last executing test programs: 57.510920176s ago: executing program 0 (id=14): futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[], 0x118) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 57.4413457s ago: executing program 0 (id=16): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x3499, @local}, 0x10, 0x80000) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f00000000c0)={0x5, 0x1, 0x10}) syncfs(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xe002, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x110, 0x3, 0x1, 0xf30f969c0ecd6ac0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TUPLE_ORIG={0x9c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1368}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x404c080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$pppl2tp(r2, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x3, 0x1, 0x4, {0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x6}}}, 0x3a) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000380)) connect$pppoe(0xffffffffffffffff, &(0x7f00000003c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'veth0_to_bridge\x00'}}, 0x1e) fchown(r4, 0x0, 0xee00) sendmsg$nl_generic(r2, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x168, 0x39, 0x400, 0x70bd2a, 0x25dfdbfb, {0x1b}, [@typed={0x4, 0x4f}, @generic="4aef47e59d4a4e6494", @generic="6871e69fb956f484a882acf8ecffeee3bf7ec218ce758d6dec1a4a837aca66ba155eb89d54ef1cd8e3a8", @generic="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", @generic="cd19cb4e40fa7b94ae8ed4fcd2581ec01088aa9cbbb29a6e7b53a7b996fd9783c1"]}, 0x168}, 0x1, 0x0, 0x0, 0x4004000}, 0x44050) r6 = accept4$alg(r2, 0x0, 0x0, 0x80400) ioctl$NILFS_IOCTL_GET_BDESCS(r6, 0xc0186e87, &(0x7f00000006c0)={&(0x7f0000000640)=[{0x7, 0x8, 0x4, 0x19, 0xbb}, {0xffffffffffffffff, 0x10e0, 0x4, 0x8}], 0x2, 0x28, 0x8, 0x3ff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000740)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000007c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000700), 0x4, r7, 0x1c, 0x1, @ib={0x1b, 0x400, 0x8, {"9b2ac5f9153402e75160c45187412528"}, 0x3, 0x6, 0x6}}}, 0xa0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000880)={0x0, 0x3, 0x5, 0x3, 0x0, 0x3}) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r1, {0xfffffff7}}, './file0\x00'}) ioctl$SNDCTL_SEQ_RESETSAMPLES(r3, 0x40045109, &(0x7f0000000900)=0x10001) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000940)={{r8}, "13ff015e895f65165cfd505599f1383ff1d90adb8e434da8d88e18acfeb2714caf97e0d32dfcd26c811677ac0de5cb38eaaef652bd03591fe0a6489b5fbe593a537873e08fe1c1cf7d53b07eea4a31f74688226d9d361e4a67d30176a032f55fe38fa422ec18f0116bced8630e1c2744c24a8d5fefa41828a472f89adce2579381deb66ad0e6796029e46004fcabc85797d48c53fa2e1b6ffc60a4627b7c841ff9e3549e00ed08fdab2c3350cef67352a9b9868866bf83432b2fe759cddda5c4d5d26d62d71431b64a51bb51a1fd2efe4b782176ea464bc6a6cf816da559b6a94160436b29ab49dc483b3e3b4dbd73ce7387de4b56afc1029d2cc04f1a0b731bc0e6a82b3c511ebea75d1b41d0555ed3357d39fc6e1369132104e8bd797b33b1edcbda18a03a39733d70bb9812461063aad545380ec2824b3507de3e3537fd5581c484138d2587d1638b06c8ad53e358cdd4f914eca334c98940cd9028909fe2cb39fa02439aaf0bf641f37fc22e54e66e6ecd164e900dceb61f1800a7f00336df8014dbdbbe91616745c864cd8e8148ac3e0782cdf749ae8364eec76afc33a1592ed7f483e03ad5c5abc390499fba6c8a8480ff03cbb687d08933c75417643899e0ec7a76552e762b63ca111fc6f2d9c6bc24cd26299b72dc727a864c199b295b1cd6ab1e3f1c1395d2dbe501151509b8e3b09b39c980a41d601fc644be1a76cb581f4a57e0c3d4931b1d9c28c2af2c875b72fe0c884d3504ba7f0fbbe81c538b476c1b782a975fc01a8f93a95f75439f2912c83faf69a96338c2fd76322bc34623d3d63900d7046fc96f4f43d5a43c4517043eae8aeeed609c2b35ea206af757ce33827351ba91c6d996668160d090bbd51588459143889a0eedf131337b037e4e42fb1221fc8ee42dcb26e67229eee4d5d3d1df35dd7107afe0282227c8d4c01f1e97638fc7c70233e2d8119bf479297b9c752aa22ba2a8c72163c33efe9efc2ea66c17f4dc2256a9ec42e37c5b27822740dc1e8e7dd2e824fda7f3765974b87c26f4b4a089c4563d767632157133fde770d0d939af19733a34576185340fec0c82b18941c72bd151b1edbdb811c42f51e1850adb23ee037b75ea79cd8685fff4be4a133d3f9787bf0c210ceae668ccacbd5662c3f13d2e418835ed6009b7a3e3943b73888cb1e4a17310bbe9009e4b256f2a85fa0275312f19895bb6f06523ed434090cc48954b7bddfc8b49f49f7491cba196dd64db96ae970fe1b411be5c96edb5c37e0480f855a60037429725d8c38650bd956d3295c36c015de3c8aab268e860f6660641fd0e778d7c067f95a9ba340a3a98585107cfc40a69b07dbfb3237ee00fdaad21e39b46e49217256c0cca44f5fc24c293416ea99333e7b23ba797031c9bafefe517b188cb3574bf05b2bffff4ebfe4f0d294404e07366b6cb62d5dcf3b1140f74c436ca7ef61cf2bf936c0c867c3fc897b40418050522f0aba41bcc57db38524e51ce8c95b06ca74d4123c2e573afaf1b0a0146593ba8134185a257db957ed786100927894a0269c19b537fcd05f42da9110468b8ced55fccf66a6fc70a48cf96914ecb414c0be277c195ec4fc9dd024c50ca8a99e4a79d7fe6e0ac43cb2d3c25f62642416f57f7b1e76e5e2d652c2867b8bb521c326205de49ab9ac0519599dcfb0513afd702200dc1b7a797eae45366de294362aee6fdd764dc3ca85cf42a1e2b9d35456a3a413894c8acc3715263472fd08d78170e1aa3bb4ec55717f9b3a7c00d948f065cd597117b68e2517921f795f7d9aaf2fe498025d1566383b3c551410b1c167c67e0e046fe4a0695ddb7b83be69a8dbcf5baeeee3ad9237a59611e40a047fc81614973d3e4f8eae6590a3a734f76800c0ae160ca68177686fd7306598178796eaddb1129f573311545984bc04560890f7f1256ce1d05080fcc20fffac2f12570e0998e1ed8f079a32d37d3110638450fd290e16c7fdfff8d08758a0c5cec9783cb10692ba4360e06bd6b6b677e5b2fa2780f9b947baad2b6f1dd0d092ccc0e0633015103b9d51fba530aca0c148f6e65c76743fb05f8376432799ee2bb26ceaca28571682f7dd385c1d0c1cdc2ad17f97cf89ece827d6f4276d35c9dd6d1c5baaf34f267429f83ec842b496a2c0ff173ce068800f9db5f4957bb1f060d8555b17193f33a5adc91fcdc04cc21051586c7f9269304c5de5ae143fe9a5382ca2da5e161c7b93230d6483deca38dea347ae4349cf10ad600939ad53e22ebfb1aacf5cb0f941fc95d0375d50a9c4a5d62ece025783ee705e9254524b95c828bc357a5013ea6c3daa48148d864d50413c8f748618b3eaaea2fcbb1f57b88a19e9ce8b2b71fd2052e6453ae3d23808c53b5273f970c960b8380cc8dde437b748e08a5320b3aaaef1348afc6e49bef1171e49ae366fff8bb7280df6889e99b18d856db7a483f29d9e754c115667fca696d550a7649216c5215724901c2e6c6e70f041d6ff12ddf0c2db0e29b6ade8c18f0f30328c08d7e9e0102f0188661264e7ddce6f494dcc840a791c5439cbe9948496f333cae49f8cf7702398627fa306a564a80c00932bb5bb08850ac448b2e6be1fae23cbf851d167e8a47cffbe4adb1217a3ad6b9ccad6c73b9520dbcccd319c5a60daa3f4c3565762de1b63a274ba86774de53c006bf3d310c7f02fcdcf5421d197f4c60f02de19cfe1edbaaf6a4764b0f4a5892d55e23a3d41524bc30efd8181fa8f29317ea3b1da5eb5022437d0105cc24d41ba9368b7eb49612252904c1d5181725456209c8f41c577ce7e395b20397557a7df51dd0abec230da05cfba2511d66ae0b2aaba8b9e7e2c98af18c265504d8d587b24d11892479066c2d4e45423fa6967e8cc15ab7ff66d47978e7b8e4fef937291190377421bd4323516d3bdeec41ae5bd7d7ce38dff5f8bd3ba0546e181cd5c220b1284d4a87fa56e8c8f3186e44fcb8a7013ed920cac780a028043da7b59171b2ec5fb50176ccfb444fdac113ee09dd42cca748d202a9c8dbd3e19f1b577e3e32878f42082abdbb074851beed3bd77a540a841c8bedc2009730770c4bbe61ae27a95f1172465bc74e848faac5f37ff483e03424376eeb63de1ceaf2c41574022737b498201ac05bbf8ddb64f1ad4a4d5a903c74a3fabbcb82ab90842cbd1964ec25e36c756430e0bce7a97afadfb606bca00700779e198929fe993f39cf1dcedd2fda0d0c961fed0b7de0dc7d4470e21ebdd19156b2584ae8a2dd4ee872b2d0297bd5a367c64a6f6989599d7fe2603722cd03b7538a472dbf694592b96789ee85b0be22f9f45c7887a40da9798f65f72e72c79b974b4ae11dcfd7f735dd352a98b42eeebcbc35a60cb818f740cf751fef50ee62a61afd2e2293cdb6a80882e5a68274380e169f6861241d51d35806c83601fe927b8e51b8ec719f9b3fae450a36b0ba0c6c38324d2e031272ee877ee6cb3d27e95942414075ffa60ae59bad4ba2f053ee76442ab836f8e291ff6e54c1388dade17ad754e8a768f44f42456d500c97c248f4a5f698c1c4c8aa04781e0991cdc2e28b500f26853232b8c553728b64df43dc169b5a49780116b9e72c6234b8184c80f85db9626a0c83ad0152601a19a93c862868d8814fa977f5650db714daf16ff2fbe3ad2e051b8df0f2fa5f5555f278f0db602aa42862ba63f86772b3992d6aa605c27f4d05aef912824f17174540fceb149eb8772f6212179dcb5cc2ebf26b2d559035ae8dc59d16f178f986b026c40f20ea3d4e9c5d71baf7566359bc74ba532d06d4da08b692356da91a267a5e4f491a76e43a80df890ee03b67ec0b7489dad734b9d2763340b92780f830d32bf32960263d86904fc1baf8ef79f017493826f1200c068b1798fee97eac8648c8cfb60c37935b30f826e28b1ac0c25a90b34d36b6a68ec939d11369652645b2f1df3428e7185dab15ddf8ac4447f56b99047b4b01fe396563f4dace5c2f8a6c6cb16c9ab9b878ef4570755a4b9fbaaa551ee080e3345a2de02da4b37e72a439be5ee5572bc46a15ae9688d0a8001cf55df2ef8ef4ea53a3c2a1f43315364fe2743b763d24b08acbe58b7757f33135d516d2529d6ce9a11a0db1fa8a509c853ec196d3f49f009e37e6621cf851af1b53b4dd18996717fdb8e2ef2b218145e90a7b97b448897f5b7e16600cc5d2a0489941f9e6946457010958d7bfeb1666ffa0396346960ddac58b8f2b81899ca0e781c18e99435e545f195d0669c27ad41f738c82463c90886e2aa8696b56ef47e388465a4b445def7fcdd0946591d024f672149d20866804d591dbacc09be74cf283dada39776a278d5d511fc3945a8feae6bf877bbf76ba353247f4f349221d67171a4e2b44efa15fe1e495b3bac89bab516c9d1286777bf51ff68a311dd1880371fba0e9366652499c48665bdb423464fb3939098be93d6254b97b8921954aee682ff434d3f6861a974e928dc9b70d4adf129cfaba76ee384a9103170842647676adb391b7a1ce05bac5d7541658a7040ecca4b979c30b405f7345e7939334de1775229c76c7d7840a7829e35bdde9e689952c0e844ddc87641c6f758a48d851f20c67b8d7ccbb688a28a51df98323500e45d0ae8381acf1bd8b17fec026d491932edfaf4d106b9125bdded6147016c142d88f74c128986f5f57de74a1f8bc306bfcef75543f3b7b09d195d34194171f1d76033b5fb4f0b7dd1e0b17b20d4aa7331ee5799bcc7c454dca45dd72f6a96630e6d05a63d74bd25807c720ce7a8af63c04bad3c92c05442ef10af39744173af45130c8d04ec3fd5f7a4113a02338a0fd00b4840a8923a3c5499449e55020b65b1a9c8fee8c6f766008c3ecd86971b8a0fef21cddeed01b187836b6957ae69e34d5930abd7b0be4b3504da7fc16749c6101bc32ad6317ae02006778fdc9e2175352eb5fc02752a26996ef80d78d13bffc5be7ca7b6deef6941516fac527cd171388df5b58d76bf34eed449e6fa99f7704eb5e6a159b7e64d3adb6387f050fdf0c2be22739cc6ceaa885c9a4a8b5b9af023cbf24d9182aa2c73616ca8b07f75d69cf4386822e05c70a34531e70e17b99e1ab104799b4140a15e388cd92862cbd33b665220a243ba6eeb6369bcdb9d932ac8b3214b8525719a3ed6d58f1f271fd0bda25413cce029620dab1a5dae3369b14cf8aa832f8dc204f7e3dd56d300d1e60857b73fac5bf56ebb93ddd6c03b837d0a946e07e90ec505af5bb7eb47415c3253d11789459e3f011a3aa53881e7e589ad4bec9710fc5a82c1aac28e9317b70d59b0a471cebc56c687e89890e48b84b464787bf554741e9f1fc23b937e5d8f2d19955a2406aa63988972c1f3c299d44c5c71a97fd26dc25b826415bf716aead43a8a5d72e21dbddd7189449cbb4e426542ec759ef10517763d2682581929b42442f4b4371b5a08ebe37aba1126459e96ad1871a523e9690efb0514ca194318adfb15993c846a5d2962de149f36718c0ec1365b23376b66064cc8c4a0ce37a1c0a3c00f33d50c2b67082610e50ae22ddf9fa4f798077490b68b5aef339f2035411180be95d23b0b93f5b96f0e2b8d7413d46ff1740770a0c203097afd41669e91ea004a9b8ca63445722158af93f6a51c7df11daa5999e12e11b974197a05873a9cb9d8f18340d24236e2d4c4b21d179708a2015d13f8e8bb5fdc86fda2efe1365e3d6754bc4bda1f2b4e8fc22a99d78f0c4b633901185bfb1be4ec29a22c7d21958d2d712090a8f7605"}) read$FUSE(r9, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, r10, &(0x7f0000003980)={0x76, 0xfff, 0x58f4897b435e9001}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000003a00)={0x7, &(0x7f00000039c0)=[{0x3, 0x9, 0x6, 0x7cd0b153}, {0xd52, 0x5, 0x3, 0x5}, {0x8, 0xc, 0x1, 0x1}, {0x0, 0xd, 0x7, 0xffff}, {0x8, 0x1, 0xa2}, {0x2, 0x6, 0xcd, 0x80}, {0x1, 0x7, 0x80, 0x6}]}, 0x10) quotactl_fd$Q_SYNC(r3, 0xffffffff80000100, 0x0, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000003a40)={r4}, 0x8) io_uring_enter(r11, 0x45b, 0xf766, 0xe4, &(0x7f0000003a80)={[0x98]}, 0x8) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40046201, &(0x7f0000003ac0)='\x00') 57.440375555s ago: executing program 0 (id=19): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbf0d006ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba6c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759200"/439, 0x1b7}], 0x2, 0x0, 0x0, 0x900}, 0x300}], 0x1, 0x0) 57.360060169s ago: executing program 0 (id=20): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="33ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0db4093532513a76eaae51091a099121e7c3d05ec1071773c2a79f81d090a0ecbe218d4154c07f1ac883f5238bb7ce771f57672f2da3c8efda6acd3f0ffdc9c8f46cbcd656822e32c4d95502e1e57c64f01b3721157d2c18fa885c3e52b9884f36fed6a4fae15e7517f1baef9462cc33e52d58dd17102928f5e693d8ce364815f4e8972f1e371a476d84f07302e021d4d9ba3cad97a73e3a819519414f66ae99a61fcfa34098a4957545b236a7a4079ea2be0b1a8414fd099c9e79e02c90fe589bf5348347e3f415123cdeffc2e29e8cd51ea717f2c2d02ec0b060d85db0552126c49806fd4b1b794763c595dec0c", 0x3cc}, {&(0x7f0000000bc0)="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"/439, 0x1b7}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 57.358214595s ago: executing program 0 (id=22): r0 = creat(&(0x7f0000000400)='./file0\x00', 0x128) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0xa80, 0x0) readlink(&(0x7f0000000240)='./proc/kmsg\x00', &(0x7f00000002c0)=""/15, 0xf) close(0x3) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) userfaultfd(0x80001) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x105) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$DVD_READ_STRUCT(r5, 0x5390, &(0x7f0000001040)=@bca={0x3, 0xbc, "3672ace483bbb4982bff1297dc4ba5ffcca97ee574485edbce3b6d0a592f98cecd3b6e9ab371232b4bb37b2b0a8d877e2313dc7d3c404c4ed4ae604cbe7971007d9b140a9fe85827e62c852a1366bd322ba4d31cf3a82a4d19a635b3ad3b829618973d5667301251f418cd08478850a02517be3f03b3910dd7d82bbb1c78b369c69a41ccd8f11f36097f69c9a0e27eb6052dbf8dad8420a76a8060513300af859d09cd58b106860fa502d46076c1c6619e55e50e547dffb8f3fef351"}) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x101) ptrace$pokeuser(0x6, r4, 0x358, 0xffff8880b840e080) sendmsg$AUDIT_SET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x1, 0x1, r4, 0xd74b, 0x8001, 0xbc, 0x8, 0x0, 0x401, 0xfffffff9}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1e33461290a4d7ef}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 57.241099316s ago: executing program 0 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x10000) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r1, 0x0, 0xb, 0x0, &(0x7f0000000280)) (async) pwrite64(r0, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba901", 0xdd, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='md123', 0x5) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1.1', 0x3) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)='7:0', 0x3) 54.157612797s ago: executing program 3 (id=72): r0 = socket$netlink(0x10, 0x3, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x8b3025) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000200)) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000014c0)={0xf}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r10, @ANYBLOB="00012abd7000fbdbdf250e0000000800040080000000080006000000000014000180080008000000000006000200840000003c000380050008000200000014000600fc02000000000000000000000000000008000300000000001400060000000000000000000000000000000000080004000800000028000180080006006f76660014000300fe80000000000000000000000000003d08000b0073697000200001800600020067000000140003006401010100000000000000000000000058000380140002006572616e300000000000000000001400060000000000000000000000000000000001080003000400000014000600fc000000000000000000000000000001060004000300000005000800050000000c00028005000d0001000000"], 0x128}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x9c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x4}, {0x3, 0xffff}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x2, 0x4000006, 0x2, 0xf, 0x7725f064, 0x4}}, {0xc, 0x2, [0x5, 0x8, 0x0, 0x5]}}, {{0x1c, 0x1, {0xc2, 0x1, 0x7, 0x6, 0x1, 0x4600000, 0x8, 0x4}}, {0xc, 0x2, [0x3, 0x2, 0xb, 0xfff8]}}, {{0x1c, 0x1, {0x0, 0x1, 0xffff, 0x8, 0x0, 0x9d, 0x7, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 53.951077601s ago: executing program 3 (id=73): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) setns(r0, 0x8000000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x4c, 0x14, 0x101, 0x70bda4, 0x25dfdbfd, {0x1, 0x1f, 0x3, 0x10, {0x4e24, 0x4e22, [0x3, 0xfffffffe, 0xdffe, 0xc3], [0x3, 0x0, 0x5, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x4, 0xc3}}, 0x4c}, 0x1, 0x0, 0x0, 0x40080cc}, 0x40000) 53.94768707s ago: executing program 3 (id=75): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x60, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000bc0)="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"/439, 0x1b7}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 53.830832571s ago: executing program 3 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) io_setup(0xa, &(0x7f0000000240)=0x0) io_getevents(r0, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000000)={0x0, 0x3938700}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$afs(&(0x7f0000000140)=@cell={0x25, 'syz0:', 'syz0'}, &(0x7f0000000180)='sys_mnt\x00', &(0x7f0000000280), 0x10, &(0x7f00000004c0)={[{@dyn}, {@flock_strict}, {@flock_strict}, {@flock_write}, {}, {}, {@dyn}], [{@fowner_gt={'fowner>', r2}}]}) write(r1, &(0x7f0000000400)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) io_setup(0xa, &(0x7f0000000240)) (async) io_getevents(r0, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000000)={0x0, 0x3938700}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000200), 0x40, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') (async) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) (async) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) (async) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000440)) (async) mount$afs(&(0x7f0000000140)=@cell={0x25, 'syz0:', 'syz0'}, &(0x7f0000000180)='sys_mnt\x00', &(0x7f0000000280), 0x10, &(0x7f00000004c0)={[{@dyn}, {@flock_strict}, {@flock_strict}, {@flock_write}, {}, {}, {@dyn}], [{@fowner_gt={'fowner>', r2}}]}) (async) write(r1, &(0x7f0000000400)='1', 0x1) (async) 53.560655681s ago: executing program 3 (id=78): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007118000000000000e5000500000000004704000001ed00000f0300b0ff0000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 53.231226395s ago: executing program 3 (id=79): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000bc0)="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"/439, 0x1b7}], 0x2, 0x0, 0x0, 0x900}, 0x1f00}], 0x1, 0x0) 53.184963485s ago: executing program 32 (id=79): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000bc0)="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"/439, 0x1b7}], 0x2, 0x0, 0x0, 0x900}, 0x1f00}], 0x1, 0x0) 47.180275617s ago: executing program 1 (id=143): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da07000000000001090224"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x6, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2190, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x2, 0x2, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000015c0)='syzkaller\x00', 0x10000000, 0x40, &(0x7f0000001600)=""/64, 0x41000, 0x9, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000001640)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r0, r0], 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, r3}, 0x94) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x163342) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f00000000c0)={0x0, "977acc8b3b6d96a6156cd1a79904a6ba710d827630ba515b5e37f0eca0be410e98dc19e2bec9542a8403c759c8877bdc9952a16a6a2a2a3474551037b6376329"}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="47000000002ec489004ce382a600000002000000", @ANYRES32=0x0, @ANYBLOB="20000c000a0001000180c2000000000008000f0001000000"], 0x30}}, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r6, &(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r6, @ANYRESOCT=r7, @ANYBLOB="98defb8d0fb25ced14e6d89413536327b6245984277811e8807bf6ba74ac07a2947509e444e00d0aef9e9d4b59c82a190f3d3d488a9b736968a0cad50ce87d8e3883b03524460002e2f8c7f82909433cf71d0b8707efb1cae41c72f7860ce81b9fa2d5d9ceedd606adf0299903208143fdd6a20d0f33104aeb4fcbdcb9299a9d62701f46ad92d42b6d1bbb93fa16b628151542c531946ae67b246a4b103dad760ec6febfcccda7f8711cf7804cc3cf4ed8af22be582a0cf890420f3eca2c6df1a9d2af58bba3be6c6d38", @ANYBLOB="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", @ANYRES8=r6, @ANYBLOB="34fa08084cb566283e2bdd46b8213fa06be2d413981452d325785a1eefa24a4ce9fcce2347e59b7d206ddd03195a89ba85a8b27352466473c8fd25def1174e3b1c2bb84fa13e9f510f3d46cb0c3e8f3343fc62fff2d3759a8eb34459659f13e4e5f7302427419e245b30e1", @ANYRESHEX=r6, @ANYBLOB="05f16bfb70243ba508c8c9b41afac8fae143443cf1069cb862e859449263773e7bdac47096b831edc7a02994b568a3a8750b0b7ed9e5ee8c5da74c8b934763d6ab034d94f6712cd82377e90a022d8f119160942683b8f6aa6afbb234f0b8cc4b7d174f6b3968314e1c04607f4428c5da6fe24849bdb76b7e8b0810bd75bb7311dcdc3a6f430ca5c24775bcae4ee19982d77b22c3c7c3c7c9ee638d7a485604ec34ced97e40844630e2cf7dc143f3114674ca6a86404de2d010e201", @ANYRES16=r0], 0x1) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)=@arm64={0x4, 0x5, 0x3, '\x00', 0xb8}) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0xea, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x7, 0xf5, 0x8, 0x8, 0x0, 0x9ab1, 0x6, 0x6, 0x3, 0x1, 0x8, '\x00', 0x1, 0x1}) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000140)=0x2000003) ioctl$USBDEVFS_RESET(r8, 0x5514) 44.110895152s ago: executing program 1 (id=184): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}]}}}]}, 0x3c}}, 0x0) (async) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000080)="a65ab0d020dd2c0003e3a7ef5c5b3bb5f231e8f7fa108a5a46c9d7c2ba82725fe53440da2d139a5fb707abcd640ef24ce67b02e098d846f19e72515ace88241f3b09d25c5e115fc47ea1f017382a08b1569a021a18256f091d46503793d788fdcf6ea12867bbb9215cfd8f98dd5b738f7de4fcf65772a9326304936fc94cca60c7b59ac1937e740cf7ce836f", 0x8c) (async) listen(r0, 0xda8d) (async) accept$inet(r0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000003040)=[{&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/47, 0x2f}, {&(0x7f0000002e80)=""/3, 0x3}, {&(0x7f0000002ec0)=""/175, 0xaf}, {&(0x7f0000002f80)=""/147, 0x93}], 0x7, &(0x7f00000030c0), 0x0, 0x800}, 0x80) (async) mkdir(&(0x7f0000000940)='./file0\x00', 0x51) (async) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffea110f4c, 0xd, 0xfffd, 0xf, 0x802, 0x0, 0x0, 0x40, 0x6}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)={@val={0x0, 0xf6}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x4000, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e22, 0x1d, 0x0, @opaque="bb0004c5d4a4463053f1ea07104ef1319b123b5be8"}}}}}}, 0x4b) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r8 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x1, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000040)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200", "0000000000feff00"}, 0x40000007, 0x7}) (async) preadv(r8, &(0x7f0000001640)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x6, 0x4) 43.099221636s ago: executing program 1 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYRES16=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040860) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000005f2991e158bb7ab875b27f5b061c7e5eea540ba3fb76471601b9f1e0efa5edc70793b2b0e8c74cc30d3a5e9ce7222a71", @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b00"], 0x20}}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007118be000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) (async) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) (async) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)={0x0, 0x0, [{0xf88e470f, 0xed, 0xde1f}]}) (async) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) (async) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r12 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r12, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r13 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) r14 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r14, 0xc0585609, &(0x7f0000000080)={0x5, 0x2, 0x4, 0x100000, 0xef8c, {0x77359400}, {0x5, 0x8, 0x3, 0x1, 0x6, 0x1, "57db83ab"}, 0xa, 0x4, {}, 0xe59}) ioctl$HIDIOCGUSAGE(r13, 0xd01c4813, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x40000002, 0x8, 0x44}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r13, 0x50009402, 0x0) 42.431017262s ago: executing program 1 (id=197): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000bc0)="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"/439, 0x1b7}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 42.09406494s ago: executing program 33 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x10000) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r1, 0x0, 0xb, 0x0, &(0x7f0000000280)) (async) pwrite64(r0, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba901", 0xdd, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) (async) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='md123', 0x5) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r5, &(0x7f0000000500)='1.1', 0x3) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)='7:0', 0x3) 42.050068083s ago: executing program 1 (id=199): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4801) mknod$loop(0x0, 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r1, 0xff, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r2, &(0x7f00000003c0)='1', 0x1) 41.929070471s ago: executing program 1 (id=203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x2b) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, 0xff}, {"f096"}}}}}}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 38.131128357s ago: executing program 4 (id=274): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 37.840246446s ago: executing program 4 (id=275): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 37.029292296s ago: executing program 4 (id=278): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x1) r10 = socket$l2tp6(0xa, 0x2, 0x73) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r10, 0x29, 0x5, 0x0, 0x0) bind$l2tp6(r10, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmmsg(r10, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect(r9, &(0x7f0000000500)=@in={0x2, 0x4e22, @multicast1}, 0x80) r12 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r12, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000bc0)="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"/439, 0x1b7}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 36.870674875s ago: executing program 4 (id=281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) r1 = socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x3}}, './file1\x00'}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES32=r1], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001100)=[@iv={0xb0, 0x117, 0x2, 0x95, "be91106d434e2e2459cee6919446dab92d5e1ecab827b53b29967a2f2eb91ca93fb4b7911349d9ce912005bb4f8cb0206e13a324f5193f7e91480d672a89370bd40d40529ee6b232f396624406ad099fd72412ffe7c4d88b6a1c754604aa133be57bbd03b2f0ea39d0fca05520f44358a7199c6c576ea213a184e31a9f380d5f641b5691fe535f342b2b0bf1e3192223c36c154882"}, @iv={0x98, 0x117, 0x2, 0x7d, "0c982f0263d3ed02fbd45ae5d994ba01117fa91eca8781fb6876e74f21a42567048bbc1edf9d2b6613718fef0ef32f5d6480fb73cc60cd10e9013788722c33c2311d775ab7d00a931175eb5f664b159f4511991ff44da7ea07fa67c3e60c807abd55a2f253f81555f2d23494df11d1036d8013c36a52953b59f97c1575"}, @iv={0xe0, 0x117, 0x2, 0xc6, "a3d0bcc6a0a5e37ca03b8b3edb15ab62ab09403f441dd59d26a8e3608f91a30fd48f8344df8bdaade8c56a2b7322365dc163426f42cbc4bbd5d618a304aed44bfca21d123c2807f6a676074916f63d24db0728f401231ef4b3233671c38144f502497f53b21f3b1a33c501dfd3a1e47c9161c58b04c31956bf621c4ecbdc177fcec0231c712dfa49dba7cea8660cc12dc095f2cec1e489ffad0ea44b3361c00aac4c8c72405830a450a98536533e4d6d8228c1c8a720caa064fce6a3cc78a812e1dbadeab4c7"}, @op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb5, "e2a1a1bdd4fdfcff7cf5b3f48f54c658924c99595139235aedb2341f857047a6286ff1aa9fef0b8184eb718bf816cc5112224c3290c950cd524a534fcd3bb76f786deb2017a294b045bf10d2f7abdb3a831f6821cf5ea06c88dfe448da18e6a169cd1e6e9d1e87b4bb9de18034884e636fa3c2ef4664563d61834ce6435cf233d32d1ae233b25916e13454c440c071cc3166ba553657ad1dcc5da96ab449ba9d50d6150705cfe0633fa92ed6e9f7f9122076c59fc9"}, @iv={0x50, 0x117, 0x2, 0x3b, "cfee63ffb4bb357e0e0a1531052ac97bccd26eeda7b66c3e982c4a36dbf779d51f6e7b6b12573b1d9b90064ca1ad6783b0d8beec16dda5f651eef2"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}], 0x390, 0x840}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000014c0)="ee3ad0c038d0ea0277c90dd969e88059a4cc42771bc1a45555281b6fa6146d0d2cfbadc87e8d36e7985c007b0609fbaf76a247", 0x33}, {&(0x7f0000001540)="1ede3b4c8bd83f67eb31a98a637ace729e445635fc325ef6f0dac8300240c4ab48568fd94b0bc024661b", 0x2a}, {&(0x7f00000016c0)="60f0179c09ae701615139a2066dd23d5b2b1b7ec79ba7dc9fcb8dea6f976fed7a8d4583c928270e0031bd61c2fdc6ffb947b7483baf2068ccb43db5dac2465994ce45bba10286f98025d192f6fe1d9080e0cbcdaf6a5c47ca3b96909c90aad33444152d07172497637bdacaa627334732adc1a98cad291b1ddd6d980139dda86a054cca29ee49dc0cce97f8973e350b8f146241a0c3f91d80959c00dab7c9461093ebeff20c6d9a0510b3c521bf4832d9f821c5aeab0866e590ccba88a06f059", 0xc0}, {&(0x7f0000001780)="f149a6ffae52c3e461db8f55bc76709f57d64c9542a4487fb10e905250325a2499837197f911cbf5498dd2675e6176ceee93f74ac550f9b6893d7322823b641e99fa8aaf5ebb53674dd60dd1c2b06b719c877a3a682ce165ac42b310b49f037f0936cc094a04b4285613e59615793c859dfca354", 0x74}, {&(0x7f0000001800)="56593b97fe3f5935e7fd629e3be0a5b1e5442bcb9202b7d3981658f2a9a42150c089d332d1206c65491d5e428c07d895ec3d37e3ede0e59d573405c6378936a889de101dc86bcad8f9e7f6733d46fb9873295629a5df5680b70c4cccbb87b7c6fc9f00398319a80682f308703f46933ed7cf18c1ad9a8bd3b98bd28fb38057bd4ad47e652b5f2418583bc8661b99c6952a6639915291061b3b25c90792158cf7b93550cdf5981c76261f86910723279a732c854b7d1fe136310ecc561a3c29a2b82838c8a328963261d0665d05232e3979102e09b69a9efd0973ee23a61e", 0xde}, {&(0x7f0000001900)="7479d2bb9a413da25934e47bb56f35dd1422e5fab611c9215d448358e18a6c9f5a009e4811e4ebdbc9f332a086c682ce30226c993f03057d3d8d3cea47a1c918016c4e8cf3f3cf70a1c5c908beb8bb702767f60783d12451c2d7db0c88c0b73ce6b435bb95b53dd9eab675a63aa50cc4b8bb80185de63f5cb4dafc00088ad7f5204ebbc2f1c3b13ac734bc65bde4d1f66b81da41912564e17898cdece2fffd48a1dac5f5f1dbdea32bfe1b05ea3e0367ad48b2d8563c3fb0220e5a17f86f9f153d", 0xc1}], 0x6, &(0x7f0000001a80)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x3e91816a0d829fc0}, {0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001b00)="1aac875d9f3652d4a6f76b4865f4d41dbcf543abb28c4b80eccc5f30f9e204161e626a5212ee5319edd1f8e1e9329d04cf8e310ae09578a5c9271ffdefe7eba575352d113563a5cfdc7c69ad7fb62d2c68fca987b2da6fc13ef7f07f7d0c0ca444eed5a3229e77c83c9aa69b0817ef0e3d113c5f646bf81cff31349f1e67b3da77aba786502d888fe126103de80d50cb4b4b34d23adbd68d0bdd3118fb660050b9c07292cd3cbe5216", 0xa9}, {&(0x7f0000001bc0)="6f1b21ebe0be7ac55cc893badd60870ea55ac99e52faaef76f823fbb24d5c578ec3a7f85c7a6da8e3312a9f136a43c93c8e278ca111da32f3626a7964ba01391e3c96b67a8f36f739ddf0aa6c4ed7f25faab81669cba2eee61349aa39e5efd4f54b7c0e056b4385a172b08e188274e29933a723a481b1a5b03ee54b19c8692f45a601c9669b069868e37b75aac025ef09b1f836bf967aba731001c0aacec4eba711b6c372394176443442ffce919a50c66a8eef5d09092dbe982", 0xba}, {&(0x7f0000001c80)="62252af98e3a165ade8cd2ad958c9a6e5b9f765c7d91c1c9d7527a01be9fdd98b5a16a7d328a99d52ebc71a8ae720be7c3b17ddc420eee135c2f20ad04cf082d92a4b3e72c886de9f8c477100bc9fb3d5d7f6fd271887078d4b14935fe8d5cc29b18427eccc1c0a6d6ccd24832591bc7ad957db5d3eeb4405c5c18681dc91e9770494857819df9e36e03e28bea01a397532aea860317262a9ab720ae6514c60c82d1501c662c5ca72ee093cfdacd6790805efa98f69186d5489016fe422924e673655291408325", 