7a778bc757b96abe3a0c0a837c7e9b40d896d75bec67672ddfb8dda78cf27fc69bec9bd6448812b23ff02775c4f04cf7ee65e46f89e24f24b380e33239230944a83cce01faae8a043d227287dbf87b12f684a6b10e5783d36da7b3b4b9246d9ec22ee56ed002a7c2b4e3be2f6fce43a7ffd6c59cd0d8da1c36d6fd09e3e92087513a18f4fce3a3bf1e8d33e437bc982a5094e2f43d5be04a3bfdd26809ded456f22664b6be5b625e7ae122bd2da1788f8bc181934857104d345981ea48cf7a52b3c680aa836641006b1e41fbddbcc712cf58490a98179c7d778da01952391de5bcc3344bd7d8b26cb268afa1ea81ef9ed607d76713f0078338ca1fb4829e619253e20d2ca4ea7bf8b998ff00685ad333f034acd9cd7b1de23fa08ac8856caa898397df32a8eda57cc129d8713ca87ba645265eec454a7f91134f3b7631202b860027a753c84182cb23e1fc21e780be8c7bbe0fe44c01c3357863acd1b0bf433079a0ad2e5bd20055bf013948aeae92bee1e2136e9f11f9c30f27af907aac4c70e1f25dd786f9988d91ed1b50d156a4e0d862c2e157dcae4bbba5f689c9b6c22b71d4fe8d8d248be466e1146cd0a7457da77a3276a7b56ec9f523c8a262f96c4ea7992cb4d98d715e33232837de6feebb6970bf51174731c56481938cc83cc6def53db43c3ea37c4d845a03e5b32fe1150b01fe4d6eb57649f05abc74e81bbdaa180bf0215054ce1c74870fb7626ed50b894c7de80acd3db8bc073e02a5fad267264ee0c6892822cf0b8bc01c0bd925e95733a8a35fb5e52afccf5219529fdb94be4726368cd8f61e93bc6acdb1ecee71a6ba07e7a415bab37f2684f407c71e38f3f775579db6cffd4172e729405c002bd7410c8985b30fd01e8ca8b63b1e652e9b7dc857e6a1d439b326ad6480c7942ae6d661d7b9c61e5c0e852f5473da9b5d2d9664cd9fe1d0db7e2e2dd28244c9b8a028860cd510f7e98c1aa5dd913e3607ac8ce912894f8813adb3433860b6916c157d360d9da3a9b835303d1c10fef73fe58265bc44cb065052a875cb4960671763d821f1882eeda84b66c21db49776e34b7fc8ac98d113f13b2307ea16609b396b999f487860920265f6715886ecb198c219e7015e4bcda8d70df30bbf7d1d91cf7f5978de25959a5cbb95125519bed2ac8b7f707c0222a7839c614cab422ea19c95ae3a36945c2ed8a370fd6c237f3263a3d6bcc2100e745c6e26fd4edafb0e6d90d132d2bba8ffadcc4b6c85fad583b3a683b5773b3fc0f9e70dd56eb6b4aa54fa5a0da26642e778eeacee84bc4d94528e2a2a193c81423e0aa706d53257170b2d8ab0cf5327594f2b0fee91c57533694d46d1eee566a6eac553447c23ed27e9bffb78248302874b4d43cdd4bd27836e6344bd0736313b9540810e62c5efcfa2b863cd88e306b1f649324f820b8bd8fc6265bf16040344996fc392b4fa151e6d7de66052079b191503c56ad382af42c2985e78c5f9ced5359e3e5fb875982b19817b0e589001323a7a9acb38864c12cf73ab881c4a7329e450915842463ec9e49ac8ee35f25c22f23001596858ec46bd9cb70e9ef4a0c0b5e85ae35c312f088ed19bd17a0fd8ca8b8a60dcf81142214d5e575a6af58aa47b6de84745bbd42cc75c59d36b5c562c805c0060753a4b72f18b20e6e69874d693e3bc6ecb733de44e5a65de3fd3f00068c30ebeddf36b4b1e808528679f5068cc2644403a91e15c7465d6dc94eec57533938b9e52e1428895a217e21a08bcc5bdf8b1d48568d80e59c03b0e8315824fc0b49504d90e130d66177603af59ce84e0242bb4844bb42bf1826f3ac00dfd9f6f3f3d54d0eb01c1ab46907fbfda2b48dc683c361164fec4bff8a5ec2c6fa1f40562aa5f5ebfb58dad7f3dbfc95ee053daa045d42b9f9dbffaf16533a709e2be90b67e45ffb9397a39ad4761bf49e39745fa1a27b9f39257d05cd53f7f210716c72730e1c01dd9f12265e2ea1d37a8bfd87e86205a15b3019096c72580008fe75010804d60f49e70b846dcd5e59e03d9b8f1a8bba2a3ebe808afc5577b32b75d7a14d118824ab59198151737fe4e485c6e9fc04f79c8f1d8ebefc357d4008f0e250792da3b1025a502f81b4e07c4bfcf5c4178ea45179ba782ffbfca485ce035a45ad74690d2fd3a8c83ea544b0467c05a77cb7a4730152e3af0c84556d6b30dafe002bd7a097f2d7948644e2026b4e854b273b978ce02eb8196beb4f2c2616696102600e348e85d2804b5ad225dab473496711d154e8f5836114cb692d000e6ad0cffc7dfa7789a2250a07b37ba5e8c1e5459234004d796f8201d99695a53089b0b64fdba693654e02ec5ab293df63ca4f586e9575838e3829d743b7a2e79d32a6349cea6a62872754c2ee36ff33a7447e178c2939fbe731b712502c841b0f619ca4b01049eea9984cfbe545c2c036d35d4f83d59b153347323e68137d718c3d6df6cc86edbea4f37333a2e4d6eb50a7c1d5ed8860f3ced015cdb86aa5de1401b6ca1ee24908a8d22a3e69652bd23842960b992b9cec74b94e2622a283b14c0835926996db28b23aec0193fd4b73f8f33e4303d5f6b55f3835014f93ce59bf87bd050d6aacb56a89d9978d8bdbf882f5f47f4bb79cb47422d630338c2b4ad7bfbd9ab5a1b285be56fac14fc105154e11ad8b1740393d37a1c919b70893549bdbb5bb92a1e51c682dd889fcd7394933f60c7318652a92df65d961ae21adb220b9f5f44d5990cd5e662b04d3d8a6a8254836037656e44561373ea8fd5fd52b1cb2ab637688bdd19f82052d2d44cbbd906e033e1f50496e6cae65a0f2d755332da9466c6b85b33a275aa560e03c8e086f1426cffb6de21dd8ae60e58ca2edd46052afc5acfdd148ff523ee32c124ae37aa31c41854920078832ce80b61d91a0aad990a894bdd7f505f50ac2a50787097735053a6b0625f8b67036217fd3063c56496c6ce6b4d751068fbaeae1ccdeca4f839e4ca95ee3672d9a84d63b125adf53c8a369e859e66f5d3d617c74e4d2a74f7e3c743e28a304686d637f17bc2c36f04d11d863b7d72b15cb280dfbb974e1d9e703f1521e8113d48199c4d928fe4fb394f96d814cf4b0655fb13333d4fb61266a2106c6a2418651bf7af76e00d9b413f517328171cd6de78742465c7805beec01f83d9877d636402183dec4c3eafb4640255219c5e4afbd6f9ac05286b6b9fe7c01b501e10841725131e81783232c3b1548c2ba65d069452d704e1c8bd69418df693cefe6f9b979b6648e0fb02d5a441647cc52ce38c99fd52eb3c678ddc7740728137e2fd20a3d383472d522791446e52cd1c159c4caeb29a4d80655be56e3171e5af447a8a5221c5c735587abf2cc064dbd2ef2668c3958d8ee3b67e59221e9d43c9485455a28ab63841ef8951fb08510a60a1a50563f546ff67c632f25292e9015ae5a6d37644bcc77a1c913336897ec105bffd3", "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"}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c58290c200"/24, 0x18) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002e40)={&(0x7f0000002640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe5}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xf6}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x1805, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44ba7c49}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x70d65181}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}]}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x51c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x61}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x101, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_EXPRESSIONS={0x39c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x314, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x300, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x134, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3e, 0x1, "0c9555598800daf09a6d50e78ca581f28e765c8d719683ba65483688c3c91f6d5019637bad6c873f710382f57d8f3ef2745283b70c180d9aa461"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "2aa8c20f3eeffe3b852f33b4a57156828adb5e3231bcc1f81cfbe34b3b714ce1a7560bd74424decb0516a274d3dfc348be4e94c9290135e7ac204cc6fe518f43a862ec48b5b114cdfd77405dd3f94582951db892081b51a7e0e3f44b5544e1ab91039bc3361721124f414e"}, @NFTA_DATA_VALUE={0x42, 0x1, "413ec2a845c555b0b0961ac16e9b59fde51aefffad351cebc96971e4b0e9d37da40b60242a37500c825d8db89681410f5c611dc1e61bb56a00dca14c5ad0"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_IMMEDIATE_DATA={0x1b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "ddcec7ca05fedcc9b61b2b638e6feae80957a96bf2cf0da782678af73bf978811914cbeb7def90d88d68b2328292ad918696f19827ee9b75a18c54dca091039885e1431eb3e21b0fd62c9eaa8f482f572196b0ca24ec0bf85bcf92846e12fa52c9a6c897bb94d9b7ca94b1371d7b0e32f8ff3148e6fe26484ed743b331f3e5e241edfb15f3d845a569c04701ab4e0e76f76a6562a09e3eb9b3e0c46bf6f179448803a456628cdb1403faff448a4ec95e16e0c92b46e8d89019af522a5358d7d9ea12de1487bbf623d6316a26b338a765284aac866efd9224ce80141a1af3f6b5e66c14490fb4f21345723cbaf7abd5c7f03a727109dcf48e"}, @NFTA_DATA_VALUE={0x78, 0x1, "04040ede50f61dfe52f5735489ebb27f455d374ed149bf828d1bbc2a6dae1b9a88f883adb9cb9f31a9409b060e86bdade4df7b6a36b9e4815e94c366d4dcda45a1eb8085d177c85ba240e7f70edfb7fec4345547d95f1a972e5680230e45009b1f747bff62b5e0c660ded81e1751d203dc2453fe"}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xbb, 0x6, "829e53fc2aa53ec90b4cfcb4f5af59bc400282d0ce5eb9fb032263ea97e449afba577279831556684c44ff16864a9ede7e9f8c6d17b03856086ac6975234f5c1215bbee9b98706b3cb2a955ae8f1705abf1cb5a856569bb2988f3e8819f78a7424db663f130e17e3e5fd46c4fa987bd559f65ab29d84912005f07f12fd283c0ee800a5315baaad84e49c8c8708f0d34067db89d64a5b991af2401a0c009f61a6af6e2ee0b78ef6a1031d11df5ef660e471ab869cb5eb83"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c4}, 0x1, 0x0, 0x0, 0x4000010}, 0x84) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40186f40, &(0x7f0000000700)={0x100b, 0x1, 0xb, 0x1, 'syz1\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) 1.351077713s ago: executing program 3 (id=4567): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_pidfd_open(r1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x3, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdf000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\x00') prctl$PR_SET_PTRACER(0x59616d61, r2) syz_clone3(&(0x7f00000002c0)={0x200a0800, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0xb}, &(0x7f00000003c0)=""/79, 0x4f, &(0x7f0000000180)=""/79, &(0x7f0000000280)=[r1, r2], 0x2}, 0x58) syz_clone3(&(0x7f0000000340)={0x80000000, 0x0, 0x0, 0x0, {0x400001c}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) 1.349415977s ago: executing program 8 (id=4568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900004268251a4570e200"/25, @ANYRES32=0x1, @ANYBLOB="7eba00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040)='B@', 0x0}, 0x20) (async, rerun: 64) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x800) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x2, 0x4750, 0x500, 0xfffffffffffffffc, 0x200}) (async) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) 1.349248824s ago: executing program 8 (id=4569): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1, 0x4, 0x7) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 1.349003574s ago: executing program 3 (id=4570): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYRES64], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) bpf$TOKEN_CREATE(0x24, &(0x7f0000001080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x6, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000800000018100000", @ANYBLOB="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", @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000040000fcffffef1000000008000600000000001800018014000200776c616e310000000000000000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x7fffffffffffffff) 1.28867286s ago: executing program 1 (id=4571): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8001, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x4, 0x7ffffffffffffffb, 0x0, 0x0, 0x0, 0x1c, "339f020bbe780000000000000008000140080d0ec0dd17c18e8438ef2a0000000000000000000000004000", "c787a16c1ca43f7339f3d3289737f0374c72a964a0193b3e8772fd29f35239d2000000000000000000000000000000000200", "24431a5e77a68e174f000300ffffffffff0fe200", [0x2]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c07, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000540001610900000050005a0007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000002000000000000000000000000000000000186"], 0x38}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x9, 0x9, 0x4, 0x41, 0xf17, 0xf}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0x7, 0x80000000, 0x800, 0x1, 0x4}}]}}}]}, 0x78}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.221846535s ago: executing program 1 (id=4573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xfb}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x884}, 0x40) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x29, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r6, &(0x7f0000000640)=[{&(0x7f0000000680)="8c469d4eee35d389730b3b2dae9d6b3a2993c4c919a4083d480439301b0cc72a7caa40ce898e83a102739f7f440195d11e5e169da4912d4eb6437378ed185901e77318df11468b2502d0c06a0792638d640d1e665568e98ec940b4669cb49cf1cb0d2be6046560f945856492c7aecb", 0x6f}, {&(0x7f0000000540)="80", 0x1}], 0x2) io_uring_enter(r2, 0x3ea9, 0x5a42, 0x0, &(0x7f0000000000)={[0x1]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x540) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, &(0x7f00000004c0)={r7, &(0x7f00000001c0)=',^[\'\x00', 0x2000, &(0x7f0000000300)={@align=0x4, {0x8, 0x9, 0x52b368c9, 0x5}}, 0x9, &(0x7f0000000400), &(0x7f0000000480)=0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000500)={0x101ff, 0x0, 0xdddd1000, 0x1000, &(0x7f000000c000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) 1.082146191s ago: executing program 2 (id=4577): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000740)={@msf={0x4, 0x6, 0x8}, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000043000701feffffffdded94230fe800000000fcfc"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 996.304676ms ago: executing program 1 (id=4578): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='update default ~ser:load \x00'], 0x1a, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000000)="358ce1a90de721dea47d8d5255ca134bfa41cba62e3580fe1c11f5a3d6ed7531a0663622", 0x24, 0xfffffffffffffffe) 996.13121ms ago: executing program 2 (id=4579): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r0, 0x89fd, &(0x7f0000000900)={'bond0\x00', @random="0600002000"}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x18}, 0x94) 987.830285ms ago: executing program 2 (id=4580): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4005}, 0xc800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001) (async) readahead(r0, 0xaa14, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) fsetxattr(r0, &(0x7f0000000380)=@random={'security.', '0000:00:10.0\x00'}, &(0x7f00000003c0)='@\x00', 0x2, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000440)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000480)="0070dd244d1097ea2454814ee735fb6ca82aa3ed47a256e3f1d56e667bb6f1d2dfa860cf69f0c4bbda89cb4862c8ec6b252f5a40e2974be2841cde8304ef1e45918efe6328ed3510cf2c9237474fb6881be0be1a9d5da20dd4e461b98f241a4eaf69b83188da693fc03ab15ec13589f575d6f71c9ab299e0bdaf4705e961c3e74f378537", 0x84}, {&(0x7f0000000540)="cd35a31fee82cd17b4ba62f68df7e5e9a8bed6ac086460df77ae99f252b77df6cd0d28290d55bac7927945655dc89d21b7a238d2f0f3c4d3fc376351185778f86be0b608f3636e3552259c06eb95ceca5e66a1e192494cb70c6acf1619baff22d480a104ac0efbd33987349b0c73380657ba9a012db22f7a55ba03abbd986046de35363e7d28cc07644d4443188ed02537d947094d6c0523ad", 0x99}], 0x2, &(0x7f0000000640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x83, 0x12, "becdc2719e67a7560ff0e53de68c9672"}, @noop, @ra={0x94, 0x4}]}}}], 0x70}}], 0x1, 0x44000) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x7}}, @typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x7}, @fwd={0x10}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000780)=""/4096, 0x5c, 0x1000, 0x0, 0x400}, 0x28) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r5, &(0x7f00000017c0)={0xa, 0x4e23, 0xfffffffe, @local, 0xffff}, 0x1c) (async) writev(r4, &(0x7f0000001840)=[{&(0x7f0000001800)="6aecb8641b32b085b6f528a7a8f6bc4e745ee0d32a76f5635f732b06f635f25249b8", 0x22}], 0x1) (async) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001880), 0x40001, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) (async) r7 = getpgrp(0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f00000018c0)={r7}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001a00)={'vxcan1\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x14, 0x13, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffff59}, [@map_fd={0x18, 0x2, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000019c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x66, '\x00', r8, @fallback=0x32, r4, 0x8, &(0x7f0000001a40)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x1, &(0x7f0000001a80)=[r6, r6], &(0x7f0000001ac0)=[{0x2, 0x5, 0xc, 0xb}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{r6, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)=r6}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e40)=@bpf_tracing={0x1a, 0xf, &(0x7f0000001c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @call={0x85, 0x0, 0x0, 0xaf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}]}, &(0x7f0000001d00)='syzkaller\x00', 0x2, 0xab, &(0x7f0000001d40)=""/171, 0x41100, 0x44, '\x00', r8, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1dc93, r6, 0x4, 0x0, &(0x7f0000001e00)=[{0x1, 0x4, 0x0, 0xc}, {0x3, 0x3, 0x2, 0xa}, {0x5, 0x3, 0x1, 0xa}, {0x0, 0x4, 0xf, 0xb}], 0x10, 0x7}, 0x94) recvmsg$kcm(r6, &(0x7f0000002540)={&(0x7f0000001f00)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001f80)=""/196, 0xc4}, {&(0x7f0000002080)=""/216, 0xd8}, {&(0x7f0000002180)=""/212, 0xd4}, {&(0x7f0000002280)=""/196, 0xc4}, {&(0x7f0000002380)=""/114, 0x72}, {&(0x7f0000002400)=""/55, 0x37}, {&(0x7f0000002440)=""/97, 0x61}], 0x7}, 0x2000) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000002580), &(0x7f00000025c0)=0x4) (async) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000002700)={0x2, 0xc1, &(0x7f0000002600)="edb62906ae59c1ae6eac5a4f889e7decd4cf6a5671a0f290403741763bc0e7dd4607e61e8e84c0d6e831c78215098b875c5602c3395b1a4c79f5dc8e11203ce0c5d29723f4116a9225340344d121d2827834505dfcd614653bb313265576fb50b79841bcbd02bddb46051f2cb46e518f5b47dbb813dc540b9f347e6f337aa344ae5c6c6b2a823677ea1c3433e947f573c9370cf71b8c382862c2c779920182f542d3800f87c3c4c5331ea408a8e5aefc03f74e816c9727ce64082c20ae594c109d"}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003880)={&(0x7f0000002740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x8, [@typedef={0x10}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x2f, 0x1}, @typedef={0x1, 0x0, 0x0, 0x8, 0x2}, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{0x7, 0x7}, {0x10}, {0x1, 0x6}, {0x7, 0x7}, {0xb, 0x10000}, {0x2, 0x80000000}, {0x9, 0x7}, {0xe, 0x6}]}, @func={0xc, 0x0, 0x0, 0xc, 0x3}, @struct={0x1, 0x8, 0x0, 0x4, 0x0, 0x1, [{0xd, 0x4, 0xfffffffc}, {0xf, 0x3, 0xfffffffa}, {0xc, 0x1, 0x5}, {0x8, 0x0, 0x2}, {0x10, 0x3, 0x3}, {0xb, 0x1, 0x8}, {0xb, 0x0, 0x2}, {0x8, 0x2, 0x3}]}]}, {0x0, [0x0, 0x2e, 0x30, 0x5f, 0x5f, 0x61]}}, &(0x7f0000002880)=""/4096, 0x10c, 0x1000, 0x1, 0x798, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000038c0)={0x1b, 0x0, 0x0, 0x7a4c, 0x0, r9, 0x1b0, '\x00', 0x0, r11, 0x2, 0x2, 0x4}, 0x50) (async) ioctl$VHOST_SET_VRING_ENDIAN(r6, 0x4008af13, &(0x7f0000003940)={0x3, 0x5}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003980)={0x1b, 0x0, 0x0, 0x4d5, 0x0, r6, 0xb, '\x00', r8, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) 987.159253ms ago: executing program 1 (id=4581): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r0, 