0xc7}, {&(0x7f0000001d80)="590c26fcaec995f53109986430af5b963c4568411d220c016971c83824f1e046ec38635f3474bd69366290c587e4aaf2b79a9519d6f355610b003ac5aaea133b456834032d9926921f0cfea45979c5309fc000af796c67", 0x57}, {&(0x7f0000001e00)="fa816050fae2331079636905b8b3905169d8ffce023ff2d44e7d4e88517031330a6f76ebbde4e1fa1dc60dff1e1121bff4d0cc5bbf9ce61587d30695e3f98786c27fc581b53316b52e1b8c8df63b36aa32a6396b4d5d1dffd1c23b41d8ea7e8b059e3aff742f96f43faad4fcc98945af58d156ba5501d01f4a3d17803c0e9a06a8eff8e5a45f13e8411ff227939077abe5057f5755254f150e96f13c55f94b35177b582db0d7c329a7", 0xa9}, {&(0x7f0000001ec0)="22062d340a0b9442b6cd8d80b3bc474fdd26d9fb74ff0d231ece331c500f060aa232fc14f32fd5de20cea721d206fd93710dbeed23711c3c1c0409e2a277a1fd427ff54673740ec6046f3f33bce69fb42b1aed7f28950d0ae24cbed7785b5c7cca57d8a72c657ac7fca213332d831056547324acbea0fb94e6668236044a67672e5dd6da21ff40067e99cd643bea8d6f25480bb0fa0a2aaae891497ca2214161355a56051784499cd32f34d4540bb3412f60b96934cb7b6728be05cb71ddaafff355c7c199f4b296", 0xc8}, {&(0x7f0000001fc0)="9bc347d867a07c717137c5bb4f7ecd11dbe9457a75fface00c8e1868cc97ee9511759de18d3fd60f436da5ab5623286e816f295e9fd2d3ae1e24ccbbb589c940e0f2c5cbd0126b5eafd104ef03469859788157539b7ac7addc139b2aa7da3e7c9831171b88dcf24e63414fd703bfb39e82ee3a967ef16ca5b47faa4664cc33034b0cc75d1462941035c99987ad1e5e7c652f6baf34a95d2486e3584469a01f912618957e697e34c9a0e050565b0de9da779261f8cdc08ad5b5714585a5869d00184fda3dbdc93a5e11a0ccea5342c30102676983b40244550a555383", 0xdc}, {&(0x7f00000020c0)="52492c1c8ea99ebd04508678d5437f0640ae38be106cf4bfb22241349a7ea71a935448c066fb702489d1310fdf6f7a108ff961d047f778c23c654103217aec64e299afefdb5e6e8733a38b54991dffaea3c42c022bd8c9768041eaa611f8b340274043aa6b3689505eb3bc5ecc30e420bd7f8bc7c1945a581ab78028be440417b8a3b598d790a9", 0x87}], 0x8, &(0x7f0000002200)=[@assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xd8, 0x117, 0x2, 0xc1, "a72c290ec8ad18e076ec773ca1bd30d7d7f73c8f5caa7f6c8f801b90c81b415ddb3e7aacde302177ba8d5a82589886f07c6238d43ce1351ea0209b7b48bcd0b52f762ab50bad7e90f569db7e78f9268d81a1aa8f80a38ff0d87f3cbe80d186ae92efc381f7bde8061daecfefc47d9f635e653b995ecaa588995800766530b5013fd2e5923a6d31481464df196c70c33dc880e42a50989eb028945946feaad171165e084775cbe3ef3f6d3f8472376f6bae090c36e085baf15110b9c48c4b27d4f0"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x138, 0x40}], 0x3, 0x0) 35.988238896s ago: executing program 4 (id=302): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='cramfs\x00', 0x204041, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000840)={0x54, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x8}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000bc0)="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"/439, 0x1b7}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 35.670891381s ago: executing program 4 (id=307): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}}}}}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x5, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x7, 0xa2b9, 0x6, 0x7, 0x0, 0x6, 0xfc000003, 0x403, 0xbbf, 0x3, 0x6, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x126, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0x80000ff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x3, 0x8001, 0x1, 0x8, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000001, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0xffffffff, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xca, 0xfff, 0x10000a, 0x4, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x31, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x0, 0x2000803, 0xffffbfff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x545c, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}}}}}}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x5, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x7, 0xa2b9, 0x6, 0x7, 0x0, 0x6, 0xfc000003, 0x403, 0xbbf, 0x3, 0x6, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x126, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0x80000ff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x3, 0x8001, 0x1, 0x8, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000001, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0xffffffff, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xca, 0xfff, 0x10000a, 0x4, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x31, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x0, 0x2000803, 0xffffbfff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) (async) ioctl$sock_SIOCOUTQ(r1, 0x545c, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 35.634391175s ago: executing program 34 (id=307): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}}}}}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x5, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x7, 0xa2b9, 0x6, 0x7, 0x0, 0x6, 0xfc000003, 0x403, 0xbbf, 0x3, 0x6, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x126, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0x80000ff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x3, 0x8001, 0x1, 0x8, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000001, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0xffffffff, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xca, 0xfff, 0x10000a, 0x4, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x31, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x0, 0x2000803, 0xffffbfff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x545c, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @empty, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x8, 0x24, 0x66, 0x0, 0x4, 0x21, 0x0, @loopback, @multicast1}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x6, 0x0, 0x0, 0x7, 0x3, "3abd73", 0x70, ' Y\b'}}}}}}, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x5, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x7, 0xa2b9, 0x6, 0x7, 0x0, 0x6, 0xfc000003, 0x403, 0xbbf, 0x3, 0x6, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x126, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0x80000ff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x3, 0x8001, 0x1, 0x8, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000001, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0xffffffff, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xca, 0xfff, 0x10000a, 0x4, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x31, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x0, 0x2000803, 0xffffbfff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) (async) ioctl$sock_SIOCOUTQ(r1, 0x545c, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) dup(r2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) 26.344611103s ago: executing program 35 (id=203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x2b) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x16, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, 0xff}, {"f096"}}}}}}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 6.248784084s ago: executing program 5 (id=479): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr=0x1, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], 0x3}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "a2f3"}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 6.16914973s ago: executing program 5 (id=481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x58}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'ip6tnl0\x00', 0x1}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='ip6tnl0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000a0a0500000000000000000002000008080006400000000008000340000001050c000b4000000200000004e90800054000000034080008400000000109000100"], 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x24040850) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000004c3a4000000000000000000000000000000000fe8000000000000000000000000000aa010390780000e5ff5f000000001c0440000000000000000000000000000000000000000000000000000000000000ac141414e000000104d204d200080000"], 0x0) 6.049566755s ago: executing program 5 (id=483): sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080000}, 0x1000c011) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf251b00000008009a0001000000070021"], 0x24}}, 0x40004) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x80, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x1000, 0x30, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{0x198, 0x1, [@m_simple={0xb0, 0x16, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000000, 0x6, 0xffffffffffffffff, 0x4}}, @TCA_DEF_DATA={0xa, 0x3, 'vcan0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x10000000, 0x7f, 0xe}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xeb, 0x2, 0x401, 0xdd}}]}, {0x2d, 0x6, "6fa6f9ed095cb0677dcafb618347e2f4e0421953df3bc7fc96e095e0d16047b1e3e112809c1f0d81a7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0xf2f2a92e329a0d7c}}}}, @m_gact={0xe4, 0x8, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x200, 0x6, 0x50000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x450d, 0x5, 0x8, 0xd7, 0x7}}]}, {0x85, 0x6, "698e7a010b79116730d8ead20f176655a05772ed77e8ca5ae8aca49c2a1b0f841e6d024c7239dd357c869b7913596bf5685a4ceefce81575f5fffbd6a929d1eba23ab56f9b2f7ecfe4c21a9a7a73d5b81fc49ffb9370ac5fba9fa8988f053f00507456f6e5a9c83ec4c976be8556e5f04be5bdf8179063f70ec8adf4cedc37e6f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0xe54, 0x1, [@m_pedit={0xe50, 0x9, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7f, 0x8, 0x8, 0x2, 0x6}, 0x4, 0xc}, [{0x4, 0x0, 0x0, 0x9, 0x1, 0x7}, {0x1, 0x2, 0x9, 0x2, 0xe, 0x2}, {0x7, 0xbe4a, 0x5, 0x4, 0x297, 0x7}, {0xfffffff8, 0x8, 0x100, 0x5, 0x5, 0x5}, {0xe0, 0x8, 0x0, 0x3, 0x8, 0x10001}, {0x9, 0x4, 0xc8, 0x1, 0x47f1, 0x87}, {0xe, 0x2, 0xfffffff9, 0x8, 0x800, 0x5}, {0x5, 0x6, 0x1, 0x9, 0x10}, {0x2, 0x6, 0x5, 0xc, 0x6, 0x20}, {0x9, 0x3, 0xb8, 0x5, 0x7, 0x81}, {0x777, 0x9, 0x2, 0xc, 0x2, 0x3}, {0x9, 0x8, 0x0, 0x7, 0x28ae}, {0x1, 0x6, 0xffffffff, 0x1ff, 0x5b02dc02, 0x6}, {0x10001, 0x200, 0x1, 0x6c68, 0xb, 0x1000}, {0x2, 0x7, 0x5, 0x1c, 0x100, 0x10000}, {0x1, 0xc4c7, 0x58c5, 0x2, 0x9, 0x4}, {0x5, 0x8a0d, 0x3, 0x80, 0xffff, 0x800}, {0x1, 0x7, 0xde2, 0xf, 0x3, 0x80}, {0x3, 0xf, 0x7, 0xbd, 0xfff, 0x7}, {0x7f, 0x40, 0xe0000000, 0x8, 0xc, 0x10001}, {0x4, 0x77, 0x58e1, 0x31, 0x2, 0x4}, {0x0, 0x9, 0x7, 0x4, 0x800, 0x18}, {0x8000, 0x1, 0x1, 0x800, 0x9, 0x80}, {0xf67e, 0x3, 0x9, 0x76f, 0x0, 0x1}, {0x3, 0x4, 0x0, 0x1, 0xb, 0x8}, {0x7, 0xae1, 0x7ff, 0x61b, 0x63de, 0x29}, {0x9, 0x8000, 0x0, 0xa8, 0x5, 0x5}, {0xd0c5, 0x10000, 0x677, 0x7fffffff, 0x3, 0x1}, {0xa, 0xf, 0x8, 0x7, 0xff, 0x7fffffff}, {0x400, 0x0, 0x4, 0x7, 0xffffffff, 0x7}, {0xd, 0x8, 0x9, 0x282c, 0x6, 0x100}, {0x8, 0x6, 0xfffffffe, 0x5, 0x1, 0x5c}, {0x2, 0x7fff, 0x7, 0x7ff, 0x1, 0x7ff}, {0x40, 0x7, 0x6bc19791, 0x0, 0x9, 0x1}, {0xfffffffc, 0x3, 0x2, 0x6b, 0xe7, 0x1}, {0x1, 0x10, 0x6, 0xdf31, 0x7, 0xfffff148}, {0xdd47, 0x7fffffff, 0x6cd9, 0xfff, 0x3e1d, 0x1}, {0x10001, 0x0, 0x8, 0x7, 0x8b, 0x4}, {0x1, 0x3, 0x2, 0x0, 0x5, 0x5}, {0x8, 0x3, 0x2, 0x0, 0x5d97110b, 0xa}, {0x26, 0x1, 0x80000000, 0x6, 0x80000000}, {0x10, 0x7, 0x6, 0xc6, 0x3, 0x3}, {0x3ff, 0x80, 0x0, 0x100, 0xf85, 0x6}, {0x3, 0xffffffc0, 0x0, 0xff, 0x81}, {0xea, 0x10000, 0xfffffbff, 0x9, 0x4, 0x7}, {0x7ff, 0x1, 0x0, 0x9, 0xf, 0x9}, {0xfffffff8, 0x8, 0x9, 0x80, 0x2}, {0x0, 0x8, 0x0, 0x2, 0x1, 0x4886}, {0x8, 0x94, 0x2, 0x2361, 0x1}, {0x536, 0x6, 0xfffffff7, 0xfff, 0x9, 0x1}, {0x4, 0x8, 0x2b3, 0x7, 0x6, 0x9}, {0xe, 0x4, 0xfffffff1, 0xdea3, 0x1ff, 0x4ac65423}, {0x3, 0x8, 0x8001, 0x6, 0xfffffff7, 0x9}, {0x2000, 0x4, 0x0, 0x4, 0x9, 0xf3f5c6e}, {0x0, 0x81, 0x2, 0x40, 0xffffffff, 0x8}, {0x7, 0xd1d8, 0x7, 0x7ff, 0x3, 0x9}, {0xffffffff, 0x1, 0x7, 0x7, 0x0, 0x4}, {0xf, 0x80000000, 0x1, 0x3, 0x5, 0x8}, {0xd6, 0x5, 0x91, 0x3, 0x66, 0x4}, {0x5, 0xffffff80, 0x9, 0x1054, 0x7, 0x8}, {0x4, 0x7, 0x7, 0x1, 0xba67, 0x7fff}, {0x1, 0xc000000, 0x4, 0xfff, 0x4, 0x3}, {0x4, 0x2, 0x3, 0x2, 0xa, 0x8001}, {0x7fff, 0xb2b9, 0x1000, 0x9, 0x6ec00, 0x5}, {0xa, 0x7, 0x3, 0xffff62bd, 0x800, 0x4}, {0x3, 0xa, 0x6, 0x5, 0x7, 0x889}, {0x1, 0xe, 0x3, 0x945, 0x5, 0x3ff}, {0x400, 0x2, 0x1895, 0xe, 0x8, 0xfff}, {0x6, 0x99, 0x5, 0x4, 0x80, 0x5}, {0x9, 0xc, 0x2, 0x7, 0x8, 0xb245}, {0x73d, 0x10, 0x1, 0xb3, 0x5, 0x919}, {0xffffff35, 0x2, 0xfffffffc, 0x5, 0x1, 0x4945}, {0x6, 0x55, 0x967a, 0xe, 0x3, 0x4}, {0x0, 0x0, 0x75, 0x2, 0x8, 0x5}, {0x7, 0x5, 0x400c0000, 0xffffff81, 0x401, 0x8}, {0x922a, 0x9, 0x3, 0x0, 0x6, 0x81}, {0xf, 0x8, 0x1, 0x1, 0x7, 0x4}, {0x2, 0x4, 0x2, 0x4411, 0xffffffff, 0x5}, {0x0, 0xa9e, 0x5, 0x800, 0x4000000, 0x8}, {0xffffff80, 0x5, 0x2, 0x8000, 0x80000000, 0x3}, {0x8, 0x8, 0x4, 0x9, 0xfffffff8, 0x9}, {0x80000001, 0xfffffffe, 0x4, 0x4, 0x1, 0x3}, {0x8, 0x9, 0x8, 0x7, 0x2, 0x80}, {0x7f000000, 0x1, 0x2, 0x80, 0x5, 0x7fff}, {0x75, 0x36, 0x9, 0x4, 0xa1c, 0xb}, {0x3, 0x5a02, 0x4, 0x10001, 0x0, 0x3}, {0xfffff000, 0x6, 0x1, 0x5, 0x5, 0x4}, {0x9, 0x7fff, 0x9, 0x2, 0x6, 0xfffffffe}, {0x79e, 0x3, 0x5, 0x9, 0x1, 0x7fff}, {0x2, 0x8, 0x4, 0x2, 0x2, 0x4}, {0xc8, 0x3, 0x0, 0x5, 0x15, 0x5}, {0x3, 0x6, 0x5, 0x100, 0x5f25, 0x2}, {0x3ff, 0x5, 0x10001, 0x8, 0xd32, 0xf}, {0x9, 0x2, 0x2, 0x7, 0x8, 0x401}, {0x9, 0x6, 0x0, 0xb, 0xc70, 0x7}, {0x40, 0x1, 0x9b9a48e0, 0xc5, 0x2, 0x7fffffff}, {0x7, 0x101, 0xeb, 0x800, 0x1, 0xd2e}, {0x6, 0x7f, 0xffff, 0x9, 0x2, 0x5}, {0x7fffffff, 0x7, 0x6, 0x6, 0x8, 0x8}, {0x5, 0xfffffff9, 0x7, 0xffffffff, 0x7, 0xfff}, {0x1ff, 0x9, 0x9, 0x4, 0x0, 0x4}, {0x9, 0x2, 0x7, 0x400, 0x12, 0x6}, {0x4, 0x8d, 0x4, 0x0, 0x9, 0x9}, {0x5, 0x0, 0x4, 0xfffffff7, 0x7, 0x27}, {0x0, 0x10001, 0x1, 0x8, 0x3, 0xe1}, {0x661266f2, 0x6, 0x2, 0x2, 0x3, 0x9}, {0x9, 0x3, 0x40, 0x6, 0x38c8, 0x5}, {0xe5db, 0x7, 0xffffff01, 0x100, 0x1, 0x1000}, {0xf88, 0x5, 0x40, 0x94c, 0x4, 0x200}, {0x10000, 0x0, 0x6, 0x10001, 0x4}, {0x401, 0x4, 0x1, 0x3, 0x9, 0xffffffff}, {0xb702, 0x6, 0x3ff, 0x7, 0x16620000, 0x2}, {0x49, 0x9, 0xfff, 0x9, 0xffffffff, 0x5a}, {0xb, 0x7, 0x1, 0x5, 0xa6c, 0x8}, {0x8, 0x7, 0x6, 0x61e, 0x6ba, 0x4}, {0xd86, 0x800, 0x4, 0x6, 0x2, 0x1}, {0x4, 0x5, 0x9, 0x7, 0x1, 0x7}, {0x6, 0x7f, 0x2000000, 0x4, 0x4, 0x4}, {0x5, 0x7, 0x9e, 0x0, 0x3, 0xfffffffe}, {0x7, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x100, 0x2, 0x1bc, 0x5, 0x4}, {0x4, 0x8, 0x800, 0x8, 0x10000, 0xb6fa}, {0x8000000, 0xff, 0x6, 0x6, 0x5, 0x9}, {0x89f, 0x0, 0x100, 0x5, 0x3, 0xaa30}, {0x2, 0x1, 0x7fffffff, 0x6, 0x10000, 0x2}, {0x0, 0xb, 0x8001, 0x4, 0x8, 0xe0}, {0x4, 0x36, 0x7, 0xb456, 0x4, 0xc0}, {0x7, 0xd, 0xb3, 0x9, 0x7, 0xffff}], [{0x3, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x5}, {0x4, 0x1}, {0x4}, {0x2}, {0x167297199c82e075, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x6}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x6}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x22d443be4ca0236f}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x4, 0x1}, {}, {}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x4}, {0x7}, {0x3, 0x1}, {0x3, 0x2}, {0x5, 0x1}, {0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x2, 0x1}, {0x7}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x1000}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1, 0x0) 5.088502991s ago: executing program 5 (id=506): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'wlan1\x00', {0x1}, 0x5}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x36) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 4.9292608s ago: executing program 5 (id=512): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f00000003c0)='/dev/ptmx\x00', 0x28100, &(0x7f0000000400)={@align=0x7fff, {0x0, 0x40, 0x5, 0x7fff}}, 0x10, 0x0, &(0x7f0000000480)=0xff}) io_uring_setup(0x427a, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1a37"], 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffbffff0800452e0038006e0000020190780a010102b414141705949078ac1414bb452f0000026607f248010009640101020100"/70], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000a0a0c00000000000000000009000000"], 0x14}}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000100)={{@host, 0x2}, @hyper, 0x0, 0x0, 0x61, 0x1, 0x2000000000000000, 0xffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa00000000000000000000000001000000000000000300000000d5000009000000000001000000000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000ffffffffffffffff00000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000240)={0x0, 0x0}) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) 4.870770424s ago: executing program 5 (id=515): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102000000400c200b1040000102030109026000030103a0020904000000010100000a240112000a000201020904010000010200000904010101010200000905010910000206000725010c0040000904020001010200000904020101010200000905820900020303100725010c08ff03"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1555563c}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x2, 0x40, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'Tj'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x10, 0xfff, 0xc}, {0x6, 0x24, 0x1a, 0x1c, 0x14}, [@obex={0x5, 0x24, 0x15, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x8, 0x6e}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0xbd, 0x8, 0x5, 0xff, 0x4}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc09}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000063d82600010000010100005566778899aabb0800450000140000000001ea0000010203040506070800000c00020006000600894f00000c0003"], 0x58}}, 0x0) 3.560121149s ago: executing program 7 (id=539): r0 = io_uring_setup(0xa86, &(0x7f0000000300)={0x0, 0xf12b, 0x10000, 0x40000, 0x800003d7}) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) listen(r1, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000357e400013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a3100361e000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000440)=0x3) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async, rerun: 64) connect$inet(r2, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) (rerun: 64) r9 = accept$inet(r1, 0x0, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10802, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r11, 0x3ba0, &(0x7f0000000380)={0x48, 0x4, 0x0, 0x0, 0xee, &(0x7f0000000100)="f9161d0b44f81b17662ac0462b79fb5dc8fa69a19b59940830c73a2a2b85e21d14c57e1a37da8c5d0e90d42d7aa569fe2d07d758e8c173d6aafc4066b33fb40ae47b0257539167a801cb91ceb66f156f3221d98fa2f5f5888d78679b5312cde896d806901a5d13e6db03baa631f5d9b132a8d8539195c87d0f1009d403ec440ccaf8464defec15b5f2378b6e0167c75ed094a9583efad5e02d4bc252a37efb0bdd2a220cab610488e062379058baa79449268dda79982f901a787482ad1528d9c8272de0b610d00d80077fbc47ea3bcb2516893bb388538a2972ebca7ada03b5a75dabf4aae21f0bef7596bb7ac0", 0xfffffff8}) (async, rerun: 32) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="1c120000", @ANYRES32=r10, @ANYBLOB="0000000000000000850004003c00000095008ecbf26e22f15fb522c8d08f000000000000d90d52031cd0dec74154963e7ffb4295ad0000008b000200000000"], &(0x7f0000000400)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="0700000015000000", @ANYRES32=0x0, @ANYBLOB="0ae1c0d1463045bd873bd8100f0b83b167219e9931efaae3ba52741b8f292c4e24319eb879d70b7035c463662eb25b66034835242b9874b9101a18082880cf4621b88e48f68d911dd47f6c9d7c10b8aafa736b6cec1c8c21da29f983784ec8af0879134d84410cd1d2136945785aa04a3f77a44bd6f4bb41575699ddec551a221d41de338d7ddfa599f5629bfb01cc633d5f1d8345ec296b2b7041953918569c40fb76e33cf39df0c5b56702f5ec74b0450755ea94aa831d48c32bf33ceb3654b469bd2ef0a2a8b9823ae3ad3f4e11eb894d", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r10, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r9}, 0x20) (async) sendto(r9, &(0x7f0000000700)='ab', 0xfffffcf4, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.66069971s ago: executing program 7 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb70300000800fff8b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.659213282s ago: executing program 7 (id=541): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4210, r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0xbf, 0x0) 2.52072133s ago: executing program 7 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000500000000850000001e000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.520562996s ago: executing program 7 (id=543): syz_open_dev$hidraw(&(0x7f0000000080), 0x7ffffffffffffffd, 0x4002) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x10) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x541b, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) 1.620619173s ago: executing program 2 (id=547): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007118000000000000e5000500000000004704000001ed00000f0300001a0000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 1.540464735s ago: executing program 2 (id=548): syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0x44, 0x48, 0xcf, 0x7}}]}}]}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) syz_usb_connect$uac1(0x3, 0x9a, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x3, 0x80, 0x1b, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1d}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x6, 0x0, 0x6, 0x4, 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0xb, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x3, 0x0, "a8b1"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x2, 0x0, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x4, 0x1, {0x7, 0x25, 0x1, 0x8, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x8, 0x5, {0x7, 0x25, 0x1, 0x8, 0x4, 0x2}}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x24, 0x7f, 0x4, 0x0, 0x9}, 0x65, &(0x7f0000000280)={0x5, 0xf, 0x65, 0x1, [@generic={0x60, 0x10, 0x4, "5805820e5a4a5b450e4cff1fc412b021bd66504acfb0016f5a801eb69a315cf3644b72a653340ebdd622fefc77776df240f2b442c8d2174f895315e8814e2ba59f94299af310dc748c189fef8702fac14003cb89fc6eadfbcf2e6ff88f"}]}, 0x3, [{0xbe, &(0x7f0000000340)=@string={0xbe, 0x3, "0ccad83d29009f4ae0b02063d01c1386e46fde343f75a96645c43a86ed4d64de2993e2b2ddc914351efd6dd6293826df34a9cf24a127d30b362f8c497428b5651450d733b78313191dc8b1b5e0d189b9718d29452c83af570a69574cf7682c171907adee7cd83e787337ee6ab848dcd67c6f7ac6ee069ac41004052a3223a6d3ef386cfe0e194d977d3f0aa720bcb2265a871d33cdfaebf3a7fc6342a8a9ed277b74dfde888297de9b80ff523c807b9ee947dbfa007415a92b03138f"}}, {0xb6, &(0x7f0000000400)=@string={0xb6, 0x3, "bd8a9bb7e5bf783175901312c73448ebbaecfadf55a1b1718a98a859bca753017d16de7324366c577ab5b0d2976aef8d251590f318c6bbb3a397dc1aebc64f9373990e774190c5360e50135c1f67bafcbe2d4fb9abe56eed00a00bc2424530ef2e02fe818302539ef970d3d04d66cf0b90a2afe416a2be12260311a6a35af91c39e0e3a02640c2235734d14cea092e56630c7a50eabce50850803c7338ede95b91e29a162af9253c7852cec363d359044ea669ac"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x43f}}]}) setuid(0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48040}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000}}], 0x2, 0x4004080) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000010900), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x700, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050007000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 890.861661ms ago: executing program 2 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000f00000000850000001e000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 890.128794ms ago: executing program 2 (id=553): unshare(0x2040600) r0 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0000c850220000b801000000b9a6080000b9800000c035000800000f30ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x68}], 0x1, 0x5c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x13, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000180)={0x3}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x8000000000000001, 0x3, 0x1, 0x1000, 0x2, 0xa, 0x101, 0x101, 0x48, 0x4, 0xe9, 0xfffffffffffffffc, 0x22040000000babd, 0x7, 0x5, 0x20000000400eee0], 0x8000000, 0x40110}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x6, 0xfffffffffffffe01, 0xc15b}) 320.723096ms ago: executing program 6 (id=557): setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 320.517796ms ago: executing program 6 (id=558): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0xc0f85403, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x4}) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) fstat(r2, &(0x7f0000005300)) r3 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x9}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000140)) 239.614915ms ago: executing program 6 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb70300000800fff8b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 239.177464ms ago: executing program 2 (id=560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)={0x10c, 0x30, 0x605, 0x0, 0x0, "", [@generic="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"]}, 0x10c}], 0x1}, 0x4000000) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000200200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40800, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) (async) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40800, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x8001}, {0x0, 0x8001}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x8001}, {0x0, 0x8001}}}, 0x24}}, 0x0) 238.717853ms ago: executing program 6 (id=561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mknodat$null(r2, &(0x7f0000000100)='./file0\x00', 0x10, 0x103) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffff7, 0x7fffbffe}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1, 0x2}, 0x10) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x0, 0x2, 0x0, 0x1, @void}}}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x48}}, 0x840) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000104000004020000000000000000", @ANYRES32=0x0, @ANYBLOB="4b02040009a00600140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="a0acc6681528c4f8e61d08b66925b615bcd8664f0f7343bbe51c12b7f4324ffa5bb23409f66997cde6f8b67eb3db3be351956ed608fe7f2f319b05732d40ddb644b518d58e9203a20cb388b96776658830e278037f9c4ed8fae92f884ca08aa080f53dc20db6465d3ea7bd0e62426685d14e30cfa41fe3164a0a9333230134eaa854beddbb"], 0x44}}, 0x0) 150.696585ms ago: executing program 2 (id=562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace_dev_match', 0x88140, 0x22) read$FUSE(r1, &(0x7f0000003180)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000000)="53f7c520edb4291a18ebb61d55e927fa682b4053e825c8a81081b8dcb028e63d04c6b22c284695b6359e528da7c4e62874584a15d3df9aee601503585592ba100f7baf64d9b18420407e8c46f19bc2d686423b51d7d5339a642b3774e54f89c91eaabcfd7f010561f8cd247bce57d56d2b1ad73ba6d1012366807286c9adfebcc916912ef73466206fbce6fbb8a87536275e864c61cef8952eae06540790be16c98c5354971f69fd3077420f3d680a0be1c6c0e2e782c67456cbbdb677c904239021ce94fafc7a954668", 0xca, 0x8, &(0x7f0000000100)={0x77359400}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x23, @remote}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r4, &(0x7f0000000100)=""/157, 0x9d) read(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000081000/0x1000)=nil, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 893.835µs ago: executing program 6 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704001800000000850000001e000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 391.581µs ago: executing program 7 (id=564): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x8001}]}]}}, 0x0, 0x66}, 0x28) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/16, 0x10}], 0x1}, 0x3}], 0x1, 0x22, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b8, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "bcc4ac5c433135723a917fbd122474f366f83cce813a70fa0ac91985eb662b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1d07}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000805) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x20, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x24, r7, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x48000) prctl$PR_CAPBSET_DROP(0x18, 0xf) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r10 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r10, 0x0, 0x61, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x28) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r9}, @CGW_SRC_IF={0x8, 0x9, r12}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r12, {0x1, 0xffff}, {0xffff}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 0s ago: executing program 6 (id=565): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="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", 0x3cd}, {&(0x7f0000000bc0)="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"/439, 0x1b7}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 601][ T6170] __x64_sys_sendmmsg+0x9c/0x100 [ 56.261612][ T6170] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.261624][ T6170] do_syscall_64+0x123/0x790 [ 56.261639][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.261651][ T6170] RIP: 0033:0x7ff53239e159 [ 56.261660][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.261670][ T6170] RSP: 002b:00007ff53332e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.261681][ T6170] RAX: ffffffffffffffda RBX: 00007ff532625fa0 RCX: 00007ff53239e159 [ 56.261688][ T6170] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000004 [ 56.261695][ T6170] RBP: 00007ff53332e090 R08: 0000000000000000 R09: 0000000000000000 [ 56.261701][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.261708][ T6170] R13: 00007ff532626038 R14: 00007ff532625fa0 R15: 00007fff230200a8 [ 56.261727][ T6170] [ 56.324590][ T6126] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.332573][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.333002][ T6126] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.338484][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.339161][ T6126] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.343832][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.344811][ T6126] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.348371][ T6126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.408485][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.417773][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.426464][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.426530][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.436080][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.436195][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.463065][ T5444] 8021q: adding VLAN 0 to HW filter on device eth5 [ 56.515064][ T6187] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.553094][ T6191] jffs2: notice: (6191) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.691532][ T5444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.771529][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.915838][ T6126] veth0_vlan: entered promiscuous mode [ 56.919558][ T6126] veth1_vlan: entered promiscuous mode [ 56.938543][ T6126] veth0_macvtap: entered promiscuous mode [ 56.942035][ T6126] veth1_macvtap: entered promiscuous mode [ 56.958415][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.964140][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.997463][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.997512][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.997545][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.997578][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.009645][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.009660][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.032854][ T6227] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.044423][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.044480][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.081958][ T6229] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.143108][ T6240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.156748][ T5735] Bluetooth: hci1: command tx timeout [ 57.194956][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.95'. [ 57.205251][ T6243] binder: 6242:6243 ioctl 4004662b 200000000100 returned -22 [ 57.208866][ T6243] binder_alloc: 6242: binder_alloc_buf size 12312 failed, no address space [ 57.213110][ T6243] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 57.310084][ T6256] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.310822][ T6256] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 57.352468][ T6259] netlink: 96 bytes leftover after parsing attributes in process `syz.4.101'. [ 57.355296][ T6259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3072 sclass=netlink_route_socket pid=6259 comm=syz.4.101 [ 57.424234][ T6265] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.575635][ T6279] netlink: 27 bytes leftover after parsing attributes in process `syz.2.108'. [ 57.646061][ T6284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 57.647262][ T6284] FAULT_INJECTION: forcing a failure. [ 57.647262][ T6284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.647282][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.1.109 Not tainted syzkaller #0 PREEMPT(full) [ 57.647294][ T6284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.647301][ T6284] Call Trace: [ 57.647305][ T6284] [ 57.647309][ T6284] dump_stack_lvl+0x100/0x190 [ 57.647338][ T6284] should_fail_ex.cold+0x5/0xa [ 57.647354][ T6284] _copy_to_user+0x32/0xd0 [ 57.647374][ T6284] simple_read_from_buffer+0xcb/0x170 [ 57.647389][ T6284] proc_fail_nth_read+0x1af/0x230 [ 57.647403][ T6284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.647417][ T6284] ? rw_verify_area+0xce/0x6d0 [ 57.647433][ T6284] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.647447][ T6284] vfs_read+0x1e4/0xb40 [ 57.647457][ T6284] ? lock_acquire+0x1d1/0x380 [ 57.647470][ T6284] ? __fget_files+0x34/0x3d0 [ 57.647483][ T6284] ? __pfx_vfs_read+0x10/0x10 [ 57.647492][ T6284] ? find_held_lock+0x2b/0x80 [ 57.647507][ T6284] ? __fget_files+0x215/0x3d0 [ 57.647521][ T6284] ? __fget_files+0x21f/0x3d0 [ 57.647537][ T6284] ksys_read+0x12a/0x250 [ 57.647547][ T6284] ? __pfx_ksys_read+0x10/0x10 [ 57.647561][ T6284] do_syscall_64+0x123/0x790 [ 57.647577][ T6284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.647589][ T6284] RIP: 0033:0x7ff53235e98e [ 57.647617][ T6284] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.647628][ T6284] RSP: 002b:00007ff53332dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.647640][ T6284] RAX: ffffffffffffffda RBX: 00007ff53332e6c0 RCX: 00007ff53235e98e [ 57.647646][ T6284] RDX: 000000000000000f RSI: 00007ff53332e0a0 RDI: 0000000000000005 [ 57.647653][ T6284] RBP: 00007ff53332e090 R08: 0000000000000000 R09: 0000000000000000 [ 57.647659][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.647665][ T6284] R13: 00007ff532626038 R14: 00007ff532625fa0 R15: 00007fff230200a8 [ 57.647679][ T6284] [ 57.679659][ T6288] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.036551][ T5735] Bluetooth: hci2: command 0x0419 tx timeout [ 58.126647][ T851] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 58.277301][ T851] usb 7-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice=88.72 [ 58.279577][ T851] usb 7-1: config 14 has an invalid interface number: 153 but max is 1 [ 58.279595][ T851] usb 7-1: config 14 has an invalid interface number: 108 but max is 1 [ 58.279605][ T851] usb 7-1: config 14 has no interface number 0 [ 58.279613][ T851] usb 7-1: config 14 has no interface number 1 [ 58.279644][ T851] usb 7-1: config 14 interface 108 altsetting 3 endpoint 0xA has an invalid bInterval 249, changing to 4 [ 58.279657][ T851] usb 7-1: config 14 interface 108 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 58.279670][ T851] usb 7-1: config 14 interface 108 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 58.279682][ T851] usb 7-1: config 14 interface 108 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 58.279693][ T851] usb 7-1: config 14 interface 153 has no altsetting 0 [ 58.279702][ T851] usb 7-1: config 14 interface 108 has no altsetting 0 [ 58.282883][ T851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.282898][ T851] usb 7-1: Product: syz [ 58.282906][ T851] usb 7-1: Manufacturer: syz [ 58.282913][ T851] usb 7-1: SerialNumber: syz [ 58.499340][ T43] kauditd_printk_skb: 73 callbacks suppressed [ 58.499492][ T43] audit: type=1400 audit(1788589519.206:366): avc: denied { mount } for pid=6299 comm="syz.2.116" name="/" dev="ramfs" ino=12097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 58.514509][ T5829] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 58.686549][ T5816] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 58.775188][ T5829] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 58.783981][ T43] audit: type=1400 audit(1788589519.486:367): avc: denied { create } for pid=6312 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.785026][ T43] audit: type=1400 audit(1788589519.486:368): avc: denied { write } for pid=6312 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.808557][ T43] audit: type=1400 audit(1788589519.516:369): avc: denied { listen } for pid=6312 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.810577][ T43] audit: type=1400 audit(1788589519.516:370): avc: denied { accept } for pid=6312 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.849280][ T5816] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 58.850160][ T5816] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 58.850175][ T5816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 28719, setting to 64 [ 58.851955][ T5816] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.851967][ T5816] usb 9-1: Product: syz [ 58.851974][ T5816] usb 9-1: Manufacturer: syz [ 58.851981][ T5816] usb 9-1: SerialNumber: syz [ 58.855298][ T5816] usb 9-1: config 0 descriptor?? [ 59.236511][ T5735] Bluetooth: hci1: command tx timeout [ 59.267717][ T6305] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled [ 59.271302][ T5622] usb 9-1: USB disconnect, device number 2 [ 59.277040][ T5829] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 59.664765][ T43] audit: type=1400 audit(1788589520.366:371): avc: denied { read write } for pid=5736 comm="syz-executor" name="loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.664814][ T43] audit: type=1400 audit(1788589520.366:372): avc: denied { open } for pid=5736 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.664891][ T43] audit: type=1400 audit(1788589520.366:373): avc: denied { ioctl } for pid=5736 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=657 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.698019][ T6324] capability: warning: `syz.1.120' uses deprecated v2 capabilities in a way that may be insecure [ 59.900812][ T43] audit: type=1400 audit(1788589520.606:374): avc: denied { setopt } for pid=6333 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.942834][ T43] audit: type=1400 audit(1788589520.646:375): avc: denied { read } for pid=6335 comm="syz.4.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.088497][ T6340] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.089636][ T6340] file system registered [ 60.092659][ T6340] 9p: Bad value for 'rfdno' [ 60.112289][ T6126] ffs_data_put(): freeing [ 60.271845][ T6346] veth0_macvtap: left promiscuous mode [ 60.279159][ T5735] Bluetooth: hci2: unexpected event for opcode 0x041b [ 60.529739][ T6373] syz.4.133 uses obsolete (PF_INET,SOCK_PACKET) [ 60.592668][ T5444] veth0_macvtap: entered promiscuous mode [ 60.678673][ T1349] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 60.763549][ T5939] IPVS: starting estimator thread 0... [ 60.846897][ T6398] IPVS: using max 43 ests per chain, 103200 per kthread [ 60.884611][ T6300] ceph: No mds server is up or the cluster is laggy [ 60.996245][ T6420] net_ratelimit: 5 callbacks suppressed [ 60.999743][ T6420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.084177][ T851] usb 7-1: USB disconnect, device number 2 [ 61.286433][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.326485][ T5735] Bluetooth: hci1: command tx timeout [ 61.438877][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 61.442166][ T10] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 61.445980][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.451925][ T10] usb 6-1: config 0 has no interfaces? [ 61.453376][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.460077][ T10] usb 6-1: config 0 descriptor?? [ 61.522832][ T6436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.633778][ T6441] gfs2: error -5 reading superblock [ 61.647476][ T6441] ufs: You didn't specify the type of your ufs filesystem [ 61.647476][ T6441] [ 61.647476][ T6441] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 61.647476][ T6441] [ 61.647476][ T6441] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 61.648028][ T6441] ufs: ufstype=old is supported read-only [ 61.649644][ T6441] ufs: ufs_fill_super(): bad magic number [ 61.887738][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.894721][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.898416][ T6449] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.901169][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.901297][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.901372][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.901446][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.901525][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.901624][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.901699][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.901816][ T6447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 61.907746][ T6446] kvm: Disabled LAPIC found during irq injection [ 62.142053][ T6474] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 62.142086][ T6474] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 62.148333][ T6474] vhci_hcd vhci_hcd.0: Device attached [ 62.169129][ T6480] binder_alloc: 6479: pid 6479 spamming oneway? 1 buffers allocated for a total size of 4096 [ 62.227090][ T6488] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.336671][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 62.386956][ T5880] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 62.396536][ T10] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 62.559995][ T5880] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 62.564049][ T5880] usb 7-1: config 0 has no interfaces? [ 62.564100][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.571681][ T5880] usb 7-1: config 0 descriptor?? [ 62.614665][ T6502] input: syz1 as /devices/virtual/input/input7 [ 62.733778][ T6504] XFS (nbd4): SB validate failed with error -5. [ 62.776947][ T6477] usbip_core: unknown command [ 62.777037][ T6477] vhci_hcd: unknown pdu 0 [ 62.777071][ T6477] usbip_core: unknown command [ 62.781857][ T6474] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 62.783138][ T5807] vhci_hcd vhci_hcd.2: stop threads [ 62.783333][ T5807] vhci_hcd vhci_hcd.2: release socket [ 62.784476][ T5829] usb 7-1: USB disconnect, device number 3 [ 62.786584][ T5807] vhci_hcd vhci_hcd.2: disconnect device [ 62.792187][ T6492] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.143' resets device [ 62.857670][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 62.957577][ T6525] Trying to write to read-only block-device nullb0 [ 63.182981][ T6530] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.397238][ T6545] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 63.407331][ T5735] Bluetooth: hci1: command tx timeout [ 63.425632][ T6545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.435450][ T6545] bond1: (slave geneve2): making interface the new active one [ 63.438586][ T6545] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 63.491542][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 63.491750][ T6553] syz_tun: refused to change device tx_queue_len [ 63.555324][ T43] kauditd_printk_skb: 66 callbacks suppressed [ 63.555721][ T43] audit: type=1400 audit(1788589524.256:442): avc: denied { mount } for pid=6546 comm="syz.2.181" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 63.555751][ T43] audit: type=1400 audit(1788589524.256:443): avc: denied { search } for pid=6546 comm="syz.2.181" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.555772][ T43] audit: type=1400 audit(1788589524.256:444): avc: denied { search } for pid=6546 comm="syz.2.181" name="events" dev="tracefs" ino=4049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 63.560338][ T43] audit: type=1400 audit(1788589524.266:445): avc: denied { write } for pid=6546 comm="syz.2.181" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 63.560368][ T43] audit: type=1400 audit(1788589524.266:446): avc: denied { open } for pid=6546 comm="syz.2.181" path="/36/tracing/events/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 63.682824][ T43] audit: type=1400 audit(1788589524.386:447): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 63.719995][ T6559] e1000e 0000:00:02.0: MSI/MSI-X disallowed for future drivers [ 63.956622][ T5829] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 64.044642][ T10] usb 6-1: USB disconnect, device number 3 [ 64.106994][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 64.109262][ T5829] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 64.110625][ T5829] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.110647][ T5829] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.110666][ T5829] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 64.110685][ T5829] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 64.110705][ T5829] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 64.110723][ T5829] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.110754][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.148920][ T43] audit: type=1400 audit(1788589524.856:448): avc: denied { accept } for pid=6560 comm="syz.1.184" lport=40232 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.318055][ T5829] usb 7-1: GET_CAPABILITIES returned 0 [ 64.318120][ T5829] usbtmc 7-1:16.0: can't read capabilities [ 64.432302][ T6584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.522681][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.526887][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527118][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527150][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527180][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527209][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527238][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527445][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527481][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527514][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527547][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527762][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527792][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527821][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527849][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.527876][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 64.530760][ T43] audit: type=1400 audit(1788589525.236:449): avc: denied { create } for pid=6558 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 64.539268][ T6592] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.545861][ T5830] usb 7-1: USB disconnect, device number 4 [ 64.665119][ T43] audit: type=1800 audit(1788589525.366:450): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.192" name="(" dev="sda1" ino=2039 res=0 errno=0 [ 64.672706][ T43] audit: type=1400 audit(1788589525.376:451): avc: denied { ioctl } for pid=6597 comm="syz.4.192" path="socket:[12770]" dev="sockfs" ino=12770 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.090609][ T6602] netlink: 'syz.2.193': attribute type 5 has an invalid length. [ 65.103162][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 65.103306][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 65.103391][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 65.103476][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 65.103564][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 65.103647][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 65.103729][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 65.103811][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 65.103895][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 66.048575][ T6619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 66.220582][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.225593][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.231299][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.244411][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.248359][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.322293][ T6649] jffs2: notice: (6649) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 66.490408][ T5807] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.539977][ T5807] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.634583][ T5807] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.647731][ T6632] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.647863][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.647923][ T6632] bridge_slave_0: entered allmulticast mode [ 66.648777][ T6632] bridge_slave_0: entered promiscuous mode [ 66.650339][ T6632] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.650412][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.650469][ T6632] bridge_slave_1: entered allmulticast mode [ 66.651203][ T6632] bridge_slave_1: entered promiscuous mode [ 66.667190][ T6632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.672051][ T6632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.684993][ T6632] team0: Port device team_slave_0 added [ 66.686255][ T6632] team0: Port device team_slave_1 added [ 66.700835][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.700886][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.700937][ T6632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.701950][ T6632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.702064][ T6632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.702080][ T6632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.739583][ T5807] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.760376][ T6632] hsr_slave_0: entered promiscuous mode [ 66.760835][ T6632] hsr_slave_1: entered promiscuous mode [ 66.906412][ T6632] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.916255][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.919048][ T6632] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.923720][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.929006][ T5807] bridge_slave_1: left allmulticast mode [ 66.929058][ T5807] bridge_slave_1: left promiscuous mode [ 66.929186][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.933613][ T5807] bridge_slave_0: left allmulticast mode [ 66.933627][ T5807] bridge_slave_0: left promiscuous mode [ 66.933718][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.040336][ T5807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.045586][ T5807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.052425][ T5807] bond0 (unregistering): Released all slaves [ 67.061818][ T6632] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.069484][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.070202][ T6632] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.073375][ T6632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.139519][ T6632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.145494][ T6632] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.180745][ T6682] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 67.204742][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.204844][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.210166][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.210261][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.241896][ T6686] Unknown status report in ack skb [ 67.275072][ T5444] 8021q: adding VLAN 0 to HW filter on device eth6 [ 67.335460][ T6695] x_tables: duplicate underflow at hook 2 [ 67.430915][ T5807] hsr_slave_0: left promiscuous mode [ 67.433336][ T5807] hsr_slave_1: left promiscuous mode [ 67.433815][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.433839][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.444831][ T5807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.444888][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.452557][ T5807] veth1_macvtap: left promiscuous mode [ 67.452620][ T5807] veth0_macvtap: left promiscuous mode [ 67.452688][ T5807] veth1_vlan: left promiscuous mode [ 67.452733][ T5807] veth0_vlan: left promiscuous mode [ 67.481517][ T6712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 67.664854][ T5807] team0 (unregistering): Port device team_slave_1 removed [ 67.675428][ T6727] futex_wake_op: syz.4.220 tries to shift op by -1; fix this program [ 67.677908][ T6727] FAULT_INJECTION: forcing a failure. [ 67.677908][ T6727] name failslab, interval 1, probability 0, space 0, times 0 [ 67.677928][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.4.220 Tainted: G L syzkaller #0 PREEMPT(full) [ 67.677944][ T6727] Tainted: [L]=SOFTLOCKUP [ 67.677948][ T6727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.677955][ T6727] Call Trace: [ 67.677959][ T6727] [ 67.677964][ T6727] dump_stack_lvl+0x100/0x190 [ 67.677997][ T6727] should_fail_ex.cold+0x5/0xa [ 67.678014][ T6727] should_failslab+0xc2/0x120 [ 67.678032][ T6727] kmem_cache_alloc_noprof+0x92/0x6a0 [ 67.678044][ T6727] ? seq_open+0x55/0x170 [ 67.678057][ T6727] seq_open+0x55/0x170 [ 67.678067][ T6727] kernfs_fop_open+0x590/0xd50 [ 67.678082][ T6727] do_dentry_open+0x6ab/0x14d0 [ 67.678094][ T6727] ? __pfx_kernfs_fop_open+0x10/0x10 [ 67.678112][ T6727] vfs_open+0x82/0x3f0 [ 67.678127][ T6727] path_openat+0x19fa/0x2440 [ 67.678142][ T6727] ? __pfx_path_openat+0x10/0x10 [ 67.678154][ T6727] ? __pfx___up_read+0x10/0x10 [ 67.678166][ T6727] ? do_user_addr_fault+0x7d7/0x12f0 [ 67.678180][ T6727] ? do_user_addr_fault+0x7d7/0x12f0 [ 67.678196][ T6727] do_file_open+0x20e/0x430 [ 67.678210][ T6727] ? __pfx_do_file_open+0x10/0x10 [ 67.678222][ T6727] ? lockdep_hardirqs_on+0x7d/0x110 [ 67.678247][ T6727] ? _raw_spin_unlock+0x28/0x50 [ 67.678257][ T6727] ? alloc_fd+0x471/0x7a0 [ 67.678274][ T6727] do_sys_openat2+0x10f/0x1e0 [ 67.678288][ T6727] ? __pfx_do_sys_openat2+0x10/0x10 [ 67.678301][ T6727] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 67.678318][ T6727] __x64_sys_openat+0x12d/0x210 [ 67.678332][ T6727] ? __pfx___x64_sys_openat+0x10/0x10 [ 67.678352][ T6727] do_syscall_64+0x123/0x790 [ 67.678366][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.678393][ T6727] RIP: 0033:0x7f378355e98e [ 67.678404][ T6727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.678415][ T6727] RSP: 002b:00007f37844559b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.678427][ T6727] RAX: ffffffffffffffda RBX: 00007f37844566c0 RCX: 00007f378355e98e [ 67.678435][ T6727] RDX: 0000000000080001 RSI: 00007f3783609070 RDI: ffffffffffffff9c [ 67.678442][ T6727] RBP: 00007f3783609070 R08: 0000000000000000 R09: 0000000000000000 [ 67.678449][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 67.678456][ T6727] R13: 00007f3784455a90 R14: 00007f3783826090 R15: 00007ffc98dab0a8 [ 67.678471][ T6727] [ 67.685423][ T5807] team0 (unregistering): Port device team_slave_0 removed [ 67.738708][ T6729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 67.755356][ T6727] pci_bus 0000:01: busn_res: [bus 01] is released [ 67.835507][ T6739] fuse: Bad value for 'fd' [ 67.842246][ T6736] pi3usb30532 0-0005: Error reading config register -6 [ 67.844892][ T6736] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05 [ 67.863243][ T6741] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 67.873591][ T5444] 8021q: adding VLAN 0 to HW filter on device eth7 [ 68.016256][ T6632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.127168][ T12] netdevsim netdevsim14 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.219673][ T5444] 8021q: adding VLAN 0 to HW filter on device eth8 [ 68.239629][ T6632] veth0_vlan: entered promiscuous mode [ 68.245412][ T6632] veth1_vlan: entered promiscuous mode [ 68.274355][ T6632] veth0_macvtap: entered promiscuous mode [ 68.277996][ T5089] Bluetooth: hci4: command tx timeout [ 68.286733][ T6632] veth1_macvtap: entered promiscuous mode [ 68.306883][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.317967][ T6632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.328709][ T5807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.383716][ T6788] block nbd2: shutting down sockets [ 68.415970][ T5930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.416022][ T5930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.419859][ T6785] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.448472][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.448535][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.448597][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.448628][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.448636][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.578123][ T6801] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.600045][ T43] kauditd_printk_skb: 28 callbacks suppressed [ 68.600148][ T43] audit: type=1400 audit(1788589529.306:480): avc: denied { write } for pid=6799 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.654050][ T43] audit: type=1400 audit(1788589529.356:481): avc: denied { create } for pid=6804 comm="syz.5.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.659151][ T43] audit: type=1400 audit(1788589529.366:482): avc: denied { write } for pid=6804 comm="syz.5.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.718682][ T43] audit: type=1400 audit(1788589529.426:483): avc: denied { mount } for pid=6806 comm="syz.2.235" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.723558][ T6812] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 68.723905][ T43] audit: type=1400 audit(1788589529.426:484): avc: denied { read } for pid=6806 comm="syz.2.235" name="context-info" dev="tracefs" ino=2487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.778335][ T43] audit: type=1400 audit(1788589529.486:485): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.828988][ T43] audit: type=1400 audit(1788589529.536:486): avc: denied { write } for pid=6817 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.887638][ T43] audit: type=1400 audit(1788589529.586:487): avc: denied { write } for pid=6829 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.908360][ T6833] random: crng reseeded on system resumption [ 68.911111][ T43] audit: type=1400 audit(1788589529.616:488): avc: denied { write } for pid=6831 comm="syz.5.239" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.911155][ T43] audit: type=1400 audit(1788589529.616:489): avc: denied { open } for pid=6831 comm="syz.5.239" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.929345][ T6833] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.932319][ T5444] 8021q: adding VLAN 0 to HW filter on device eth9 [ 68.932365][ T6833] x_tables: duplicate underflow at hook 2 [ 69.036917][ T6844] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.058675][ T6846] capability: warning: `syz.4.241' uses 32-bit capabilities (legacy support in use) [ 69.084533][ T6846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6432 sclass=netlink_route_socket pid=6846 comm=syz.4.241 [ 69.233486][ T6864] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 69.277996][ T6873] cramfs: checking physical address 0x000000002aa00000 for linear cramfs image [ 69.278113][ T6873] cramfs: wrong magic [ 69.279736][ T6873] cramfs: wrong magic [ 69.332893][ T6861] (syz.5.250,6861,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 69.332994][ T6861] (syz.5.250,6861,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 69.423153][ T6888] overlayfs: missing 'lowerdir' [ 69.494193][ T6893] tmpfs: Bad value for 'mpol' [ 69.494430][ T6894] tmpfs: Bad value for 'mpol' [ 69.495642][ T6896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 