0xc0106446, &(0x7f0000000040)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)=0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000200)='./file0\x00') syz_clone(0x104100700, &(0x7f0000000240)="13b115b6238f892516eba4333b93fd9d536e4060c71c9ba8f3d2786a85e05b676c1a1b0a1dfd25dd9b1158b7634f43f51fd7404145a2bfca286fac97d16122f8bceac837b4687635b80dbaf91f10861f18ca3672737798d40c2f59b3d97387b87f67fad41090b0621a05d15af86b9fa310f1861b4cb08ed39ee714a6936ad5acccef922a3a3f42fd6c6e6d85fa157211904e24de14b4a396addef1a32ee562d73661c67cf62b8cb2eefbd08a9a69f23a9c378687fe73d332d55e797d5b4a6a566b4ef437e7650a11056f1c42c7627bc949fb324f7ad357bb6f5011", 0xdb, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="8011ff3af8d2a836b32943ee5ca5f1068876073ae89165085edb5b8f29f323b078998605856a59cb996e14abd0614b2f7d1ca230758e61ed01201182d73ef3f96cfbd214251fc004ca107110bb290ea27e42945a4283123911ad9b15206867469246dcb79b8a197bd5b93fde2465c8fec80a98c952efc5b566dc61899629306cdb842e892bf75c3651477a7e2a2c586904bf323218f81685195b7698b24674d9cc1b37aaa4f565a611963574cf9c55b81268e91c3870908f01a2ca01e1894bef7e8ac8aea9cd271b6353f9cefe6717821add58d907bf855c5f694981b97059df1b0f") r2 = openat$audio1(0xffffffffffffff9c, &(0x7f00000004c0), 0x109182, 0x0) mmap$dsp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x810, r2, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x10c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc8, 0xa8, @random="5ec183b9eb273a2fd366fd7fc340dcafddc0bc59dc14dca10a109d1c94c684da1be5f6a6c7a04f09cab1ff5f8694c58320ca50303dd5b1977213d9e8f63b94b00d5d7c4d64c08e15be2d07d6f29512a2dba09d84aea5489dbb9bea1167a863b9b4fc3b2642a2344bbc07d341861f96e915b1696ab722a06130c342ec591369d1a22bc384bb19321580e9dea986c0d11d63fd9e7baec5c32e1d491d99f6b2e3a4d6626e7d952f19db2d22378e52f206ee8925d4308b6eab536333ad91c9af1f0d60a8ef0f"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffff}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = syz_open_dev$evdev(&(0x7f0000000740), 0x4, 0x50d000) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000780)=""/211) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000880)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r0, 0xc028644b, &(0x7f00000008c0)={r5, 0x1, 0x760000, 0x4, 0x80000000, 0x0, 0xffffffffffffffff, 0x3}) writev(r2, &(0x7f0000000b80)=[{&(0x7f0000000900)="559c526c9ef05d1d3ba5f28d4a640b25fe44321341d383e8e73e28338379f37bc63b31009aef24561b48ca61803d3bfbd8c876886132e085084dd0b9ea622bc84bf5b87aff3ed3", 0x47}, {&(0x7f0000000980)="360e0b3ec766f91e2ba6e4e5316d6c850c3ca5b1926cd4fc219ea6d40de346632d94b6e7cd159de5ed1deaa9cb2e8434d535a284beb6e92cef13943777700404c4319ba481398681c7332f15022e66acd822e8232a44a2fd255367919190d1784cf9a2e0ae882abfb3387f7b8e217ea7c75bffb91cb89e4b73795a1d0abd6c28", 0x80}, {&(0x7f0000000a00)="0797c073bec3bdbfdca35407fbdd69a1040c64dd0108d342f20145c3c00fef41542058c7d28e1ba0842c1e5be78ead6c62202b606831b866a1012c9b107de42ea10f6aae521b15ad7aa03adef7ffcfa2260516359b61c6dac6ae9fcddd", 0x5d}, {&(0x7f0000000a80)="d383bd2dc59ab8945f7244216b78073632d4ae0eb2b16dc3f6e2ede2859a34797877e9f653ccab0f12e1afd9a404e4b454db8302e32f924f489fe56aa7ac4fded9fd4f73a73da7be3dbe2295afcde5b65649fdd9dfd24731537a6e5a48b9914fd5993f9fc7d675d36555db6ea27f73f75fd39e83a41bbee512b9d991d52a6e5202fe5866da8c78466d7f1ab6a6a8d7674e3412bbd7507ce79e89eec96eb61dac725709f79ddb7c1ff7bdd216d56c21d7d36b9403059a820e6ae9863b90770457669e609915980ca12ae5749300a69809206cb8", 0xd3}], 0x4) r6 = syz_io_uring_complete(0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000bc0)={0xfffffffd, 0x0, 0xff, 0x6, 0xf, 0x6}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0x408, 0x408, 0x408, 0x128, 0x128, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, &(0x7f0000000c00), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'tunl0\x00', {0x20, 0x40, 0x1, 0x400, 0xd, 0x4, 0x6, 0x40, 0x20}, {0xe6}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@remote, 0x25, 0x3f, 0x8}}}, {{@ipv6={@empty, @mcast2, [0xff, 0xffffff00, 0xff, 0xff], [0xffffff00, 0x1fe, 0x7f00007f, 0xff000000], 'ip_vti0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x0, 0xd, 0x6, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"e85c"}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0xff000000, 0xffffffff], [0xff000000, 0x0, 0xff, 0xffffff00], 'veth0_to_bridge\x00', '\x00', {0xff}, {}, 0x21, 0x1, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x8}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xff000000, 0xffffff00], [0xff000000, 0xffffffff, 0x0, 0xffffff00], 'ip6_vti0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0xef, 0x7, 0x2a}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@mh={{0x28}, {"e5d9"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x10001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001340)=""/85, 0x55}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/123, 0x7b}, {&(0x7f0000002440)=""/154, 0x9a}, {&(0x7f0000002500)=""/125, 0x7d}], 0x5, &(0x7f0000002600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}, 0x100) socket$inet6(0xa, 0x80001, 0x9) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000026c0), 0x200, 0x0) getsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000002700), &(0x7f0000002740)=0x4) recvmmsg(r8, &(0x7f0000004e00)=[{{&(0x7f0000002780)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002800)=""/134, 0x86}, {&(0x7f00000028c0)=""/226, 0xe2}, {&(0x7f00000029c0)=""/250, 0xfa}], 0x3, &(0x7f0000002b00)=""/106, 0x6a}, 0xb4f2}, {{&(0x7f0000002b80)=@can, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/101, 0x65}, {&(0x7f0000003c80)=""/21, 0x15}], 0x3}, 0x3}, {{&(0x7f0000003d00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d80)=""/199, 0xc7}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003ec0)=""/132, 0x84}, {&(0x7f0000003f80)=""/226, 0xe2}], 0x2, &(0x7f00000040c0)=""/243, 0xf3}, 0xfffffff8}, {{&(0x7f00000041c0)=@x25, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004240)=""/162, 0xa2}, {&(0x7f0000004300)=""/9, 0x9}, {&(0x7f0000004340)=""/179, 0xb3}, {&(0x7f0000004400)=""/189, 0xbd}], 0x4, &(0x7f0000004500)=""/155, 0x9b}, 0x8}, {{&(0x7f00000045c0)=@alg, 0x80, &(0x7f0000004800)=[{&(0x7f0000004640)=""/252, 0xfc}, {&(0x7f0000004740)=""/190, 0xbe}], 0x2, &(0x7f0000004840)=""/245, 0xf5}, 0x7fffffff}, {{&(0x7f0000004940)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000004d80)=[{&(0x7f00000049c0)=""/253, 0xfd}, {&(0x7f0000004ac0)=""/179, 0xb3}, {&(0x7f0000004b80)=""/9, 0x9}, {&(0x7f0000004bc0)=""/47, 0x2f}, {&(0x7f0000004c00)=""/76, 0x4c}, {&(0x7f0000004c80)=""/165, 0xa5}, {&(0x7f0000004d40)=""/56, 0x38}], 0x7}}], 0x7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000005040)={0x0, 0x58, &(0x7f0000004fc0)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x80, @private0, 0x2}, @in6={0xa, 0x4e20, 0x2, @loopback, 0x5b0}]}, &(0x7f0000005080)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000050c0)={r11, 0x7ff, 0xffff, 0x7, 0x401, 0x8}, &(0x7f0000005100)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000053c0)={r10, 0x0, 0x38, 0x7f, &(0x7f0000005140)="2f8cfe8b912b7fe39d4e5c961d24b4aa5fc055ce92ad2c23fff800d6514f0ecc8c0f061b511bab9e22c192c4277b3007b94fad2ec0741011", &(0x7f0000005180)=""/127, 0x2, 0x0, 0xd7, 0x81, &(0x7f0000005200)="17f1db4135802dbc9ceabd2e223d0d86a9a5d45cadf8fa4c0bf70b5c560e703541a71bf64696df844474822ae160b012e14f8b456d17924e9670e203b451b5bbaa57375791d5bdc289f140364bf6806fa488814e0cc8b6caa1b5fce80f669e2814a23fab0c58471a0e1792bc2879d4cbce4758142d1f4e86804246734d7d99df1024444263279caf6392322ce0590cc6ecb4fe2391e8bac18b255c78c9bf3d524bc25ae3562e3297dad7a219f50cf3befd27e9f43953c5f08e69edd09ede3b97298ee491735bebdeb10a6bb0abc4c5468a68c3f8505c35", &(0x7f0000005300)="05e94593caa8a366fa0612f99e15d900947eb5c10b6e423351ad93f3655aec34aef8765ea04d6c31308056dc66f63ef6fc9d1a156f76dba24f9688a7acd0ab85f4a086d53757444d5f21f74fabd136c10e4852348c6daa09688ff2aaa69e4a99cb77c846d72f6538132b4523de955985f9dfa7c304fdaab33d2b86b72909c59f96", 0x1, 0x0, 0xf}, 0x50) 986.971678ms ago: executing program 2 (id=4582): open(&(0x7f00009e1000)='./file0\x00', 0x169840, 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESOCT=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb7852", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,', @ANYRESDEC=0x0, @ANYBLOB=',gr']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="980000001e00090529bd7000fcdbdf2500000400000000000000000000000000000004d50a003300fe88000001000000000000000000010180000000000000000c001500fdffffbf0700000010000a"], 0x98}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x4ac80, 0x0) ioctl$CDROM_MEDIA_CHANGED(r7, 0x5325, 0x2) 519.508887ms ago: executing program 8 (id=4583): madvise(&(0x7f0000998000/0x1000)=nil, 0x1000, 0xe) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001700)={0x2020}, 0x2020) get_mempolicy(0x0, 0x0, 0x2, &(0x7f000087a000/0x3000)=nil, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) mmap$IORING_OFF_SQES(&(0x7f00002f8000/0x2000)=nil, 0x2000, 0x9, 0x8010, r0, 0x10000000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9203, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 518.878645ms ago: executing program 8 (id=4584): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000780), 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1, 0x1, 0x10, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400054a", @ANYRES16=r2, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007564703a73797a320000000038000400200001000a004e2300000009fe8000000000000000000000000000bb010000001400020002004e23e00000010000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) 4.483662ms ago: executing program 2 (id=4585): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c004606", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf251f0000000c00060003000000030000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x840) r2 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0xa7e9, 0x0, 0x7, 0x4, 0x0, 0x10000, 0x406, 0x4, "427f4d0561864078b7f952fc7ebbfea1deee063e5f0cc38c6a002000"}}) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r4, 0xc01064c1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x381}, 0x9c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fcntl$addseals(r5, 0x409, 0x6) 0s ago: executing program 2 (id=4586): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000d73000/0x4000)=nil], 0x0, &(0x7f00000003c0), 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x0, 0x20020, &(0x7f0000000140)=""/24}, &(0x7f0000000380)="851666ce20db", 0x0, 0xfffffffb, 0x39, 0x0, 0x0}) kernel console output (not intermixed with test programs): ect_r:tmpfs_t tclass=dir permissive=1 [ 333.148568][ T41] audit: type=1400 audit(2000000022.079:40452): avc: denied { write } for pid=18895 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.167886][T18921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3595'. [ 334.171792][T18921] netlink: 'syz.1.3595': attribute type 7 has an invalid length. [ 334.175236][T18921] netlink: 'syz.1.3595': attribute type 8 has an invalid length. [ 334.178281][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3595'. [ 334.183616][T18921] erspan0: entered promiscuous mode [ 334.187833][T18921] gretap0: entered promiscuous mode [ 334.190812][T18921] erspan0: left promiscuous mode [ 334.193116][T18921] gretap0: left promiscuous mode [ 334.415264][T18941] overlayfs: failed to clone upperpath [ 334.506626][ T41] audit: type=1400 audit(2000000023.343:40453): avc: denied { getopt } for pid=18953 comm="syz.3.3607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 334.525757][T18946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.529386][T18947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.575462][T18970] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3613'. [ 334.590037][T18970] xfrm0 speed is unknown, defaulting to 1000 [ 334.634604][ T41] audit: type=1400 audit(2000000023.455:40454): avc: denied { listen } for pid=18969 comm="syz.3.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 334.887980][T19013] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 334.891485][T19013] CIFS: VFS: Malformed UNC in devname [ 335.122662][ T41] audit: type=1400 audit(2000000023.919:40455): avc: denied { read } for pid=19032 comm="syz.9.3628" path="socket:[91977]" dev="sockfs" ino=91977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 335.180625][T19044] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3632'. [ 335.185145][T19044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.192672][T19044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.197113][T19044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.243840][T19051] dns_resolver: Unsupported server list version (0) [ 335.265402][ T41] audit: type=1400 audit(2000000024.049:40456): avc: denied { bind } for pid=19052 comm="syz.8.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 335.388180][T19062] can0: slcan on ttyS3. [ 336.050590][T19086] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 336.111903][T19100] tmpfs: Bad value for 'mpol' [ 336.116818][T19100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3643'. [ 336.133872][T19101] qrtr: Invalid version 97 [ 336.341436][T19062] can0 (unregistered): slcan off ttyS3. [ 336.403200][T19133] /dev/sg0: Can't lookup blockdev [ 336.416258][ T7572] usb 14-1: new low-speed USB device number 4 using dummy_hcd [ 336.556541][ T7572] usb 14-1: device descriptor read/64, error -71 [ 336.788591][T19165] fuse: Bad value for 'group_id' [ 336.790664][T19165] fuse: Bad value for 'group_id' [ 336.815721][ T7572] usb 14-1: new low-speed USB device number 5 using dummy_hcd [ 336.956786][ T7572] usb 14-1: device descriptor read/64, error -71 [ 337.074889][ T7572] usb usb14-port1: attempt power cycle [ 337.223677][T19173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=19173 comm=syz.1.3661 [ 337.442154][ T7572] usb 14-1: new low-speed USB device number 6 using dummy_hcd [ 337.464004][ T7572] usb 14-1: device descriptor read/8, error -71 [ 337.659525][ T41] kauditd_printk_skb: 12 callbacks suppressed [ 337.659536][ T41] audit: type=1400 audit(2000000026.273:40469): avc: denied { accept } for pid=19176 comm="syz.8.3662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 337.722920][ T7572] usb 14-1: new low-speed USB device number 7 using dummy_hcd [ 337.745075][ T7572] usb 14-1: device descriptor read/8, error -71 [ 337.863835][ T7572] usb usb14-port1: unable to enumerate USB device [ 338.015530][T19185] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 338.096049][T19192] overlay: Bad value for 'workdir' [ 338.124315][T19195] netlink: 'syz.1.3667': attribute type 1 has an invalid length. [ 338.140486][T19195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 338.143764][T19195] bond0: (slave bond4): making interface the new active one [ 338.146948][T19195] bond0: (slave bond4): Enslaving as an active interface with an up link [ 338.155302][T19195] bond0: (slave gretap2): Enslaving as a backup interface with an up link [ 338.159717][T19195] __nla_validate_parse: 1 callbacks suppressed [ 338.159728][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3667'. [ 338.165653][T19195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.273528][T19205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3671'. [ 338.304726][ T41] audit: type=1400 audit(2000000026.856:40470): avc: denied { setopt } for pid=19206 comm="syz.1.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 338.779220][T19234] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3680'. [ 339.052400][T19260] xfrm0 speed is unknown, defaulting to 1000 [ 339.591513][T19287] overlayfs: failed to decode file handle (len=8, type=98, flags=0, err=-22) [ 339.595330][T19287] binder: 19286:19287 ioctl 40046205 0 returned -22 [ 339.619897][T19287] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 339.648950][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.796497][T19293] hfsplus: unable to find HFS+ superblock [ 339.960752][ T41] audit: type=1326 audit(2000000028.391:40471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.1.3703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac819ce59 code=0x7ffc0000 [ 339.968750][ T41] audit: type=1326 audit(2000000028.391:40472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.1.3703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac819ce59 code=0x7ffc0000 [ 339.976093][ T41] audit: type=1326 audit(2000000028.391:40473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.1.3703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac819ce59 code=0x7ffc0000 [ 339.984280][ T41] audit: type=1326 audit(2000000028.391:40474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.1.3703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac819ce59 code=0x7ffc0000 [ 339.994261][ T41] audit: type=1326 audit(2000000028.391:40475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.1.3703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac819ce59 code=0x7ffc0000 [ 340.003901][ T41] audit: type=1326 audit(2000000028.391:40476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.1.3703" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8ac819ce59 code=0x7ffc0000 [ 340.013361][ T41] audit: type=1326 audit(2000000028.391:40477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.1.3703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac819ce59 code=0x7ffc0000 [ 340.023859][ T41] audit: type=1326 audit(2000000028.391:40478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19309 comm="syz.1.3703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac819ce59 code=0x7ffc0000 [ 340.031269][T19327] netlink: 'syz.8.3707': attribute type 1 has an invalid length. [ 340.130587][T19342] overlayfs: failed to clone upperpath [ 340.181800][T19350] netlink: 175008 bytes leftover after parsing attributes in process `syz.1.3714'. [ 340.502271][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.606938][T19368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=19368 comm=syz.9.3720 [ 340.653874][T19368] bond1: entered promiscuous mode [ 340.830304][T19373] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3721'. [ 340.834288][T19373] netlink: 'syz.9.3721': attribute type 11 has an invalid length. [ 340.842574][ T5820] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.846693][T19373] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3721'. [ 340.851048][ T5820] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.854747][T19373] netlink: 'syz.9.3721': attribute type 11 has an invalid length. [ 340.858695][ T5820] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.864811][ T5820] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.139521][T19383] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3725'. [ 341.160137][T19383] .