69.588295][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588436][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588472][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588505][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588537][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588570][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588602][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588641][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588674][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588707][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588740][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588773][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588806][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588838][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588871][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588903][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588936][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.588993][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.589028][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.589061][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.589094][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.589126][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.589158][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590046][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590081][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590112][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590144][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590216][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590248][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590279][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590310][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590341][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590372][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590404][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590435][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590466][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590498][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590529][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590560][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590592][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590623][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590661][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590692][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590724][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590755][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590786][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590818][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590850][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590882][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590913][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590945][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.590976][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.591008][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.591040][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.591072][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.591103][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.591135][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.594961][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.595004][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.595038][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.595071][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.595103][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.595135][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.595168][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.595200][ T6907] bond0: option slaves: interface +dumm{0}º4`ŠÂg¸_{ZX does not exist! [ 69.596680][ T6911] binder: binder_mmap: 6906 200000000000-200000200000 bad vm_flags failed -1 [ 69.812573][ T6919] lo speed is unknown, defaulting to 1000 [ 69.814496][ T6919] lo speed is unknown, defaulting to 1000 [ 69.815317][ T6919] lo speed is unknown, defaulting to 1000 [ 69.946060][ T6919] infiniband syz0: set active [ 69.950141][ T9] lo speed is unknown, defaulting to 1000 [ 69.950451][ T6919] infiniband syz0: added lo [ 69.964597][ T6919] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 69.964677][ T6919] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 69.964734][ T6919] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 69.992283][ T6919] RDS/IB: syz0: added [ 69.998578][ T6919] smc: adding ib device syz0 with port count 1 [ 69.998736][ T6919] smc: ib device syz0 port 1 has no pnetid [ 69.999983][ T5880] lo speed is unknown, defaulting to 1000 [ 70.001375][ T6919] lo speed is unknown, defaulting to 1000 [ 70.139771][ T6945] kvm [6944]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 70.140391][ T6945] kvm [6944]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 70.153386][ T6919] lo speed is unknown, defaulting to 1000 [ 70.203902][ T6947] process 'syz.4.274' launched '/dev/fd/10' with NULL argv: empty string added [ 70.314199][ T6919] lo speed is unknown, defaulting to 1000 [ 70.367590][ T5089] Bluetooth: hci4: command tx timeout [ 70.480871][ T6919] lo speed is unknown, defaulting to 1000 [ 71.123618][ T6953] net_ratelimit: 2 callbacks suppressed [ 71.126295][ T6953] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.154990][ T6959] netlink: 'syz.4.278': attribute type 1 has an invalid length. [ 71.180917][ T6959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.193307][ T6962] Invalid source name [ 71.193356][ T6962] UBIFS error (pid: 6962): cannot open "ubifs", error -22 [ 71.196098][ T6959] gretap1: entered promiscuous mode [ 71.201904][ T6959] bond3: (slave gretap1): making interface the new active one [ 71.205368][ T6959] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 71.212507][ T6959] macvlan2: entered promiscuous mode [ 71.212566][ T6959] macvlan2: entered allmulticast mode [ 71.213026][ T6959] bond3: entered promiscuous mode [ 71.215539][ T6959] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.215901][ T6959] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 71.216052][ T6959] bond3: left promiscuous mode [ 71.241165][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.241260][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.261444][ T6969] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.434053][ T6977] __nla_validate_parse: 27 callbacks suppressed [ 71.434149][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.283'. [ 71.532180][ T6984] CIFS mount error: No usable UNC path provided in device string! [ 71.532180][ T6984] [ 71.532365][ T6984] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 71.740044][ T6988] No source specified [ 71.774927][ T6992] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 71.976181][ T7014] xt_CT: No such helper "pptp" [ 72.128630][ T7026] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 72.167789][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.301'. [ 72.167862][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.5.301'. [ 72.446588][ T5089] Bluetooth: hci4: command tx timeout [ 72.637874][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.639795][ T5735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.640376][ T5735] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.644425][ T5735] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.649871][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.853734][ T7062] lo speed is unknown, defaulting to 1000 [ 73.151603][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.151737][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.151795][ T7062] bridge_slave_0: entered allmulticast mode [ 73.152627][ T7062] bridge_slave_0: entered promiscuous mode [ 73.154248][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.154317][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.154375][ T7062] bridge_slave_1: entered allmulticast mode [ 73.155089][ T7062] bridge_slave_1: entered promiscuous mode [ 73.170171][ T7062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.171687][ T7062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.184325][ T7062] team0: Port device team_slave_0 added [ 73.185676][ T7062] team0: Port device team_slave_1 added [ 73.198364][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.198421][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.198479][ T7062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.200662][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.200672][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.200685][ T7062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.224780][ T7062] hsr_slave_0: entered promiscuous mode [ 73.225291][ T7062] hsr_slave_1: entered promiscuous mode [ 73.225600][ T7062] debugfs: 'hsr0' already exists in 'hsr' [ 73.225617][ T7062] Cannot create hsr debugfs directory [ 73.281960][ T7087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21008 sclass=netlink_route_socket pid=7087 comm=syz.5.310 [ 73.282011][ T7086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21008 sclass=netlink_route_socket pid=7086 comm=syz.5.310 [ 73.319739][ T7087] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 73.349340][ T7086] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 73.376619][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 73.389940][ T7091] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 73.409375][ T7062] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 73.414910][ T7062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.417412][ T7062] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 73.427315][ T7062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.427754][ T7062] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 73.435163][ T7062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.440749][ T7062] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 73.444655][ T7062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.517079][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.528589][ T7062] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.535449][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.535581][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.540676][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.540759][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.546678][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 73.547992][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.553728][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 73.553800][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.553815][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.553828][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.553842][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.553864][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.612544][ T43] kauditd_printk_skb: 50 callbacks suppressed [ 73.612696][ T43] audit: type=1400 audit(1788589534.316:540): avc: denied { write } for pid=7101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.692198][ T43] audit: type=1400 audit(1788589534.396:541): avc: denied { write } for pid=7108 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.784530][ T43] audit: type=1400 audit(1788589534.486:542): avc: denied { setopt } for pid=7081 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.791252][ T43] audit: type=1400 audit(1788589534.486:543): avc: denied { getopt } for pid=7081 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.871318][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.012470][ T7062] veth0_vlan: entered promiscuous mode [ 74.017329][ T7062] veth1_vlan: entered promiscuous mode [ 74.032957][ T7062] veth0_macvtap: entered promiscuous mode [ 74.035408][ T7062] veth1_macvtap: entered promiscuous mode [ 74.047510][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.052151][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.055772][ T5837] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.087018][ T5837] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.097087][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.097705][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.127619][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.127690][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.149199][ T5930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.150823][ T5930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.168354][ T43] audit: type=1400 audit(1788589534.876:544): avc: denied { mounton } for pid=7062 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.420428][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.518040][ T5089] Bluetooth: hci4: command tx timeout [ 74.529855][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.558566][ T7150] ip_tables: iptables: counters copy to user failed while replacing table [ 74.603422][ T43] audit: type=1400 audit(1788589535.306:545): avc: denied { connect } for pid=7156 comm="syz.5.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.617621][ T43] audit: type=1400 audit(1788589535.326:546): avc: denied { write } for pid=7156 comm="syz.5.319" laddr=fe80::acc6:95ff:fe08:3d00 lport=17045 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.619353][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.626274][ T7157] netlink: 'syz.5.319': attribute type 1 has an invalid length. [ 74.626291][ T7157] netlink: 84 bytes leftover after parsing attributes in process `syz.5.319'. [ 74.626303][ T7157] netlink: 'syz.5.319': attribute type 2 has an invalid length. [ 74.626312][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.319'. [ 74.626915][ T43] audit: type=1400 audit(1788589535.326:547): avc: denied { setopt } for pid=7156 comm="syz.5.319" laddr=fe80::acc6:95ff:fe08:3d00 lport=17045 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.628397][ T43] audit: type=1400 audit(1788589535.346:548): avc: denied { read } for pid=7156 comm="syz.5.319" laddr=fe80::acc6:95ff:fe08:3d00 lport=17045 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.661756][ T7160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 74.688625][ T5089] Bluetooth: hci0: command tx timeout [ 74.707779][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.829416][ T7164] CIFS mount error: No usable UNC path provided in device string! [ 74.829416][ T7164] [ 74.829484][ T7164] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 74.837582][ T43] audit: type=1400 audit(1788589535.546:549): avc: denied { bind } for pid=7163 comm="syz.5.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.934359][ T12] bridge_slave_1: left allmulticast mode [ 74.934416][ T12] bridge_slave_1: left promiscuous mode [ 74.934743][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.944009][ T12] bridge_slave_0: left allmulticast mode [ 74.944082][ T12] bridge_slave_0: left promiscuous mode [ 74.944265][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.115173][ T12] bond3 (unregistering): (slave gretap1): Releasing active interface [ 75.127509][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 75.152156][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.162075][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.167396][ T12] bond0 (unregistering): Released all slaves [ 75.172577][ T12] bond1 (unregistering): Released all slaves [ 75.179599][ T12] bond2 (unregistering): Released all slaves [ 75.183446][ T7189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.189169][ T12] bond3 (unregistering): Released all slaves [ 75.205071][ T7183] bond0: entered promiscuous mode [ 75.205121][ T7183] bond_slave_0: entered promiscuous mode [ 75.205243][ T7183] bond_slave_1: entered promiscuous mode [ 75.218102][ T5444] 8021q: adding VLAN 0 to HW filter on device eth10 [ 75.244583][ T7191] Bluetooth: MGMT ver 1.23 [ 75.281043][ T7193] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.349632][ T7205] Cannot find add_set index 0 as target [ 75.351932][ T7208] Cannot find add_set index 0 as target [ 75.395954][ T7212] binder: 7211:7212 ioctl c00c620f 200000000500 returned -22 [ 75.541144][ T5444] 8021q: adding VLAN 0 to HW filter on device eth11 [ 75.591067][ T7235] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 75.642573][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.340'. [ 75.674991][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.340'. [ 75.726315][ T12] hsr_slave_0: left promiscuous mode [ 75.732320][ T12] hsr_slave_1: left promiscuous mode [ 75.733111][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.733191][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.743302][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.746943][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.764043][ T12] veth1_macvtap: left promiscuous mode [ 75.766594][ T12] veth1_vlan: left promiscuous mode [ 75.768953][ T12] veth0_vlan: left promiscuous mode [ 75.848294][ T7247] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.887868][ T7253] overlayfs: missing 'lowerdir' [ 