` (unregistering): (slave batadv0): Releasing backup interface [ 341.167294][T19383] .` (unregistering): Released all slaves [ 341.233157][T19389] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 341.439538][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3731'. [ 341.455768][T19404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19404 comm=syz.1.3731 [ 341.465141][T19404] ip6t_srh: unknown srh match flags 4000 [ 341.500254][T19408] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3733'. [ 341.560141][T19413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3734'. [ 341.565004][T19413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.569435][T19413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.573580][T19413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.760103][T19426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=146 sclass=netlink_route_socket pid=19426 comm=syz.8.3740 [ 341.908875][T19449] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 342.163173][T19473] bridge0: entered promiscuous mode [ 342.169958][T19473] tipc: Resetting bearer [ 342.175544][T19473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.207600][T19482] netlink: 'syz.3.3753': attribute type 2 has an invalid length. [ 342.219692][T19473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.248257][T19473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 342.254596][T19473] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 342.255245][T19481] IPv6: Can't replace route, no match found [ 342.261172][T19481] netlink: 'syz.9.3756': attribute type 2 has an invalid length. [ 342.286236][T19489] tipc: Resetting bearer [ 342.302626][T19491] input: syz1 as /devices/virtual/input/input37 [ 342.330862][ T5568] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 342.336320][T19494] binder: BINDER_SET_CONTEXT_MGR already set [ 342.338255][T19494] binder: 19493:19494 ioctl 4018620d 2000000000c0 returned -16 [ 342.349911][T19494] binder: BINDER_SET_CONTEXT_MGR already set [ 342.352019][T19494] binder: 19493:19494 ioctl 4018620d 200000000040 returned -16 [ 342.361088][T19498] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 342.361776][T19496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.369706][T19496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.374840][T19496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.411596][T19501] hfsplus: unable to find HFS+ superblock [ 342.614943][T19500] netlink: 'syz.1.3763': attribute type 7 has an invalid length. [ 342.617594][T19500] netlink: 'syz.1.3763': attribute type 8 has an invalid length. [ 343.110992][T19525] comedi comedi3: comedi_config --init_data is deprecated [ 343.214387][T19535] openvswitch: netlink: IP tunnel dst address not specified [ 343.444523][ T41] kauditd_printk_skb: 27 callbacks suppressed [ 343.444541][ T41] audit: type=1400 audit(2000000031.606:40506): avc: denied { listen } for pid=19557 comm="syz.8.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 343.573812][T19573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19573 comm=syz.1.3784 [ 343.579208][T19575] __nla_validate_parse: 9 callbacks suppressed [ 343.579220][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.584945][ T5568] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.587302][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.596991][ T5568] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.600280][T19573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19573 comm=syz.1.3784 [ 343.604880][T19573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19573 comm=syz.1.3784 [ 343.605524][ T5568] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.605600][T19575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19575 comm=syz.1.3784 [ 343.609688][T19573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19573 comm=syz.1.3784 [ 343.616149][ T5568] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.619930][T19573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19573 comm=syz.1.3784 [ 343.632061][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.632725][T19573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19573 comm=syz.1.3784 [ 343.635737][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.639730][T19573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19573 comm=syz.1.3784 [ 343.642973][T19575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19575 comm=syz.1.3784 [ 343.645950][T19582] hpfs: Bad magic ... probably not HPFS [ 343.648989][T19582] hpfs: Bad magic ... probably not HPFS [ 343.650009][T19573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=19573 comm=syz.1.3784 [ 343.651371][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.651624][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.652708][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.675714][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.679941][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.685355][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3784'. [ 343.881932][T19605] fuse: fd is not a fuse device [ 344.075043][T19622] tmpfs: Bad value for 'mpol' [ 344.270569][T19629] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 344.464519][T19628] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 344.521010][ T41] audit: type=1400 audit(2000000032.613:40507): avc: denied { create } for pid=19637 comm="syz.1.3805" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 344.544118][ T41] audit: type=1400 audit(2000000032.632:40508): avc: denied { unlink } for pid=13584 comm="syz-executor" name="file0" dev="tmpfs" ino=3171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 344.853360][ T50] usb 13-1: new full-speed USB device number 6 using dummy_hcd [ 345.018011][ T50] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 345.021464][ T50] usb 13-1: can't read configurations, error -61 [ 345.073137][T19676] netlink: del zone limit has 4 unknown bytes [ 345.156116][ T50] usb 13-1: new full-speed USB device number 7 using dummy_hcd [ 345.183104][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.185982][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.189822][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.193006][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.196187][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.270697][ T5568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.279850][ T5568] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.321765][ T50] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 345.324113][ T50] usb 13-1: can't read configurations, error -61 [ 345.326698][ T50] usb usb13-port1: attempt power cycle [ 345.356838][ T5568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.361609][ T5568] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.377311][T19680] xfrm0 speed is unknown, defaulting to 1000 [ 345.476375][ T5568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.479820][ T5568] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.541828][ T5568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.546043][ T5568] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.579683][T19695] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 345.580984][T19680] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.585795][T19680] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.588969][T19680] bridge_slave_0: entered allmulticast mode [ 345.592706][T19680] bridge_slave_0: entered promiscuous mode [ 345.597056][T19680] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.601129][T19680] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.604412][T19680] bridge_slave_1: entered allmulticast mode [ 345.607739][T19680] bridge_slave_1: entered promiscuous mode [ 345.624502][T19680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.630692][T19680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.658845][T19680] team0: Port device team_slave_0 added [ 345.662280][T19680] team0: Port device team_slave_1 added [ 345.676697][T19680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.679345][T19680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.686798][ T50] usb 13-1: new full-speed USB device number 8 using dummy_hcd [ 345.689791][T19680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.697861][T19680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.700783][T19680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.710072][T19680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.714063][ T50] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 345.716489][ T50] usb 13-1: can't read configurations, error -61 [ 345.759325][ T5568] wg1: left allmulticast mode [ 345.824105][ T5568] bond0 (unregistering): (slave gretap2): Releasing backup interface [ 345.847788][ T41] audit: type=1400 audit(2000000033.832:40509): avc: denied { accept } for pid=19712 comm="syz.9.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.849161][ T50] usb 13-1: new full-speed USB device number 9 using dummy_hcd [ 345.872752][ T50] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 345.875510][ T50] usb 13-1: can't read configurations, error -61 [ 345.878053][ T50] usb usb13-port1: unable to enumerate USB device [ 346.262798][ T5568] bond1 (unregistering): Released all slaves [ 346.268739][ T5568] bond2 (unregistering): Released all slaves [ 346.273533][ T5568] bond3 (unregistering): Released all slaves [ 346.278195][ T5568] bond0 (unregistering): (slave bond4): Releasing backup interface [ 346.281835][ T5568] bond0 (unregistering): Released all slaves [ 346.286162][ T5568] bond4 (unregistering): Released all slaves [ 346.292392][T19680] hsr_slave_0: entered promiscuous mode [ 346.294796][T19680] hsr_slave_1: entered promiscuous mode [ 346.296921][T19680] debugfs: 'hsr0' already exists in 'hsr' [ 346.298721][T19680] Cannot create hsr debugfs directory [ 346.356431][ T41] audit: type=1400 audit(2000000034.303:40510): avc: denied { write } for pid=19716 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.374504][ T5568] tipc: Disabling bearer [ 346.377291][ T5568] tipc: Left network mode [ 346.400520][ T41] audit: type=1400 audit(2000000034.340:40511): avc: denied { write } for pid=19719 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.414276][ T5568] IPVS: stopping master sync thread 15816 ... [ 346.438710][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18 [ 346.469018][ T5813] IPVS: starting estimator thread 0... [ 346.488968][T19737] netlink: 'syz.3.3829': attribute type 1 has an invalid length. [ 346.502985][T19737] bond2: entered promiscuous mode [ 346.503791][ T41] audit: type=1400 audit(2000000034.442:40512): avc: denied { write } for pid=19734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.505405][T19737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.528872][T19737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.532121][T19737] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 346.536335][T19737] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 346.542839][T19737] bond2: (slave ip6gre1): making interface the new active one [ 346.546133][T19737] ip6gre1: entered promiscuous mode [ 346.549454][T19737] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 346.556336][ T41] audit: type=1400 audit(2000000034.488:40513): avc: denied { write } for pid=19740 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.567000][T19732] IPVS: using max 32 ests per chain, 76800 per kthread [ 346.700399][ T41] audit: type=1400 audit(2000000034.617:40514): avc: denied { write } for pid=19748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.747426][ T41] audit: type=1400 audit(2000000034.663:40515): avc: denied { write } for pid=19752 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.810356][T19760] x_tables: duplicate underflow at hook 1 [ 346.930371][ T5568] veth1_macvtap: left promiscuous mode [ 346.932253][ T5568] veth0_macvtap: left promiscuous mode [ 347.212768][T19680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.216432][T19680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.219136][T19680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.222359][T19680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.225869][T19680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.229567][T19680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.232274][T19680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.235706][T19680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.263337][T19680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.270484][T19680] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.275133][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.277467][ T6544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.284401][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.286815][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.344247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 347.359731][ T5568] IPVS: stop unused estimator thread 0... [ 347.441105][ T5749] Bluetooth: hci3: command tx timeout [ 347.441174][T16523] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 347.453833][T19680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.470641][T19680] veth0_vlan: entered promiscuous mode [ 347.477928][T19680] veth1_vlan: entered promiscuous mode [ 347.494141][T19680] veth0_macvtap: entered promiscuous mode [ 347.499740][T19680] veth1_macvtap: entered promiscuous mode [ 347.507291][T19680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.514301][T19680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.522276][T13454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.525540][T13454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.529079][T13454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.532863][T13454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.564726][T12909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.569788][T12909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.579960][T12909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.582793][T12909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.606478][T16523] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.610187][T16523] usb 14-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 347.614705][T16523] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.619587][T16523] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 347.624991][T16523] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 347.631437][T16523] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.635208][T16523] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.639355][T16523] usb 14-1: Product: syz [ 347.641217][T16523] usb 14-1: Manufacturer: syz [ 347.645899][T16523] cdc_wdm 14-1:1.0: skipping garbage [ 347.648844][T16523] cdc_wdm 14-1:1.0: skipping garbage [ 347.653980][T16523] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 347.656523][T16523] cdc_wdm 14-1:1.0: Unknown control protocol [ 347.746231][T19797] XFS (nullb0): Invalid superblock magic number [ 347.917668][ T1047] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 348.015401][T19807] kvm: user requested TSC rate below hardware speed [ 348.019340][T19807] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2970447716 (5940895432 ns) > initial count (3350792522 ns). Using initial count to start timer. [ 348.092745][ T1047] usb 6-1: not running at top speed; connect to a high speed hub [ 348.096045][ T1047] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 348.101089][ T1047] usb 6-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 348.104542][ T1047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.107839][ T1047] usb 6-1: Product: syz [ 348.109599][ T1047] usb 6-1: Manufacturer: syz [ 348.111758][ T1047] usb 6-1: SerialNumber: syz [ 348.340583][ T1047] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.344418][ T1047] usb 6-1: MIDIStreaming interface descriptor not found [ 348.360079][ T1047] usb 6-1: USB disconnect, device number 39 [ 348.371819][T14548] udevd[14548]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.934637][T19825] bridge0: port 3(veth0_to_bridge) entered blocking state [ 348.937710][T19825] bridge0: port 3(veth0_to_bridge) entered disabled state [ 348.940441][T19825] veth0_to_bridge: entered allmulticast mode [ 348.943048][T19825] veth0_to_bridge: entered promiscuous mode [ 348.945134][T19825] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 348.949728][T19825] bridge0: port 3(veth0_to_bridge) entered blocking state [ 348.952227][T19825] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 349.105178][T19840] tmpfs: Bad value for 'mpol' [ 349.139829][T19846] ubi: mtd0 is already attached to ubi8 [ 349.140636][T19843] bond7: entered allmulticast mode [ 349.147025][T19843] __nla_validate_parse: 128 callbacks suppressed [ 349.147041][T19843] netlink: 11 bytes leftover after parsing attributes in process `syz.8.3851'. [ 349.154997][T19843] macvlan2: entered promiscuous mode [ 349.157082][T19843] macvlan2: entered allmulticast mode [ 349.159487][T19843] bond7: (slave macvlan2): Opening slave failed [ 349.164329][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:03:d9:a4:ef:52, vlan:0) [ 349.168435][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:03:d9:a4:ef:52, vlan:0) [ 349.172345][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:03:d9:a4:ef:52, vlan:0) [ 349.176321][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:03:d9:a4:ef:52, vlan:0) [ 349.180700][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:03:d9:a4:ef:52, vlan:0) [ 349.184777][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:03:d9:a4:ef:52, vlan:0) [ 349.188584][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:03:d9:a4:ef:52, vlan:0) [ 349.192322][ C2] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7e:03:d9:a4:ef:52, vlan:0) [ 349.695061][ T5749] Bluetooth: hci3: command tx timeout [ 350.163373][T19859] netlink: 'syz.1.3855': attribute type 1 has an invalid length. [ 350.166443][T19859] netlink: 'syz.1.3855': attribute type 1 has an invalid length. [ 350.174849][T19859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3855'. [ 350.178967][T19859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3855'. [ 350.190621][T19859] veth0_to_bridge: left allmulticast mode [ 350.199004][T19859] veth0_to_bridge: left promiscuous mode [ 350.203326][T19859] bridge0: port 3(veth0_to_bridge) entered disabled state [ 350.208996][T19859] bridge_slave_1: left allmulticast mode [ 350.212057][T19859] bridge_slave_1: left promiscuous mode [ 350.216523][T19859] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.220929][T19859] bridge_slave_0: left allmulticast mode [ 350.223645][T19859] bridge_slave_0: left promiscuous mode [ 350.226967][T19859] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.325100][T19865] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 350.328282][T19865] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 350.331276][T19865] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 350.334242][T19865] UDF-fs: Scanning with blocksize 512 failed [ 350.336745][T19865] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 350.339913][T19865] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 350.342845][T19865] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 350.345594][T19865] UDF-fs: Scanning with blocksize 1024 failed [ 350.347823][T19865] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 350.351642][T19865] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 350.355601][T19865] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 350.358690][T19865] UDF-fs: Scanning with blocksize 2048 failed [ 350.361586][T19865] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 350.365399][T19865] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 350.369597][T19865] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 350.372702][T19865] UDF-fs: Scanning with blocksize 4096 failed [ 350.374652][T19865] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 350.422330][ T6006] usb 14-1: USB disconnect, device number 8 [ 350.428108][T19870] x_tables: duplicate underflow at hook 2 [ 350.781256][T19889] netlink: 6 bytes leftover after parsing attributes in process `syz.8.3866'. [ 350.785012][T19889] net_ratelimit: 13668 callbacks suppressed [ 350.785027][T19889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.821547][T19893] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3868'. [ 351.189930][ T41] kauditd_printk_skb: 4 callbacks suppressed [ 351.189940][ T41] audit: type=1400 audit(2000000038.772:40520): avc: denied { getopt } for pid=19917 comm="syz.3.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 351.223929][T19926] Invalid logical block size (-2) [ 351.459248][ T41] audit: type=1400 audit(2000000039.012:40521): avc: denied { setattr } for pid=19925 comm="syz.3.3878" name="event0" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.728008][T19954] geneve1: entered allmulticast mode [ 351.733042][T19954] tmpfs: Bad value for 'mpol' [ 351.792357][T19961] loop4: detected capacity change from 0 to 2640 [ 351.793354][T19963] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 351.796860][T19961] buffer_io_error: 11 callbacks suppressed [ 351.796869][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.796899][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.796941][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.796968][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.796994][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.797027][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.797057][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.797083][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.797091][T19961] ldm_validate_partition_table(): Disk read failed. [ 351.797118][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.797159][T19961] Buffer I/O error on dev loop4, logical block 0, async page read [ 351.797242][T19961] Dev loop4: unable to read RDB block 0 [ 351.797347][T19961] loop4: unable to read partition table [ 351.832341][T19961] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 351.936066][ T5749] Bluetooth: hci3: command tx timeout [ 352.048796][T12909] Bluetooth: hci4: Frame reassembly failed (-84) [ 352.050986][T19970] Bluetooth: hci4: Frame reassembly failed (-84) [ 352.152551][ T1349] usb 14-1: new full-speed USB device number 9 using dummy_hcd [ 352.183046][ T41] audit: type=1400 audit(2000000039.677:40522): avc: denied { read } for pid=19975 comm="syz.3.3895" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 352.316645][ T1349] usb 14-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 352.321206][ T1349] usb 14-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 352.325014][ T1349] usb 14-1: config 0 interface 0 has no altsetting 0 [ 352.332486][ T1349] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.336409][ T1349] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.339158][ T1349] usb 14-1: Product: syz [ 352.340690][ T1349] usb 14-1: Manufacturer: syz [ 352.342614][ T1349] usb 14-1: SerialNumber: syz [ 352.345766][ T1349] usb 14-1: config 0 descriptor?? [ 352.348750][T19968] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 352.353075][ T1349] usb 14-1: selecting invalid altsetting 0 [ 352.571358][ T1349] usb 14-1: USB disconnect, device number 9 [ 352.770772][ T41] audit: type=1400 audit(2000000040.231:40523): avc: denied { write } for pid=19993 comm="syz.8.3900" name="/" dev="9p" ino=79184669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.774295][T19994] netem: incorrect ge model size [ 352.783223][T19994] netem: change failed [ 353.453166][T19987] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 353.852521][T20013] kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 353.856795][T20013] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 353.860406][T20013] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 353.865031][T20013] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 353.869015][T20013] kvm: requested 141638 ns i8254 timer period limited to 200000 ns [ 353.872425][T20013] kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 353.877122][T20013] kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 353.880750][T20013] kvm: requested 160076 ns i8254 timer period limited to 200000 ns [ 353.884600][T20013] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 353.889747][T20013] kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 354.100448][T20046] xt_connbytes: Forcing CT accounting to be enabled [ 354.103660][T20046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.188929][ T5742] Bluetooth: hci3: command tx timeout [ 354.211139][T20002] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 354.275756][ T5749] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 354.278422][ T5742] Bluetooth: hci4: command 0xfc11 tx timeout [ 354.313559][ T41] audit: type=1400 audit(2000000041.653:40524): avc: denied { cmd } for pid=20082 comm="syz.9.3916" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 354.547136][T20131] overlayfs: failed lookup in lower (newroot/315, name='bus', err=-40): overlapping layers [ 354.583318][T20134] tmpfs: Bad value for 'mpol' [ 354.619992][T20137] F2FS-fs: Conflicting test_dummy_encryption options [ 354.708735][ T5749] Bluetooth: hci0: command 0x0c20 tx timeout [ 355.218964][T20163] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3932'. [ 355.391847][ T50] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 355.531869][ T50] usb 13-1: device descriptor read/64, error -71 [ 355.791772][ T50] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 355.932702][ T50] usb 13-1: device descriptor read/64, error -71 [ 356.052840][ T50] usb usb13-port1: attempt power cycle [ 356.185707][T20172] bond2 (unregistering): Released all slaves [ 356.310419][T20182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.317651][T20182] loop6: detected capacity change from 0 to 8 [ 356.373024][ T25] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.373218][T20183] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3938'. [ 356.376013][T20182] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.382410][T20182] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.385236][T20182] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.388176][T20182] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.391278][T20182] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.394853][T20182] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.398097][T20182] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.401723][T20182] ldm_validate_partition_table(): Disk read failed. [ 356.403817][T20182] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.407198][T20182] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.412324][T20182] Dev loop6: unable to read RDB block 0 [ 356.414628][T20182] loop6: unable to read partition table [ 356.416825][T20182] loop6: partition table beyond EOD, truncated [ 356.419273][T20182] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 356.431264][ T50] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 356.453041][ T50] usb 13-1: device descriptor read/8, error -71 [ 356.569901][T20188] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 356.582146][ T41] audit: type=1400 audit(2000000043.739:40525): avc: denied { remount } for pid=20130 comm="syz.1.3922" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 356.706534][T20197] No control pipe specified [ 356.745243][ T50] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 356.767334][ T50] usb 13-1: device descriptor read/8, error -71 [ 356.876835][T20201] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 356.886226][ T50] usb usb13-port1: unable to enumerate USB device [ 356.937333][T20206] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 357.576165][T20211] binder: 20210:20211 ioctl 40049421 2 returned -22 [ 357.659549][T20211] binder: 20210:20211 ioctl c0306201 200000000640 returned -14 [ 357.871292][T20222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3950'. [ 358.034095][ T6006] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 358.207528][ T6006] usb 14-1: Using ep0 maxpacket: 32 [ 358.209792][T20244] nbd: must specify a device to reconfigure [ 358.210629][ T6006] usb 14-1: config 0 has an invalid interface number: 119 but max is 0 [ 358.214783][ T6006] usb 14-1: config 0 has no interface number 0 [ 358.216976][ T6006] usb 14-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 358.220534][ T6006] usb 14-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 358.224215][ T6006] usb 14-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 358.227386][ T6006] usb 14-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.232924][T20246] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input38 [ 358.235852][ T6006] usb 14-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 358.239212][ T6006] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.242978][ T6006] usb 14-1: Product: syz [ 358.244654][ T6006] usb 14-1: Manufacturer: syz [ 358.246445][ T6006] usb 14-1: SerialNumber: syz [ 358.249586][ T6006] usb 14-1: config 0 descriptor?? [ 358.253437][ T6006] input: bcm5974 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.119/input/input39 [ 358.297011][T20250] xfrm0 speed is unknown, defaulting to 1000 [ 358.472242][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3965'. [ 358.472866][T16523] usb 14-1: USB disconnect, device number 10 [ 358.567364][T20279] netlink: 'syz.8.3970': attribute type 10 has an invalid length. [ 358.570207][T20279] netlink: 228 bytes leftover after parsing attributes in process `syz.8.3970'. [ 358.575236][ T5813] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 358.618520][T20282] xt_hashlimit: overflow, rate too high: 0 [ 358.666662][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3972'. [ 358.679993][T20287] tmpfs: Bad value for 'mpol' [ 359.066956][T20292] fuse: Bad value for 'user_id' [ 359.069274][T20292] fuse: Bad value for 'user_id' [ 359.544779][T20284] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 359.587344][T20300] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 359.592057][T20302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.600148][T20303] sit0: entered allmulticast mode [ 359.766465][T20316] fuseblk: Unknown parameter 'subj_type' [ 359.824791][T20327] SELinux: policydb string SE Linë^ does not match my string SE Linux [ 359.828769][T20327] SELinux: failed to load policy [ 360.064726][T20342] bridge1: entered promiscuous mode [ 360.066987][T20342] bridge1: entered allmulticast mode [ 360.110562][T20352] devpts: Bad value for 'max' [ 360.134476][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3996'. [ 360.137788][T20358] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3996'. [ 360.141764][T20362] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 360.150758][T20362] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 360.171351][T20365] can0: slcan on ttynull. [ 360.177158][T20365] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 360.179873][T20365] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 360.180985][T20367] 9p: Invalid uid '0x00000000ffffffff' [ 360.228917][ T41] audit: type=1400 audit(2000000047.109:40526): avc: denied { write } for pid=20369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.255326][T20364] can0 (unregistered): slcan off ttynull. [ 360.257784][ T41] audit: type=1400 audit(2000000047.137:40527): avc: denied { write } for pid=20374 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.311282][ T41] audit: type=1400 audit(2000000047.192:40528): avc: denied { write } for pid=20377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.342475][ T41] audit: type=1400 audit(2000000047.220:40529): avc: denied { write } for pid=20380 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.356700][ T41] audit: type=1400 audit(2000000047.229:40530): avc: denied { mounton } for pid=20381 comm="syz.9.4000" path="/file0" dev="bpf" ino=99076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 360.365275][ T41] audit: type=1400 audit(2000000047.229:40531): avc: denied { remount } for pid=20381 comm="syz.9.4000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 360.553087][T20390] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 360.556850][T20390] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 360.677479][ T9] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 360.839486][ T9] usb 14-1: Using ep0 maxpacket: 8 [ 360.842736][ T9] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 360.846034][ T9] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.850415][ T9] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.854333][ T9] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.857799][ T9] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.863363][ T9] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.868506][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.093307][ T9] usb 14-1: GET_CAPABILITIES returned 0 [ 361.095151][ T9] usbtmc 14-1:16.0: can't read capabilities [ 361.134673][T20424] netlink: 232 bytes leftover after parsing attributes in process `syz.8.4014'. [ 361.162382][ T41] audit: type=1400 audit(2000000047.967:40532): avc: denied { setattr } for pid=20431 comm="syz.8.4016" name="NETLINK" dev="sockfs" ino=99127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 361.216240][T20439] selinux_netlink_send: 57 callbacks suppressed [ 361.216253][T20439] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2064 sclass=netlink_xfrm_socket pid=20439 comm=syz.3.4017 [ 361.261003][T20445] ip6t_srh: unknown srh invflags 51E8 [ 361.295998][T20449] loop6: detected capacity change from 0 to 8 [ 361.361739][T20449] loop6: detected capacity change from 8 to 7 [ 361.446704][T20450] loop6: detected capacity change from 7 to 0 [ 361.572418][T20473] program syz.3.4027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.602254][ T50] libceph: connect (1)[c::]:6789 error -101 [ 361.604925][ T50] libceph: mon0 (1)[c::]:6789 connect error [ 361.654363][T20477] ceph: No mds server is up or the cluster is laggy [ 361.780211][T20496] CIFS mount error: No usable UNC path provided in device string! [ 361.780211][T20496] [ 361.784317][T20496] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 361.840203][T20506] tmpfs: Unknown parameter 'mrleave' [ 361.840264][T20504] tmpfs: Unknown parameter 'mrleave' [ 361.871186][T20510] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode [ 361.875261][T20510] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 361.915514][T20519] xt_HMARK: spi-set and port-set can't be combined [ 361.968895][ T41] audit: type=1400 audit(2000000048.715:40533): avc: denied { read } for pid=20518 comm="syz.1.4039" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 361.978879][ T41] audit: type=1400 audit(2000000048.734:40534): avc: denied { open } for pid=20518 comm="syz.1.4039" path="/58/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 361.989127][T20531] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 361.999326][T20531] block device autoloading is deprecated and will be removed. [ 362.003088][ T41] audit: type=1400 audit(2000000048.752:40535): avc: denied { ioctl } for pid=20528 comm="syz.3.4043" path="socket:[99319]" dev="sockfs" ino=99319 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 362.005313][T20520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4039'. [ 362.009764][T20533] netlink: 'syz.8.4044': attribute type 1 has an invalid length. [ 362.043492][T20536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4046'. [ 362.124899][T20543] xt_cluster: node mask cannot exceed total number of nodes [ 362.134766][T20543] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.186890][T20558] CIFS mount error: No usable UNC path provided in device string! [ 362.186890][T20558] [ 362.186911][T20559] CIFS mount error: No usable UNC path provided in device string! [ 362.186911][T20559] [ 362.190596][T20558] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 362.195212][T20559] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 362.221295][T20559] macvtap0: entered allmulticast mode [ 362.223389][T20559] veth0_macvtap: entered allmulticast mode [ 362.233880][T20558] geneve1: entered allmulticast mode [ 362.264340][T20543] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.293475][T20564] syzkaller1: entered allmulticast mode [ 362.373706][T20543] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.438456][T20543] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.538663][ T5820] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.545662][ T5820] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.551953][ T5820] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.559302][ T5820] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.796407][T20577] openvswitch: netlink: Key type 51 is out of range max 32 [ 363.314476][T20597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4063'. [ 363.475829][T20605] program syz.1.4066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.479883][T20605] tc action pedit 'at' offset 46 out of bounds [ 363.655221][ T6006] usb 14-1: USB disconnect, device number 11 [ 363.761975][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.766731][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.769849][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.773253][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.776936][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.781591][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.785750][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.789774][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.793539][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.939162][T20630] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4077'. [ 365.632154][T20658] fuse: Bad value for 'user_id' [ 365.633652][T20658] fuse: Bad value for 'user_id' [ 365.660918][ T41] kauditd_printk_skb: 82 callbacks suppressed [ 365.660935][ T41] audit: type=1400 audit(2000000052.131:40618): avc: denied { ioctl } for pid=20662 comm="syz.3.4084" path="socket:[103429]" dev="sockfs" ino=103429 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.690066][T20665] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4085'. [ 365.692062][ T41] audit: type=1400 audit(2000000052.150:40619): avc: denied { setopt } for pid=20664 comm="syz.3.4085" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.887139][ T5742] Bluetooth: hci4: command 0x1003 tx timeout [ 365.889668][ T5749] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 365.965920][T20674] macsec1: entered promiscuous mode [ 365.968044][T20674] macsec1: entered allmulticast mode [ 366.111138][T16523] Process accounting resumed [ 367.589153][ T41] audit: type=1400 audit(2000000053.913:40620): avc: denied { mount } for pid=20678 comm="syz.8.4089" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 367.597419][ T41] audit: type=1400 audit(2000000053.913:40621): avc: denied { unmount } for pid=20678 comm="syz.8.4089" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 367.606096][ T41] audit: type=1400 audit(2000000053.913:40622): avc: denied { create } for pid=20678 comm="syz.8.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 367.613542][ T41] audit: type=1400 audit(2000000053.913:40623): avc: denied { ioctl } for pid=20678 comm="syz.8.4089" path="socket:[102369]" dev="sockfs" ino=102369 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 367.747342][T20683] xfrm0 speed is unknown, defaulting to 1000 [ 368.142785][T20649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.170368][ T41] audit: type=1400 audit(2000000054.439:40624): avc: denied { create } for pid=20686 comm="syz.9.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.179357][ T41] audit: type=1400 audit(2000000054.439:40625): avc: denied { bind } for pid=20686 comm="syz.9.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.186763][ T41] audit: type=1400 audit(2000000054.439:40626): avc: denied { listen } for pid=20686 comm="syz.9.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.192059][ T41] audit: type=1400 audit(2000000054.439:40627): avc: denied { connect } for pid=20686 comm="syz.9.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.210152][T20694] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4092'. [ 368.235230][T20694] xt_hashlimit: size too large, truncated to 1048576 [ 370.003912][T20713] block nbd9: shutting down sockets [ 370.004876][T20719] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 370.044872][T20740] overlayfs: failed to resolve './file2': -2 [ 370.078013][T20744] xfrm0 speed is unknown, defaulting to 1000 [ 370.156574][T20760] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4106'. [ 371.142538][ T41] kauditd_printk_skb: 35 callbacks suppressed [ 371.142555][ T41] audit: type=1400 audit(2000000057.190:40663): avc: denied { ioctl } for pid=20780 comm="syz.8.4112" path="socket:[104483]" dev="sockfs" ino=104483 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 371.154262][ T41] audit: type=1400 audit(2000000057.190:40664): avc: denied { sys_module } for pid=20777 comm="syz.3.4111" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 371.161731][ T41] audit: type=1400 audit(2000000057.190:40665): avc: denied { ioctl } for pid=20780 comm="syz.8.4112" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=105586 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 371.170498][ T41] audit: type=1400 audit(2000000057.209:40666): avc: denied { map } for pid=20777 comm="syz.3.4111" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 371.177595][T20786] autofs4:pid:20786:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 371.178656][ T41] audit: type=1400 audit(2000000057.218:40667): avc: denied { write } for pid=20785 comm="syz.8.4113" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 371.183331][T20786] autofs4:pid:20786:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 371.204875][T20788] tmpfs: Unknown parameter 'nr_innôý¬»ðl¯~odes' [ 371.281332][T20792] xt_hashlimit: size too large, truncated to 1048576 [ 371.327215][ T41] audit: type=1400 audit(2000000057.356:40668): avc: denied { create } for pid=20789 comm="syz.8.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.333437][ T41] audit: type=1400 audit(2000000057.356:40669): avc: denied { bind } for pid=20789 comm="syz.8.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.339741][ T41] audit: type=1400 audit(2000000057.356:40670): avc: denied { name_bind } for pid=20789 comm="syz.8.4115" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 371.348013][ T41] audit: type=1400 audit(2000000057.356:40671): avc: denied { node_bind } for pid=20789 comm="syz.8.4115" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 371.354625][ T41] audit: type=1400 audit(2000000057.356:40672): avc: denied { write } for pid=20789 comm="syz.8.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 373.355692][T20750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.395244][T20802] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.4119'. [ 373.559391][T20825] input: syz0 as /devices/virtual/input/input41 [ 373.582523][T20827] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 373.587822][T20827] bond3 (unregistering): Released all slaves [ 373.595746][T20830] overlayfs: upper fs does not support file handles, falling back to index=off. [ 373.618489][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4125'. [ 373.622936][T20831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4125'. [ 373.641518][T20833] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4121'. [ 373.777826][T20847] JFS: discard option not supported on device [ 373.780505][T20847] Mount JFS Failure: -5 [ 373.812055][T20850] xt_socket: unknown flags 0xc [ 373.990694][T20857] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4133'. [ 373.996939][T20857] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 374.266887][T20882] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 374.402533][T20892] netlink: 2 bytes leftover after parsing attributes in process `syz.9.4145'. [ 374.524814][T20909] ip6gretap1: entered promiscuous mode [ 374.526655][T20909] ip6gretap1: entered allmulticast mode [ 374.825655][T20919] binder: 20916:20919 unknown command 0 [ 374.828352][T20919] binder: 20916:20919 ioctl c0306201 200000000180 returned -22 [ 374.856482][T20922] syz_tun: entered promiscuous mode [ 375.144905][T20929] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4156'. [ 375.441340][T20949] netlink: 'syz.1.4161': attribute type 39 has an invalid length. [ 375.564273][T20952] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 375.625968][T20954] dvmrp8: entered allmulticast mode [ 375.673419][T20960] random: crng reseeded on system resumption [ 375.718384][T20962] tmpfs: Unknown parameter 'grpquotae' [ 375.722673][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4166'. [ 375.726372][T20962] netem: unknown loss type 13 [ 375.728471][T20962] netem: change failed [ 376.006008][T20989] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4175'. [ 376.368180][T21001] netlink: 778 bytes leftover after parsing attributes in process `syz.8.4179'. [ 376.508990][T21010] syzkaller1: entered promiscuous mode [ 376.511500][T21010] syzkaller1: entered allmulticast mode [ 376.516799][T21010] net_ratelimit: 56 callbacks suppressed [ 376.516816][T21010] openvswitch: netlink: Actions may not be safe on all matching packets [ 376.707440][T21012] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4182'. [ 376.738965][T21019] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 376.819327][T21023] bond5: (slave lo): Releasing backup interface [ 376.823785][T21023] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 376.835143][ T41] kauditd_printk_skb: 58 callbacks suppressed [ 376.835160][ T41] audit: type=1400 audit(2000000062.443:40731): avc: denied { name_bind } for pid=21025 comm="syz.1.4186" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 376.836542][T21023] bridge_slave_0: left allmulticast mode [ 376.858265][T21023] bridge_slave_0: left promiscuous mode [ 376.861501][T21023] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.867499][T21023] bridge_slave_1: left allmulticast mode [ 376.870016][T21023] bridge_slave_1: left promiscuous mode [ 376.872508][T21023] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.879844][T21023] bond0: (slave bond_slave_1): Releasing backup interface [ 376.891824][T21023] team0: Port device team_slave_0 removed [ 376.900004][T21023] team0: Port device team_slave_1 removed [ 376.904247][T21023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.907168][T21023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.911267][T21023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.915155][T21023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.920319][T21023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.934025][T21027] team0: Port device xfrm0 added [ 376.939231][T21023] tipc: Enabled bearer , priority 0 [ 376.974664][ T41] audit: type=1400 audit(2000000062.572:40732): avc: denied { create } for pid=21032 comm="syz.8.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.977597][T21033] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 376.981042][ T41] audit: type=1400 audit(2000000062.572:40733): avc: denied { setopt } for pid=21032 comm="syz.8.4188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.998650][T21033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48425 sclass=netlink_route_socket pid=21033 comm=syz.8.4188 [ 377.039132][T21035] support for cryptoloop has been removed. Use dm-crypt instead. [ 377.118103][T21047] tipc: Failed to obtain node identity [ 377.122372][T21047] tipc: Enabling of bearer rejected, failed to enable media [ 377.126798][T21046] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 377.128535][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4193'. [ 377.135254][ T41] audit: type=1400 audit(2000000062.720:40734): avc: denied { write } for pid=21044 comm="syz.3.4192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 377.136555][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4193'. [ 377.141604][T16523] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 377.148235][T21047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=21047 comm=syz.9.4193 [ 377.177006][ T41] audit: type=1400 audit(2000000062.757:40735): avc: denied { create } for pid=21051 comm="syz.9.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 377.201604][ T41] audit: type=1400 audit(2000000062.776:40736): avc: denied { map } for pid=21037 comm="syz.8.4190" path="socket:[105695]" dev="sockfs" ino=105695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 377.214525][T21057] ref_ctr_offset mismatch. inode: 0x383 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 377.232305][ T41] audit: type=1400 audit(2000000062.813:40737): avc: denied { ioctl } for pid=21058 comm="syz.3.4197" path="socket:[104080]" dev="sockfs" ino=104080 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.242232][ T41] audit: type=1400 audit(2000000062.822:40738): avc: denied { append } for pid=21056 comm="syz.9.4196" name="demux0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 377.249548][ T41] audit: type=1400 audit(2000000062.822:40739): avc: denied { bind } for pid=21058 comm="syz.3.4197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 377.284645][ T41] audit: type=1400 audit(2000000062.859:40740): avc: denied { create } for pid=21063 comm="syz.9.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 377.305366][T16523] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 377.309822][T16523] usb 6-1: config 0 interface 0 has no altsetting 0 [ 377.316401][T16523] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 377.320398][T16523] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 377.324026][T16523] usb 6-1: Product: syz [ 377.326128][T16523] usb 6-1: Manufacturer: syz [ 377.328422][T16523] usb 6-1: SerialNumber: syz [ 377.332663][T16523] usb 6-1: config 0 descriptor?? [ 377.337610][T16523] usb 6-1: selecting invalid altsetting 0 [ 377.556110][ T6006] usb 6-1: USB disconnect, device number 40 [ 377.715418][T21077] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 377.721446][T21077] overlayfs: overlapping lowerdir path [ 378.085929][T21097] binder: BINDER_SET_CONTEXT_MGR already set [ 378.088060][T21097] binder: 21095:21097 ioctl 4018620d 200000000100 returned -16 [ 378.092734][T21097] binder: BINDER_SET_CONTEXT_MGR already set [ 378.095819][T21097] binder: 21095:21097 ioctl 4018620d 200000001000 returned -16 [ 378.148253][T21105] netlink: 'syz.9.4213': attribute type 4 has an invalid length. [ 378.155634][T21106] binder: 21095:21106 ioctl 4090ae82 200000000000 returned -22 [ 378.473976][ T6006] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 378.636201][ T6006] usb 6-1: Using ep0 maxpacket: 32 [ 378.639188][ T6006] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.642351][ T6006] usb 6-1: config 0 has no interfaces? [ 378.645698][ T6006] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 378.649002][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.652315][ T6006] usb 6-1: Product: syz [ 378.653882][ T6006] usb 6-1: Manufacturer: syz [ 378.655531][ T6006] usb 6-1: SerialNumber: syz [ 378.658186][ T6006] usb 6-1: config 0 descriptor?? [ 378.974662][ T6006] usb 6-1: USB disconnect, device number 41 [ 379.172393][T21124] __nla_validate_parse: 4 callbacks suppressed [ 379.172412][T21124] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4219'. [ 379.232502][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.315146][T21138] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4224'. [ 379.370883][T21147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21147 comm=syz.8.4225 [ 379.371756][T21148] netlink: 'syz.8.4225': attribute type 1 has an invalid length. [ 379.376184][T21147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21147 comm=syz.8.4225 [ 379.376251][T21147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21147 comm=syz.8.4225 [ 379.389431][T21147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21147 comm=syz.8.4225 [ 379.395051][T21147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21147 comm=syz.8.4225 [ 379.400876][T21147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21147 comm=syz.8.4225 [ 379.400955][T21149] bond74: (slave bridge2): making interface the new active one [ 379.409863][T21149] bond74: (slave bridge2): Enslaving as an active interface with an up link [ 379.415383][T21147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21147 comm=syz.8.4225 [ 379.422545][T21147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21147 comm=syz.8.4225 [ 379.426713][T21149] bond74: (slave bridge3): Enslaving as an active interface with a down link [ 379.437286][T21149] bond74: (slave bridge4): Enslaving as an active interface with a down link [ 379.447132][T21149] bond74: (slave bridge5): Enslaving as an active interface with a down link [ 379.456722][T21149] bond74: (slave bridge6): Enslaving as an active interface with a down link [ 379.466958][T21149] bond74: (slave bridge7): Enslaving as an active interface with a down link [ 379.477172][T21149] bond74: (slave bridge8): Enslaving as an active interface with a down link [ 379.486997][T21149] bond74: (slave bridge9): Enslaving as an active interface with a down link [ 379.499123][T21149] bond74: (slave bridge10): Enslaving as an active interface with a down link [ 379.509275][T21149] bond74: (slave bridge11): Enslaving as an active interface with a down link [ 379.520126][T21149] bond74: (slave bridge12): Enslaving as an active interface with a down link [ 379.531940][T21149] bond74: (slave bridge13): Enslaving as an active interface with a down link [ 379.542769][T21149] bond74: (slave bridge14): Enslaving as an active interface with a down link [ 379.554025][T21149] bond74: (slave bridge15): Enslaving as an active interface with a down link [ 379.562289][T21149] bond74: (slave bridge16): Enslaving as an active interface with a down link [ 379.569914][T21149] bond74: (slave bridge17): Enslaving as an active interface with a down link [ 379.579291][T21149] bond74: (slave bridge18): Enslaving as an active interface with a down link [ 379.587680][T21149] bond74: (slave bridge19): Enslaving as an active interface with a down link [ 379.603072][T21149] bond74: (slave bridge20): Enslaving as an active interface with a down link [ 379.612032][T21149] bond74: (slave bridge21): Enslaving as an active interface with a down link [ 379.620647][T21149] bond74: (slave bridge22): Enslaving as an active interface with a down link [ 379.628075][T21172] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4230'. [ 379.631095][T21149] bond74: (slave bridge23): Enslaving as an active interface with a down link [ 379.640173][T21149] bond74: (slave bridge24): Enslaving as an active interface with a down link [ 379.646882][T21149] bond74: (slave bridge25): Enslaving as an active interface with a down link [ 379.651576][T21149] bond74: (slave bridge26): Enslaving as an active interface with a down link [ 379.657165][T21149] bond74: (slave bridge27): Enslaving as an active interface with a down link [ 379.662488][T21149] bond74: (slave bridge28): Enslaving as an active interface with a down link [ 379.668276][T21149] bond74: (slave bridge29): Enslaving as an active interface with a down link [ 379.673596][T21149] bond74: (slave bridge30): Enslaving as an active interface with a down link [ 379.679142][T21149] bond74: (slave bridge31): Enslaving as an active interface with a down link [ 379.684248][T21149] bond74: (slave bridge32): Enslaving as an active interface with a down link [ 379.689482][T21149] bond74: (slave bridge33): Enslaving as an active interface with a down link [ 379.700345][T21149] bond74: (slave bridge34): Enslaving as an active interface with a down link [ 379.843931][T21181] syzkaller0: entered promiscuous mode [ 379.843952][T21181] syzkaller0: entered allmulticast mode [ 380.045930][T21189] fuse: Unknown parameter 'É[çá óDà0x0000000000000003' [ 380.192181][T21193] xt_hashlimit: size too large, truncated to 1048576 [ 380.564382][T21201] netlink: 'syz.1.4240': attribute type 5 has an invalid length. [ 380.834721][T21234] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 381.020172][T21251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4253'. [ 381.297623][T21256] macsec2: entered promiscuous mode [ 381.439265][T21283] tun0: tun_chr_ioctl cmd 1074025675 [ 381.441019][T21283] tun0: persist enabled [ 381.442838][T21283] tun0: tun_chr_ioctl cmd 1074025675 [ 381.444522][T21283] tun0: persist disabled [ 381.751072][T21322] overlay: filesystem on ./file0 not supported as upperdir [ 382.026262][T21357] bond1: Unable to set up delay as MII monitoring is disabled [ 382.029776][T21357] bond1 (unregistering): Released all slaves [ 382.090587][T21366] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4287'. [ 382.116267][T21368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4288'. [ 382.199882][ T40] usb 13-1: new low-speed USB device number 14 using dummy_hcd [ 382.265824][ T41] kauditd_printk_skb: 431 callbacks suppressed [ 382.265836][ T41] audit: type=1400 audit(375.492:41172): avc: denied { write } for pid=21377 comm="syz.1.4291" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 382.274592][T21378] fuse: Bad value for 'fd' [ 382.275258][ T41] audit: type=1400 audit(375.492:41173): avc: denied { read write } for pid=21377 comm="syz.1.4291" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 382.283963][ T41] audit: type=1400 audit(375.492:41174): avc: denied { open } for pid=21377 comm="syz.1.4291" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 382.292090][ T41] audit: type=1400 audit(375.492:41175): avc: denied { mounton } for pid=21377 comm="syz.1.4291" path="/113/file0" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 382.365036][ T40] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 382.368390][ T40] usb 13-1: config 0 has no interface number 0 [ 382.371018][ T40] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 382.375965][ T40] usb 13-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 382.379134][ T40] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.382177][ T40] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.387576][ T40] usb 13-1: config 0 descriptor?? [ 382.394522][ T40] iowarrior 13-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 382.395881][T21380] gfs2: error -5 reading superblock [ 382.617096][ T41] audit: type=1400 audit(375.806:41176): avc: denied { create } for pid=21347 comm="syz.8.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 382.620338][T21348] iowarrior 13-1:0.1: Error -90 while submitting URB [ 382.624386][ T41] audit: type=1400 audit(375.806:41177): avc: denied { write } for pid=21347 comm="syz.8.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 382.633005][ T41] audit: type=1400 audit(375.806:41178): avc: denied { write } for pid=21347 comm="syz.8.4282" name="iowarrior0" dev="devtmpfs" ino=4161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 382.699298][ T40] usb 13-1: USB disconnect, device number 14 [ 382.874800][ T41] audit: type=1400 audit(376.046:41179): avc: denied { read write } for pid=21381 comm="syz.9.4292" name="video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 382.882971][ T41] audit: type=1400 audit(376.046:41180): avc: denied { open } for pid=21381 comm="syz.9.4292" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 382.886423][T21382] vim2m vim2m.0: vidioc_s_fmt queue busy [ 382.890058][ T41] audit: type=1400 audit(376.055:41181): avc: denied { ioctl } for pid=21381 comm="syz.9.4292" path="/dev/video3" dev="devtmpfs" ino=960 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 382.894566][T21382] CUSE: unknown device info "" [ 382.901872][T21382] CUSE: zero length info key specified [ 383.078849][T21386] netlink: 'syz.9.4293': attribute type 1 has an invalid length. [ 383.086813][T21386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.096026][T21386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.098340][T21386] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 383.102011][T21386] bond2: (slave gre1): Error -95 calling set_mac_address [ 383.210262][T21396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.213358][T21396] IPv6: NLM_F_CREATE should be set when creating new route [ 383.216323][T21396] IPv6: NLM_F_CREATE should be set when creating new route [ 383.219222][T21396] IPv6: NLM_F_CREATE should be set when creating new route [ 383.395974][T21418] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4304'. [ 383.705777][ T50] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 383.889879][ T50] usb 13-1: Using ep0 maxpacket: 8 [ 383.893528][ T50] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 383.897245][ T50] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.901146][ T50] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.905132][ T50] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 383.909211][ T50] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.914498][ T50] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 383.918103][ T50] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.144207][ T50] usb 13-1: usb_control_msg returned -32 [ 384.146413][ T50] usbtmc 13-1:16.0: can't read capabilities [ 384.299284][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4307'. [ 384.305808][ T5568] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.305855][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4307'. [ 384.310315][ T5568] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.316785][ T5568] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.320893][ T5568] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.352316][T21437] netlink: 'syz.9.4310': attribute type 1 has an invalid length. [ 384.368622][T21437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 384.439487][T21452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.526164][T21456] usbtmc 13-1:16.0: INITIATE_CLEAR returned 0 [ 384.530804][T21457] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 384.544305][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4316'. [ 384.822416][T21472] random: crng reseeded on system resumption [ 384.841026][T13454] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.846155][T13454] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.903527][T13454] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.908347][T13454] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.943449][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.947094][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.950407][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.953933][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.957092][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.001904][T21483] Bluetooth: MGMT ver 1.23 [ 385.004677][T21481] netlink: 'syz.1.4325': attribute type 4 has an invalid length. [ 385.008332][T21481] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4325'. [ 385.023217][T13454] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.026804][T13454] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.088091][T13454] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.092665][T13454] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.107013][T21475] xfrm0 speed is unknown, defaulting to 1000 [ 385.203109][T13454] bridge_slave_1: left allmulticast mode [ 385.205181][T13454] bridge_slave_1: left promiscuous mode [ 385.207028][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.210292][T13454] bridge_slave_0: left allmulticast mode [ 385.212264][T13454] bridge_slave_0: left promiscuous mode [ 385.214102][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.377748][T13454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.383587][T13454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.389095][T13454] bond0 (unregistering): Released all slaves [ 385.394135][T13454] bond1 (unregistering): Released all slaves [ 385.401116][T13454] bond2 (unregistering): Released all slaves [ 385.407565][T13454] bond3 (unregistering): Released all slaves [ 385.494063][T21475] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.496337][T21475] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.498613][T21475] bridge_slave_0: entered allmulticast mode [ 385.501069][T21475] bridge_slave_0: entered promiscuous mode [ 385.505237][T21475] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.508403][T21475] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.511648][T21475] bridge_slave_1: entered allmulticast mode [ 385.515498][T21475] bridge_slave_1: entered promiscuous mode [ 385.518359][T13454] IPVS: stopping backup sync thread 18068 ... [ 385.534871][T21475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.540604][T21475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.549961][ T5444] 8021q: adding VLAN 0 to HW filter on device eth18 [ 385.563296][T21475] team0: Port device team_slave_0 added [ 385.569520][T21475] team0: Port device team_slave_1 added [ 385.585585][T21475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.588640][T21475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.599780][T21475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.605513][T21475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.608459][T21475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.619825][T21475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.656151][T21475] hsr_slave_0: entered promiscuous mode [ 385.658429][T21475] hsr_slave_1: entered promiscuous mode [ 385.660671][T21475] debugfs: 'hsr0' already exists in 'hsr' [ 385.662537][T21475] Cannot create hsr debugfs directory [ 385.683281][ T5444] 8021q: adding VLAN 0 to HW filter on device eth19 [ 385.713530][T21475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.716876][T21475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.739505][T13454] hsr_slave_0: left promiscuous mode [ 385.741661][T13454] hsr_slave_1: left promiscuous mode [ 385.745489][T13454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.747971][T13454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.750553][T13454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.753424][T13454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.758159][T13454] veth1_macvtap: left promiscuous mode [ 385.760402][T13454] veth0_macvtap: left promiscuous mode [ 385.819251][T13454] team0 (unregistering): Port device team_slave_1 removed [ 385.823976][T13454] team0 (unregistering): Port device team_slave_0 removed [ 385.833567][ T6530] smc: removing ib device uyz0 [ 385.864425][ T9] uyz0: Port: 1 Link DOWN [ 385.865254][ T5444] 8021q: adding VLAN 0 to HW filter on device eth20 [ 385.870906][ T6530] smbdirect: ib_dev[uyz0] removed [ 385.876113][T21475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.881208][T21475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.986451][T21475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.989830][T21475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.033759][ T5444] 8021q: adding VLAN 0 to HW filter on device eth21 [ 386.110476][ T6006] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 386.120813][T21475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.126105][T21475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.269284][T21475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 386.273081][T21475] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.275775][T21475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 386.279760][T21475] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.282454][T21475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 386.284933][ T6006] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 386.288211][ T6006] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 386.289355][T21475] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.291221][ T6006] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 386.294108][T21475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 386.299220][ T6006] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 386.303130][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 386.304493][T21475] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 386.306087][ T6006] usb 6-1: Product: syz [ 386.309789][ T6006] usb 6-1: Manufacturer: syz [ 386.311253][ T6006] usb 6-1: SerialNumber: syz [ 386.340095][T21475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.350881][T21475] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.355461][ T6532] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.357729][ T6532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.364761][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.367046][ T6532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.469358][T21554] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4331'. [ 386.532878][T21562] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4332'. [ 386.535057][T21529] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4330'. [ 386.540628][T21475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.547064][T21562] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4332'. [ 386.547461][ T6006] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 386.554332][T21562] syzkaller1: entered promiscuous mode [ 386.556826][T21562] syzkaller1: entered allmulticast mode [ 386.577636][T21475] veth0_vlan: entered promiscuous mode [ 386.583614][T21475] veth1_vlan: entered promiscuous mode [ 386.600237][T21475] veth0_macvtap: entered promiscuous mode [ 386.605069][T21475] veth1_macvtap: entered promiscuous mode [ 386.616166][T21475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.623766][T21475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.630712][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.634439][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.638624][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.642993][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.656712][ T6006] usb 13-1: USB disconnect, device number 15 [ 386.680607][ T6530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.683127][ T6530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.712911][ T6530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.716453][ T6530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.767263][ T40] usb 6-1: USB disconnect, device number 42 [ 386.772674][ T40] usblp1: removed [ 386.794712][T21583] netlink: 'syz.2.4338': attribute type 8 has an invalid length. [ 386.825757][T21585] xfrm0 speed is unknown, defaulting to 1000 [ 386.889525][T21593] tipc: Resetting bearer [ 387.006671][T21604] tmpfs: Unknown parameter 'óžÝ%ï©0À÷' [ 387.027561][T21607] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4346'. [ 387.082343][T21610] can: request_module (can-proto-4) failed. [ 387.138723][T21615] tipc: Started in network mode [ 387.141883][T21615] tipc: Node identity , cluster identity 4711 [ 387.144000][T21615] tipc: Failed to obtain node identity [ 387.145867][T21615] tipc: Enabling of bearer rejected, failed to enable media [ 387.206997][T21625] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4351'. [ 387.211114][T21625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.215474][ T5742] Bluetooth: hci0: command tx timeout [ 387.227786][T21625] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4351'. [ 387.231825][T21625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.421126][T21634] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 387.424090][T21634] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 387.427591][T21634] vhci_hcd vhci_hcd.0: Device attached [ 387.430724][T21634] vhci_hcd vhci_hcd.0: port 0 already used [ 387.437065][T21634] usb usb9: check_ctrlrecip: process 21634 (syz.3.4354) requesting ep 01 but needs 81 [ 387.440193][T21634] usb usb9: usbfs: process 21634 (syz.3.4354) did not claim interface 0 before use [ 387.446944][T21634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4354'. [ 387.450565][T21647] vhci_hcd: connection closed [ 387.450907][T13454] vhci_hcd vhci_hcd.3: stop threads [ 387.460642][T13454] vhci_hcd vhci_hcd.3: release socket [ 387.462961][T13454] vhci_hcd vhci_hcd.3: disconnect device [ 387.518681][T21654] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 387.524849][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4358'. [ 387.531698][T21654] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 387.706713][ T41] kauditd_printk_skb: 296 callbacks suppressed [ 387.706725][ T41] audit: type=1400 audit(380.505:41478): avc: denied { read } for pid=21674 comm="syz.1.4364" dev="nsfs" ino=4026533673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 387.724987][ T41] audit: type=1400 audit(380.505:41479): avc: denied { open } for pid=21674 comm="syz.1.4364" path="net:[4026533673]" dev="nsfs" ino=4026533673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 387.733673][ T41] audit: type=1400 audit(380.505:41480): avc: denied { create } for pid=21675 comm="syz.8.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 387.741321][ T41] audit: type=1400 audit(380.514:41481): avc: denied { create } for pid=21675 comm="syz.8.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 387.750393][ T41] audit: type=1400 audit(380.514:41482): avc: denied { bind } for pid=21675 comm="syz.8.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 387.757651][ T41] audit: type=1400 audit(380.514:41483): avc: denied { map } for pid=21675 comm="syz.8.4363" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=110603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 387.765942][ T41] audit: type=1400 audit(380.514:41484): avc: denied { read write } for pid=21675 comm="syz.8.4363" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=110603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 387.774015][ T41] audit: type=1400 audit(380.523:41485): avc: denied { accept } for pid=21675 comm="syz.8.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 387.780284][ T41] audit: type=1400 audit(380.523:41486): avc: denied { bind } for pid=21675 comm="syz.8.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 387.780304][ T41] audit: type=1400 audit(380.523:41487): avc: denied { setopt } for pid=21675 comm="syz.8.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 387.831675][T21689] netlink: 'syz.1.4367': attribute type 11 has an invalid length. [ 387.833265][T21689] ubi: mtd0 is already attached to ubi8 [ 388.036679][T21729] 8021q: adding VLAN 0 to HW filter on device bond76 [ 388.048722][T21729] bond76 (unregistering): Released all slaves [ 388.567798][T21753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.575462][T21753] bond4 (unregistering): Released all slaves [ 389.457909][ T5742] Bluetooth: hci0: command tx timeout [ 389.695796][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 389.858021][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 389.861677][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.865896][ T34] usb 7-1: config 0 has no interfaces? [ 389.869952][ T34] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 389.873772][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.877028][ T34] usb 7-1: Product: syz [ 389.878820][ T34] usb 7-1: Manufacturer: syz [ 389.881108][ T34] usb 7-1: SerialNumber: syz [ 389.886839][ T34] usb 7-1: config 0 descriptor?? [ 390.287575][T21851] macsec1: left promiscuous mode [ 390.293992][T21857] overlayfs: missing 'lowerdir' [ 390.339703][T21861] trusted_key: encrypted_key: keylen parameter is missing [ 390.343595][T21861] ip6t_REJECT: ECHOREPLY is not supported [ 390.538079][T21868] __nla_validate_parse: 11 callbacks suppressed [ 390.538093][T21868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4420'. [ 390.656185][T21883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4424'. [ 390.700703][T21885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4425'. [ 390.740108][T21885] syzkaller0: entered promiscuous mode [ 390.742523][T21885] syzkaller0: entered allmulticast mode [ 391.001825][T21903] fuse: Bad value for 'fd' [ 391.004442][T21903] CIFS: VFS: UNC: path must begin with // or \\ [ 391.007381][T21903] CIFS: VFS: Malformed UNC in devname [ 391.018643][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.055457][T21914] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.065431][T21911] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 391.108610][T21914] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.182064][T21914] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.290681][T21914] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.410899][T15690] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.418430][T15690] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.424259][T15690] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.429876][T15690] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.721326][ T5742] Bluetooth: hci0: command tx timeout [ 392.683058][ T9] usb 7-1: USB disconnect, device number 5 [ 393.963514][ T5742] Bluetooth: hci0: command tx timeout [ 396.246760][ T41] kauditd_printk_skb: 187 callbacks suppressed [ 396.246772][ T41] audit: type=1400 audit(388.389:41675): avc: denied { search } for pid=21920 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.255691][ T41] audit: type=1400 audit(388.389:41676): avc: denied { search } for pid=21920 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.262748][ T41] audit: type=1400 audit(388.389:41677): avc: denied { search } for pid=21920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.269461][ T41] audit: type=1400 audit(388.389:41678): avc: denied { search } for pid=21920 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.276492][ T41] audit: type=1400 audit(388.398:41679): avc: denied { read } for pid=21921 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.283390][ T41] audit: type=1400 audit(388.398:41680): avc: denied { read open } for pid=21921 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.290897][ T41] audit: type=1400 audit(388.398:41681): avc: denied { getattr } for pid=21921 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.298481][ T41] audit: type=1400 audit(388.398:41682): avc: denied { write } for pid=21920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.305411][ T41] audit: type=1400 audit(388.398:41683): avc: denied { add_name } for pid=21920 comm="dhcpcd-run-hook" name="resolv.conf.eth19.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.312142][ T41] audit: type=1400 audit(388.398:41684): avc: denied { create } for pid=21920 comm="dhcpcd-run-hook" name="resolv.conf.eth19.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 402.061895][ T41] kauditd_printk_skb: 13 callbacks suppressed [ 402.061908][ T41] audit: type=1400 audit(393.762:41698): avc: denied { setopt } for pid=21946 comm="syz.2.4437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.069020][T21951] syzkaller0: entered promiscuous mode [ 402.071181][T21949] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.4437'. [ 402.071966][T21951] syzkaller0: entered allmulticast mode [ 402.072391][ T41] audit: type=1400 audit(393.762:41699): avc: denied { read } for pid=21945 comm="syz.1.4436" dev="nsfs" ino=4026533673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 402.072415][ T41] audit: type=1400 audit(393.762:41700): avc: denied { open } for pid=21945 comm="syz.1.4436" path="net:[4026533673]" dev="nsfs" ino=4026533673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 402.072433][ T41] audit: type=1400 audit(393.762:41701): avc: denied { create } for pid=21948 comm="syz.3.4438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 402.072450][ T41] audit: type=1400 audit(393.762:41702): avc: denied { create } for pid=21945 comm="syz.1.4436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 402.072465][ T41] audit: type=1400 audit(393.762:41703): avc: denied { bind } for pid=21945 comm="syz.1.4436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.072480][ T41] audit: type=1400 audit(393.762:41704): avc: denied { name_bind } for pid=21945 comm="syz.1.4436" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 402.072500][ T41] audit: type=1400 audit(393.762:41705): avc: denied { node_bind } for pid=21945 comm="syz.1.4436" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 402.072516][ T41] audit: type=1400 audit(393.762:41706): avc: denied { write } for pid=21945 comm="syz.1.4436" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.072533][ T41] audit: type=1400 audit(393.762:41707): avc: denied { connect } for pid=21945 comm="syz.1.4436" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 402.169835][T21974] loop5: detected capacity change from 0 to 7 [ 402.172390][T21974] loop5: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 402.174820][T21974] loop5: partition table partially beyond EOD, truncated [ 402.177136][T21974] loop5: p1 size 1673702192 extends beyond EOD, truncated [ 402.180473][T21974] loop5: p2 start 832840281 is beyond EOD, truncated [ 402.213958][T21983] netlink: 15 bytes leftover after parsing attributes in process `syz.8.4444'. [ 402.340018][T22000] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4450'. [ 402.395143][T22009] overlayfs: failed to clone lowerpath [ 402.416243][T22015] netlink: 'syz.8.4455': attribute type 11 has an invalid length. [ 402.616302][T22048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.619048][T22048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.621963][T22048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.624350][T22048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.831065][T22062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4469'. [ 402.934822][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4473'. [ 402.937640][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4473'. [ 403.187343][T22089] Cannot find del_set index 3 as target [ 403.451884][T22094] overlayfs: missing 'lowerdir' [ 403.494585][T22098] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4481'. [ 403.851505][T22115] binder: 22114:22115 ioctl c018620c 200000000040 returned -22 [ 403.919756][ T5742] Bluetooth: hci0: unknown advertising packet type: 0x82 [ 403.919786][ T5742] Bluetooth: hci0: Dropping invalid advertising data [ 403.925511][ T5742] Bluetooth: hci0: Malformed LE Event: 0x02 [ 404.028451][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4487'. [ 404.028459][T22121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4487'. [ 404.029885][T22121] IPv6: sit4: Disabled Multicast RS [ 404.041200][T22121] sit4: entered allmulticast mode [ 404.092157][T22152] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 404.130941][T22157] ptrace attach of "/syz-executor exec"[16183] was attempted by "/syz-executor exec"[22157] [ 404.283673][T22183] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4505'. [ 404.532455][T22205] netlink: 'syz.8.4511': attribute type 2 has an invalid length. [ 404.778410][T22239] openvswitch: netlink: IP tunnel dst address not specified [ 404.982719][T22266] tmpfs: Unknown parameter 'buO' [ 405.011540][T22268] selinux_netlink_send: 57 callbacks suppressed [ 405.011559][T22268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22268 comm=syz.8.4529 [ 405.222416][T22286] 9p: Bad value for 'rfdno' [ 405.651374][T22336] openvswitch: netlink: IP tunnel dst address not specified [ 405.654705][T22336] netlink: 'syz.3.4547': attribute type 1 has an invalid length. [ 405.657518][T22337] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.661214][T22337] bridge_slave_1: left allmulticast mode [ 405.664087][T22337] bridge_slave_1: left promiscuous mode [ 405.666413][T22337] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.704653][T22343] fuse: Bad value for 'fd' [ 405.853806][T22360] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 405.874025][T22361] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 406.060993][T22376] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 406.067632][T22376] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 406.097622][T22378] fuse: Bad value for 'fd' [ 406.291081][T22416] loop9: detected capacity change from 0 to 524287999 [ 406.293913][T22416] buffer_io_error: 77 callbacks suppressed [ 406.293923][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.298383][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.301838][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.304936][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.307711][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.310406][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.313247][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.315815][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.318309][T22416] ldm_validate_partition_table(): Disk read failed. [ 406.320484][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.324384][T22416] Buffer I/O error on dev loop9, logical block 0, async page read [ 406.327644][T22416] Dev loop9: unable to read RDB block 0 [ 406.329777][T22416] loop9: unable to read partition table [ 406.331755][T22416] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x) failed (rc=-5) [ 406.336515][T22416] netem: change failed [ 406.551284][T22429] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 406.570393][T22433] trusted_key: encrypted_key: insufficient parameters specified [ 407.057674][T22451] batman_adv: batadv0: Adding interface: vlan2 [ 407.059778][T22451] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.067361][T22451] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xbf000) [ 407.556905][ T41] kauditd_printk_skb: 303 callbacks suppressed [ 407.556919][ T41] audit: type=1400 audit(398.830:42011): avc: denied { unmount } for pid=21475 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 407.579894][ T41] audit: type=1400 audit(398.858:42012): avc: denied { allowed } for pid=22455 comm="syz.2.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 407.585735][ T41] audit: type=1400 audit(398.858:42013): avc: denied { create } for pid=22455 comm="syz.2.4585" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 407.592997][ T41] audit: type=1400 audit(398.858:42014): avc: denied { read } for pid=22455 comm="syz.2.4585" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 407.599728][ T41] audit: type=1400 audit(398.858:42015): avc: denied { open } for pid=22455 comm="syz.2.4585" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 407.607583][ T41] audit: type=1400 audit(398.858:42016): avc: denied { ioctl } for pid=22455 comm="syz.2.4585" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 407.616452][ T41] audit: type=1400 audit(398.858:42017): avc: denied { setopt } for pid=22455 comm="syz.2.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 407.622374][ T41] audit: type=1400 audit(398.886:42018): avc: denied { read } for pid=22457 comm="syz.2.4586" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 407.629252][ T41] audit: type=1400 audit(398.886:42019): avc: denied { open } for pid=22457 comm="syz.2.4586" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 407.636273][ T41] audit: type=1400 audit(398.886:42020): avc: denied { ioctl } for pid=22457 comm="syz.2.4586" path="/dev/sg0" dev="devtmpfs" ino=722 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.205316][T15690] bridge_slave_1: left allmulticast mode [ 413.207139][T15690] bridge_slave_1: left promiscuous mode [ 413.209344][T15690] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.212708][T15690] bridge_slave_0: left allmulticast mode [ 413.214451][T15690] bridge_slave_0: left promiscuous mode [ 413.216270][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.339961][T15690] team0: Port device bond0 removed [ 413.343210][T15690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.347092][T15690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.350592][T15690] bond0 (unregistering): Released all slaves [ 413.354039][T15690] bond1 (unregistering): Released all slaves [ 413.411898][T15690] tipc: Left network mode [ 413.565580][T15690] hsr_slave_0: left promiscuous mode [ 413.568071][T15690] hsr_slave_1: left promiscuous mode [ 413.570519][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.573230][T15690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.576328][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.579069][T15690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.584790][T15690] dummy0: left allmulticast mode [ 413.586751][T15690] veth1_macvtap: left promiscuous mode [ 413.588549][T15690] veth0_macvtap: left promiscuous mode [ 413.590195][T15690] veth1_vlan: left promiscuous mode [ 413.591822][T15690] veth0_vlan: left promiscuous mode [ 413.642680][T15690] team0 (unregistering): Port device team_slave_1 removed [ 413.649695][T15690] team0 (unregistering): Port device team_slave_0 removed [ 457.569219][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.188675][ T5749] Bluetooth: hci3: command 0x0406 tx timeout [ 520.826415][ T5749] Bluetooth: hci0: command 0x0406 tx timeout [ 524.120231][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.171477][ T41] audit: type=1400 audit(520.342:42021): avc: denied { search } for pid=22473 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.178564][ T41] audit: type=1400 audit(520.342:42022): avc: denied { search } for pid=22473 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.185577][ T41] audit: type=1400 audit(520.342:42023): avc: denied { search } for pid=22473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.192791][ T41] audit: type=1400 audit(520.342:42024): avc: denied { search } for pid=22473 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.199831][ T41] audit: type=1400 audit(520.342:42025): avc: denied { read } for pid=22474 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.207153][ T41] audit: type=1400 audit(520.342:42026): avc: denied { read open } for pid=22474 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.215032][ T41] audit: type=1400 audit(520.342:42027): avc: denied { getattr } for pid=22474 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.222639][ T41] audit: type=1400 audit(520.351:42028): avc: denied { write } for pid=22473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.229883][ T41] audit: type=1400 audit(520.351:42029): avc: denied { add_name } for pid=22473 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.236394][ T41] audit: type=1400 audit(520.351:42030): avc: denied { create } for pid=22473 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 546.557968][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 546.557986][ T41] audit: type=1400 audit(527.155:42038): avc: denied { read } for pid=5444 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 546.651520][ T6547] smbdirect: ib_dev[syz1] removed [ 546.662749][ T5568] team0: Port device gtp0 removed [ 546.923181][ T5568] bond2 (unregistering): (slave bridge4): Releasing active interface [ 550.551769][ T5568] bond0 (unregistering): Released all slaves [ 550.556475][ T5568] bond1 (unregistering): Released all slaves [ 550.562577][ T5568] bond2 (unregistering): Released all slaves [ 550.568422][ T5568] bond3 (unregistering): Released all slaves [ 550.574641][ T5568] bond4 (unregistering): Released all slaves [ 550.581812][ T5568] bond5 (unregistering): Released all slaves [ 550.589694][ T5568] bond6 (unregistering): (slave bridge_slave_1): Removing an active aggregator [ 550.593231][ T5568] bond6 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 550.596977][ T5568] bond6 (unregistering): Released all slaves [ 550.643479][ T41] audit: type=1400 audit(530.931:42039): avc: denied { write } for pid=22483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.672382][ T41] audit: type=1400 audit(530.959:42040): avc: denied { write } for pid=22486 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.691106][ T5568] : left promiscuous mode [ 550.694421][ T5444] 8021q: adding VLAN 0 to HW filter on device eth22 [ 550.734615][ T5568] tipc: Disabling bearer [ 550.736436][ T5568] tipc: Left network mode [ 550.739214][ T5568] IPVS: stopping master sync thread 8935 ... [ 550.741569][ T41] audit: type=1400 audit(531.014:42041): avc: denied { write } for pid=22489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.770005][ T41] audit: type=1400 audit(531.051:42042): avc: denied { write } for pid=22493 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.795708][ T5444] 8021q: adding VLAN 0 to HW filter on device eth23 [ 550.853447][ T41] audit: type=1400 audit(531.125:42043): avc: denied { write } for pid=22496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.882248][ T41] audit: type=1400 audit(531.143:42044): avc: denied { write } for pid=22499 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.907999][ T5444] 8021q: adding VLAN 0 to HW filter on device eth24 [ 550.997776][ T41] audit: type=1400 audit(531.254:42045): avc: denied { write } for pid=22503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.010541][ T5568] hsr_slave_0: left promiscuous mode [ 551.013077][ T5568] hsr_slave_1: left promiscuous mode [ 551.031911][ T41] audit: type=1400 audit(531.291:42046): avc: denied { write } for pid=22506 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.087531][ T5444] 8021q: adding VLAN 0 to HW filter on device eth25 [ 551.365760][ T5568] IPVS: stop unused estimator thread 0... [ 562.957397][ T41] audit: type=1400 audit(542.296:42047): avc: denied { write } for pid=22519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.993738][ T41] audit: type=1400 audit(542.323:42048): avc: denied { write } for pid=22522 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.059317][ T41] audit: type=1400 audit(542.388:42049): avc: denied { write } for pid=22525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.100568][ T41] audit: type=1400 audit(542.425:42050): avc: denied { write } for pid=22528 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.558763][ T41] audit: type=1400 audit(542.859:42051): avc: denied { write } for pid=22531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.586618][ T41] audit: type=1400 audit(542.877:42052): avc: denied { write } for pid=22534 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.292482][ T41] audit: type=1400 audit(543.524:42053): avc: denied { write } for pid=22537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.326022][ T41] audit: type=1400 audit(543.560:42054): avc: denied { write } for pid=22540 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.431659][ T43] INFO: task jbd2/sda1-8:5104 blocked in I/O wait for more than 143 seconds. [ 584.435462][ T43] Tainted: G L syzkaller #0 [ 584.438506][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.441888][ T43] task:jbd2/sda1-8 state:D stack:25712 pid:5104 tgid:5104 ppid:2 task_flags:0x240040 flags:0x00080000 [ 584.446908][ T43] Call Trace: [ 584.448557][ T43] [ 584.450100][ T43] __schedule+0x125c/0x6730 [ 584.452313][ T43] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 584.454884][ T43] ? do_raw_spin_lock+0x128/0x260 [ 584.456983][ T43] ? __pfx___schedule+0x10/0x10 [ 584.459476][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.461536][ T43] ? schedule+0x2bf/0x390 [ 584.463949][ T43] ? lock_release+0x24d/0x310 [ 584.466016][ T43] schedule+0xdd/0x390 [ 584.467978][ T43] io_schedule+0x8a/0xf0 [ 584.469906][ T43] bit_wait_io+0xd/0xe0 [ 584.471788][ T43] __wait_on_bit+0x65/0x180 [ 584.473750][ T43] ? __pfx_bit_wait_io+0x10/0x10 [ 584.475746][ T43] out_of_line_wait_on_bit+0xdc/0x110 [ 584.477704][ T43] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 584.479849][ T43] ? __pfx_wake_bit_function+0x10/0x10 [ 584.481864][ T43] ? __pfx___might_resched+0x10/0x10 [ 584.483972][ T43] __wait_on_buffer+0x64/0x70 [ 584.486350][ T43] jbd2_journal_commit_transaction+0x382f/0x67d0 [ 584.488992][ T43] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 584.491725][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 584.493985][ T43] ? debug_object_deactivate+0x2e4/0x3b0 [ 584.496030][ T43] ? __pfx_debug_object_deactivate+0x10/0x10 [ 584.498724][ T43] ? _raw_spin_lock_irqsave+0x52/0x60 [ 584.501012][ T43] ? __try_to_del_timer_sync+0x107/0x160 [ 584.503414][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.505345][ T43] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 584.507834][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.509818][ T43] ? __timer_delete_sync+0x151/0x1c0 [ 584.512031][ T43] kjournald2+0x200/0x760 [ 584.513842][ T43] ? __pfx_kjournald2+0x10/0x10 [ 584.516053][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 584.519034][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.521128][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.523167][ T43] ? __pfx_autoremove_wake_function+0x10/0x10 [ 584.525663][ T43] ? __kthread_parkme+0x18c/0x230 [ 584.527751][ T43] ? kthread+0x13a/0x450 [ 584.529720][ T43] ? __pfx_kjournald2+0x10/0x10 [ 584.531725][ T43] kthread+0x370/0x450 [ 584.533406][ T43] ? __pfx_kthread+0x10/0x10 [ 584.535182][ T43] ret_from_fork+0x72b/0xd50 [ 584.537231][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 584.539780][ T43] ? __switch_to+0x800/0x10f0 [ 584.541867][ T43] ? __pfx_kthread+0x10/0x10 [ 584.543871][ T43] ret_from_fork_asm+0x1a/0x30 [ 584.545703][ T43] [ 584.546926][ T43] INFO: task syz-executor:5716 blocked in I/O wait for more than 143 seconds. [ 584.550027][ T43] Tainted: G L syzkaller #0 [ 584.552602][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.555271][ T43] task:syz-executor state:D stack:21912 pid:5716 tgid:5716 ppid:5715 task_flags:0x440100 flags:0x00080000 [ 584.558878][ T43] Call Trace: [ 584.559914][ T43] [ 584.560830][ T43] __schedule+0x125c/0x6730 [ 584.562320][ T43] ? folio_mark_accessed+0xf3/0x1040 [ 584.563949][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.565519][ T43] ? __pfx___schedule+0x10/0x10 [ 584.567226][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.568872][ T43] ? schedule+0x2bf/0x390 [ 584.570625][ T43] ? lock_release+0x24d/0x310 [ 584.572390][ T43] schedule+0xdd/0x390 [ 584.573678][ T43] io_schedule+0x8a/0xf0 [ 584.575025][ T43] bit_wait_io+0xd/0xe0 [ 584.576393][ T43] __wait_on_bit+0x65/0x180 [ 584.577823][ T43] ? __pfx_bit_wait_io+0x10/0x10 [ 584.579343][ T43] out_of_line_wait_on_bit+0xdc/0x110 [ 584.580993][ T43] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 584.583229][ T43] ? __pfx_wake_bit_function+0x10/0x10 [ 584.584982][ T43] do_get_write_access+0x839/0x1200 [ 584.586750][ T43] jbd2_journal_get_write_access+0x1d6/0x280 [ 584.588767][ T43] __ext4_journal_get_write_access+0x6a/0x340 [ 584.591272][ T43] ext4_reserve_inode_write+0x1b7/0x330 [ 584.593188][ T43] __ext4_mark_inode_dirty+0x18f/0x880 [ 584.595198][ T43] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 584.597095][ T43] ? trace_jbd2_handle_start+0x83/0x240 [ 584.598846][ T43] ? jbd2__journal_start+0xf7/0x6a0 [ 584.600507][ T43] ? __ext4_journal_start_sb+0x367/0x670 [ 584.602245][ T43] ? __ext4_journal_start_sb+0x1ce/0x670 [ 584.603966][ T43] ? ext4_dirty_inode+0xa1/0x130 [ 584.605659][ T43] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 584.607399][ T43] ext4_dirty_inode+0xd9/0x130 [ 584.608987][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.610618][ T43] __mark_inode_dirty+0x1f3/0x16e0 [ 584.612320][ T43] file_update_time_flags+0x46b/0x500 [ 584.613993][ T43] ext4_page_mkwrite+0x324/0x1850 [ 584.615844][ T43] ? anon_pipe_read+0xc7d/0x1200 [ 584.617422][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.618935][ T43] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 584.620598][ T43] ? vm_normal_page+0x1d5/0x390 [ 584.622138][ T43] ? rcu_read_unlock+0x2d/0xb0 [ 584.623845][ T43] do_page_mkwrite+0x17a/0x440 [ 584.625611][ T43] do_wp_page+0xa77/0x4350 [ 584.627397][ T43] ? kill_fasync+0x316/0x510 [ 584.629546][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.631584][ T43] ? __pfx_do_wp_page+0x10/0x10 [ 584.633643][ T43] ? do_raw_spin_lock+0x128/0x260 [ 584.635842][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 584.638975][ T43] ? __pte_offset_map+0x50/0x310 [ 584.641106][ T43] __handle_mm_fault+0x1ab6/0x2a00 [ 584.643242][ T43] ? __pfx___handle_mm_fault+0x10/0x10 [ 584.645946][ T43] ? __pfx_vma_start_read+0x10/0x10 [ 584.648517][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.650616][ T43] handle_mm_fault+0x37b/0xa30 [ 584.652640][ T43] do_user_addr_fault+0x5a3/0x12f0 [ 584.654809][ T43] exc_page_fault+0x6f/0xd0 [ 584.656763][ T43] asm_exc_page_fault+0x26/0x30 [ 584.658913][ T43] RIP: 0033:0x7ff970c6efc3 [ 584.660838][ T43] RSP: 002b:00007ffcf78fcdc0 EFLAGS: 00010216 [ 584.663791][ T43] RAX: 00007ff96ddffea4 RBX: 00007ffcf78fcef0 RCX: 0000000000000000 [ 584.667416][ T43] RDX: 00007ff96ddffea0 RSI: 0000000000000008 RDI: 00007ffcf78fcef0 [ 584.670977][ T43] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 584.674228][ T43] R10: 00007ffcf78fced0 R11: 0000000000000000 R12: 0000000000000000 [ 584.677517][ T43] R13: 000000000000015c R14: fffffffffffffea4 R15: 0000000000000000 [ 584.681054][ T43] [ 584.682705][ T43] INFO: lockdep is turned off. [ 584.685111][ T43] NMI backtrace for cpu 0 [ 584.685133][ T43] CPU: 0 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 584.685161][ T43] Tainted: [L]=SOFTLOCKUP [ 584.685167][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.685179][ T43] Call Trace: [ 584.685188][ T43] [ 584.685198][ T43] dump_stack_lvl+0x100/0x190 [ 584.685225][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 584.685248][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 584.685273][ T43] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 584.685305][ T43] sys_info+0x141/0x190 [ 584.685332][ T43] watchdog+0xcb1/0x1030 [ 584.685365][ T43] ? trace_irq_enable.constprop.0+0x122/0x160 [ 584.685388][ T43] ? __pfx_watchdog+0x10/0x10 [ 584.685418][ T43] ? __kthread_parkme+0x18c/0x230 [ 584.685441][ T43] ? kthread+0x13a/0x450 [ 584.685467][ T43] ? __pfx_watchdog+0x10/0x10 [ 584.685500][ T43] kthread+0x370/0x450 [ 584.685526][ T43] ? __pfx_kthread+0x10/0x10 [ 584.685553][ T43] ret_from_fork+0x72b/0xd50 [ 584.685578][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 584.685602][ T43] ? __switch_to+0x800/0x10f0 [ 584.685630][ T43] ? __pfx_kthread+0x10/0x10 [ 584.685656][ T43] ret_from_fork_asm+0x1a/0x30 [ 584.685687][ T43] [ 584.685694][ T43] Sending NMI from CPU 0 to CPUs 1-3: [ 584.744506][ C3] NMI backtrace for cpu 3 [ 584.744522][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.744536][ C3] Tainted: [L]=SOFTLOCKUP [ 584.744545][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.744551][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 584.744567][ C3] Code: c6 90 02 e9 c3 48 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 e6 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 584.744576][ C3] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 584.744585][ C3] RAX: 000000000033c96c RBX: ffff88801ee9a540 RCX: ffffffff8b8cb2b5 [ 584.744592][ C3] RDX: 0000000000000001 RSI: ffffffff8c1ce980 RDI: ffffffff81de1ea7 [ 584.744597][ C3] RBP: ffffed1003dd34a8 R08: 0000000000000000 R09: ffffed100d4e678d [ 584.744603][ C3] R10: ffff88806a733c6b R11: ffffffff81d4f52c R12: 0000000000000000 [ 584.744610][ C3] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 584.744616][ C3] FS: 0000000000000000(0000) GS:ffff8880d665f000(0000) knlGS:0000000000000000 [ 584.744639][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.744647][ C3] CR2: 00007f2a25220850 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 584.744653][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 584.744659][ C3] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 584.744665][ C3] Call Trace: [ 584.744671][ C3] [ 584.744677][ C3] default_idle+0x9/0x10 [ 584.744695][ C3] default_idle_call+0x6c/0xb0 [ 584.744710][ C3] do_idle+0x3a7/0x5b0 [ 584.744726][ C3] ? __pfx_do_idle+0x10/0x10 [ 584.744739][ C3] ? do_idle+0x388/0x5b0 [ 584.744755][ C3] cpu_startup_entry+0x4f/0x60 [ 584.744772][ C3] start_secondary+0x21d/0x2d0 [ 584.744788][ C3] ? __pfx_start_secondary+0x10/0x10 [ 584.744804][ C3] common_startup_64+0x13e/0x158 [ 584.744827][ C3] [ 584.744835][ C2] NMI backtrace for cpu 2 [ 584.744853][ C2] CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.744878][ C2] Tainted: [L]=SOFTLOCKUP [ 584.744884][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.744895][ C2] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 584.744942][ C2] Code: c6 90 02 e9 c3 48 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 e6 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 584.744959][ C2] RSP: 0018:ffffc90000187e00 EFLAGS: 00000246 [ 584.744973][ C2] RAX: 0000000000371234 RBX: ffff88801ee9ca80 RCX: ffffffff8b8cb2b5 [ 584.744985][ C2] RDX: 0000000000000001 RSI: ffffffff8c1ce980 RDI: ffffffff81de1ea7 [ 584.744997][ C2] RBP: ffffed1003dd3950 R08: 0000000000000000 R09: ffffed100d4c678d [ 584.745009][ C2] R10: ffff88806a633c6b R11: ffffffff81d4f52c R12: 0000000000000000 [ 584.745020][ C2] R13: 0000000000000000 R14: 1ffff92000030fc4 R15: dffffc0000000000 [ 584.745031][ C2] FS: 0000000000000000(0000) GS:ffff8880d655f000(0000) knlGS:0000000000000000 [ 584.745064][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.745078][ C2] CR2: 0000562c52fd5168 CR3: 000000002de59000 CR4: 0000000000352ef0 [ 584.745089][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000003800 [ 584.745099][ C2] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 584.745110][ C2] Call Trace: [ 584.745118][ C2] [ 584.745124][ C2] default_idle+0x9/0x10 [ 584.745146][ C2] default_idle_call+0x6c/0xb0 [ 584.745166][ C2] do_idle+0x3a7/0x5b0 [ 584.745189][ C2] ? __pfx_do_idle+0x10/0x10 [ 584.745205][ C2] ? finish_task_switch.isra.0+0x14c/0x1010 [ 584.745225][ C2] cpu_startup_entry+0x4f/0x60 [ 584.745243][ C2] start_secondary+0x21d/0x2d0 [ 584.745283][ C2] ? __pfx_start_secondary+0x10/0x10 [ 584.745314][ C2] common_startup_64+0x13e/0x158 [ 584.745341][ C2] [ 584.745350][ C1] NMI backtrace for cpu 1 [ 584.745366][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.745388][ C1] Tainted: [L]=SOFTLOCKUP [ 584.745394][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.745404][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 584.745425][ C1] Code: c6 90 02 e9 c3 48 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 e6 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 584.745440][ C1] RSP: 0018:ffffc90000177e00 EFLAGS: 00000246 [ 584.745452][ C1] RAX: 00000000005f8c34 RBX: ffff88801e6f2540 RCX: ffffffff8b8cb2b5 [ 584.745463][ C1] RDX: 0000000000000001 RSI: ffffffff8c1ce980 RDI: ffffffff81de1ea7 [ 584.745473][ C1] RBP: ffffed1003cde4a8 R08: 0000000000000000 R09: ffffed100d4a678d [ 584.745484][ C1] R10: ffff88806a533c6b R11: ffffffff81d4f52c R12: 0000000000000000 [ 584.745494][ C1] R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 [ 584.745505][ C1] FS: 0000000000000000(0000) GS:ffff8880d645f000(0000) knlGS:0000000000000000 [ 584.745537][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.745549][ C1] CR2: 0000563145305000 CR3: 000000002b236000 CR4: 0000000000352ef0 [ 584.745558][ C1] DR0: 000000000000002c DR1: fffeffffff7fff00 DR2: 0000000080000001 [ 584.745569][ C1] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 584.745578][ C1] Call Trace: [ 584.745584][ C1] [ 584.745590][ C1] default_idle+0x9/0x10 [ 584.745660][ C1] default_idle_call+0x6c/0xb0 [ 584.745682][ C1] do_idle+0x3a7/0x5b0 [ 584.745700][ C1] ? __pfx_do_idle+0x10/0x10 [ 584.745715][ C1] ? finish_task_switch.isra.0+0x14c/0x1010 [ 584.745736][ C1] cpu_startup_entry+0x4f/0x60 [ 584.745754][ C1] start_secondary+0x21d/0x2d0 [ 584.745768][ C1] ? __pfx_start_secondary+0x10/0x10 [ 584.745784][ C1] common_startup_64+0x13e/0x158 [ 584.745806][ C1] [ 584.746492][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 584.746508][ T43] CPU: 0 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 584.746531][ T43] Tainted: [L]=SOFTLOCKUP [ 584.746539][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.746550][ T43] Call Trace: [ 584.746556][ T43] [ 584.746563][ T43] dump_stack_lvl+0x100/0x190 [ 584.746584][ T43] vpanic+0x552/0x970 [ 584.746601][ T43] ? __pfx_vpanic+0x10/0x10 [ 584.746618][ T43] ? rcu_is_watching+0x12/0xc0 [ 584.746638][ T43] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 584.746665][ T43] panic+0xd1/0xe0 [ 584.746680][ T43] ? __pfx_panic+0x10/0x10 [ 584.746697][ T43] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 584.746721][ T43] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 584.746747][ T43] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 584.746773][ T43] ? watchdog.cold+0x1ec/0x234 [ 584.746792][ T43] ? watchdog+0xcc1/0x1030 [ 584.746819][ T43] watchdog.cold+0x1fd/0x234 [ 584.746839][ T43] ? trace_irq_enable.constprop.0+0x122/0x160 [ 584.746858][ T43] ? __pfx_watchdog+0x10/0x10 [ 584.746885][ T43] ? __kthread_parkme+0x18c/0x230 [ 584.746909][ T43] ? kthread+0x13a/0x450 [ 584.746931][ T43] ? __pfx_watchdog+0x10/0x10 [ 584.998419][ T43] kthread+0x370/0x450 [ 584.999708][ T43] ? __pfx_kthread+0x10/0x10 [ 585.001159][ T43] ret_from_fork+0x72b/0xd50 [ 585.002622][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 585.004418][ T43] ? __switch_to+0x800/0x10f0 [ 585.006192][ T43] ? __pfx_kthread+0x10/0x10 [ 585.007824][ T43] ret_from_fork_asm+0x1a/0x30 [ 585.009559][ T43] [ 585.011341][ T43] Kernel Offset: disabled [ 585.012671][ T43] Rebooting in 86400 seconds..