75.901591][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.905724][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.911235][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.914313][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.921724][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.926737][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.933102][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.936430][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.944656][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.945974][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.949215][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.952736][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.956847][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.960154][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.961126][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.962866][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.965104][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.968305][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.970668][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.973479][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.976109][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.978612][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.980746][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.983342][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.985944][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.988119][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.990106][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.992147][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.994246][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 75.996553][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.000741][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.001066][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.003564][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.006105][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.008700][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.010857][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.013247][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.015281][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.017474][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.019728][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.021644][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.023862][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.025888][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.031373][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.031957][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.034584][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.037497][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.039115][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.041814][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.044656][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.049306][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.049800][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.052566][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.055167][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.058078][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.061183][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.063912][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.066732][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.069369][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.071550][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.073844][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.080732][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.081488][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.083768][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.086674][ T7252] overlayfs: failed to resolve './file0/file1': -2 [ 76.102505][ T12] team0 (unregistering): Port device team_slave_1 removed [ 76.122549][ T12] team0 (unregistering): Port device team_slave_0 removed [ 76.144065][ T42] usb 7-1: USB disconnect, device number 5 [ 76.176595][ T50] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 76.272504][ T5444] 8021q: adding VLAN 0 to HW filter on device eth12 [ 76.327112][ T50] usb 10-1: Using ep0 maxpacket: 8 [ 76.335758][ T50] usb 10-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 76.336942][ T50] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 76.336969][ T50] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.339223][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.339243][ T50] usb 10-1: Product: ÐŒ [ 76.339256][ T50] usb 10-1: SerialNumber: à Š [ 76.370246][ T35] cfg80211: failed to load regulatory.db [ 76.495636][ T7284] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 76.536784][ T5089] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 76.601073][ T5444] 8021q: adding VLAN 0 to HW filter on device eth13 [ 76.757182][ T5089] Bluetooth: hci0: command tx timeout [ 77.866015][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.961927][ T7346] netlink: 'syz.6.359': attribute type 21 has an invalid length. [ 77.962025][ T7346] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.962357][ T7346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.962368][ T7346] IPv6: NLM_F_CREATE should be set when creating new route [ 77.962410][ T7346] IPv6: NLM_F_CREATE should be set when creating new route [ 77.962427][ T7346] IPv6: NLM_F_CREATE should be set when creating new route [ 77.962881][ T7346] netlink: 'syz.6.359': attribute type 21 has an invalid length. [ 77.962976][ T7346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.719795][ T43] kauditd_printk_skb: 39 callbacks suppressed [ 78.719912][ T43] audit: type=1400 audit(1788589539.426:589): avc: denied { create } for pid=7358 comm="syz.6.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.836827][ T5089] Bluetooth: hci0: command tx timeout [ 78.911125][ T50] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.918103][ T50] usb 10-1: MIDIStreaming interface descriptor not found [ 78.966317][ T7366] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 78.981579][ T50] usb 10-1: USB disconnect, device number 2 [ 79.027291][ T30] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 79.070038][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.174860][ T7372] netlink: 'syz.5.364': attribute type 2 has an invalid length. [ 79.206286][ T7372] : entered promiscuous mode [ 79.564642][ T43] audit: type=1400 audit(1788589540.266:590): avc: denied { execute } for pid=7379 comm="syz.6.366" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 79.577260][ T43] audit: type=1400 audit(1788589540.286:591): avc: denied { search } for pid=7379 comm="syz.6.366" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 79.577966][ T43] audit: type=1400 audit(1788589540.286:592): avc: denied { ioctl } for pid=7379 comm="syz.6.366" path="/27/trace/error_log" dev="tracefs" ino=2557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 79.614458][ T7383] smc: net device team0 applied user defined pnetid SYZ2 [ 79.615147][ T7383] smc: net device team0 erased user defined pnetid SYZ2 [ 79.729658][ T7394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 79.858173][ T43] audit: type=1400 audit(1788589540.566:593): avc: denied { write } for pid=7401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.915194][ T43] audit: type=1400 audit(1788589540.616:594): avc: denied { write } for pid=7407 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.043145][ T43] audit: type=1400 audit(1788589540.746:595): avc: denied { write } for pid=7414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.104281][ T43] audit: type=1400 audit(1788589540.806:596): avc: denied { write } for pid=7417 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.300412][ T43] audit: type=1400 audit(1788589541.006:597): avc: denied { write } for pid=7421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.385608][ T43] audit: type=1400 audit(1788589541.086:598): avc: denied { write } for pid=7424 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.917006][ T5089] Bluetooth: hci0: command tx timeout [ 81.935558][ T5735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.940638][ T5735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.943882][ T5735] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.950381][ T5735] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.950949][ T5735] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.265333][ T7428] lo speed is unknown, defaulting to 1000 [ 82.335219][ T5837] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.444438][ T5837] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.511468][ T5837] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.574449][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.574607][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.574709][ T7428] bridge_slave_0: entered allmulticast mode [ 82.575712][ T7428] bridge_slave_0: entered promiscuous mode [ 82.578128][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.578196][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.578280][ T7428] bridge_slave_1: entered allmulticast mode [ 82.579736][ T7428] bridge_slave_1: entered promiscuous mode [ 82.607284][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.611534][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.642113][ T7428] team0: Port device team_slave_0 added [ 82.646152][ T7428] team0: Port device team_slave_1 added [ 82.679247][ T7389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.680430][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.680443][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.680463][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.681997][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.682009][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.682029][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.776296][ T5837] team0: left allmulticast mode [ 82.779242][ T5837] team_slave_1: left allmulticast mode [ 82.780513][ T5837] team0: left promiscuous mode [ 82.780530][ T5837] team_slave_1: left promiscuous mode [ 82.780881][ T5837] bridge0: port 3(team0) entered disabled state [ 82.799048][ T5837] bridge_slave_1: left allmulticast mode [ 82.799132][ T5837] bridge_slave_1: left promiscuous mode [ 82.799335][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.813358][ T5837] bridge_slave_0: left allmulticast mode [ 82.813415][ T5837] bridge_slave_0: left promiscuous mode [ 82.813707][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.956667][ T5837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.962912][ T5837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.969605][ T5837] bond0 (unregistering): Released all slaves [ 82.994832][ T7428] hsr_slave_0: entered promiscuous mode [ 82.995576][ T7428] hsr_slave_1: entered promiscuous mode [ 82.995886][ T7428] debugfs: 'hsr0' already exists in 'hsr' [ 82.995899][ T7428] Cannot create hsr debugfs directory [ 83.053877][ T7468] FAULT_INJECTION: forcing a failure. [ 83.053877][ T7468] name failslab, interval 1, probability 0, space 0, times 0 [ 83.053974][ T7468] CPU: 2 UID: 0 PID: 7468 Comm: syz.6.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.054015][ T7468] Tainted: [L]=SOFTLOCKUP [ 83.054025][ T7468] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.054038][ T7468] Call Trace: [ 83.054045][ T7468] [ 83.054054][ T7468] dump_stack_lvl+0x100/0x190 [ 83.054102][ T7468] should_fail_ex.cold+0x5/0xa [ 83.054121][ T7468] should_failslab+0xc2/0x120 [ 83.054139][ T7468] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 83.054154][ T7468] ? __alloc_skb+0x140/0x710 [ 83.054189][ T7468] __alloc_skb+0x140/0x710 [ 83.054210][ T7468] ? __pfx___alloc_skb+0x10/0x10 [ 83.054229][ T7468] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 83.054251][ T7468] tcp_stream_alloc_skb+0x34/0x660 [ 83.054271][ T7468] tcp_sendmsg_locked+0x140f/0x44f0 [ 83.054301][ T7468] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 83.054320][ T7468] ? lock_acquire+0x1d1/0x380 [ 83.054334][ T7468] ? do_raw_spin_lock+0x128/0x260 [ 83.054351][ T7468] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.054371][ T7468] ? __local_bh_enable_ip+0xa5/0x120 [ 83.054388][ T7468] tcp_sendmsg+0x2e/0x50 [ 83.054405][ T7468] ? __pfx_tcp_sendmsg+0x10/0x10 [ 83.054423][ T7468] inet_sendmsg+0xb9/0x140 [ 83.054441][ T7468] sock_write_iter+0x4ea/0x5b0 [ 83.054461][ T7468] ? __pfx_inet_sendmsg+0x10/0x10 [ 83.054478][ T7468] ? __pfx_sock_write_iter+0x10/0x10 [ 83.054500][ T7468] ? __pfx___file_has_perm+0x10/0x10 [ 83.054523][ T7468] do_iter_readv_writev+0x6f7/0x930 [ 83.054546][ T7468] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 83.054565][ T7468] ? selinux_file_permission+0x8f/0x6d0 [ 83.054588][ T7468] ? bpf_lsm_file_permission+0x9/0x10 [ 83.054605][ T7468] ? security_file_permission+0x76/0x210 [ 83.054621][ T7468] ? rw_verify_area+0xce/0x6d0 [ 83.054644][ T7468] vfs_writev+0x360/0xdd0 [ 83.054667][ T7468] ? __lock_acquire+0x4c5/0x1ec0 [ 83.054684][ T7468] ? __pfx_vfs_writev+0x10/0x10 [ 83.054710][ T7468] ? lock_acquire+0x1d1/0x380 [ 83.054723][ T7468] ? __fget_files+0x34/0x3d0 [ 83.054747][ T7468] ? __fget_files+0x21f/0x3d0 [ 83.054768][ T7468] ? do_writev+0x28a/0x340 [ 83.054788][ T7468] do_writev+0x28a/0x340 [ 83.054809][ T7468] ? __pfx_do_writev+0x10/0x10 [ 83.054845][ T7468] do_syscall_64+0x123/0x790 [ 83.054877][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.054903][ T7468] RIP: 0033:0x7f635ad9e159 [ 83.054921][ T7468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.054935][ T7468] RSP: 002b:00007f635bd21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 83.054955][ T7468] RAX: ffffffffffffffda RBX: 00007f635b025fa0 RCX: 00007f635ad9e159 [ 83.054965][ T7468] RDX: 0000000000000001 RSI: 0000200000001900 RDI: 0000000000000005 [ 83.054973][ T7468] RBP: 00007f635ae35024 R08: 0000000000000000 R09: 0000000000000000 [ 83.054982][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.054990][ T7468] R13: 00007f635b026038 R14: 00007f635b025fa0 R15: 00007ffdc6e96f08 [ 83.055009][ T7468] [ 83.118603][ T7471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 83.345196][ T7428] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 83.350852][ T7428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.351274][ T7428] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 83.363603][ T7428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.364603][ T7428] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 83.372693][ T7428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.374808][ T7428] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 83.402692][ T7428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.454750][ T5444] 8021q: adding VLAN 0 to HW filter on device eth14 [ 83.510211][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.519733][ T7495] FAULT_INJECTION: forcing a failure. [ 83.519733][ T7495] name fail_futex, interval 1, probability 0, space 0, times 1 [ 83.519823][ T7495] CPU: 1 UID: 0 PID: 7495 Comm: syz.6.386 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.519862][ T7495] Tainted: [L]=SOFTLOCKUP [ 83.519870][ T7495] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 83.519881][ T7495] Call Trace: [ 83.519887][ T7495] [ 83.519894][ T7495] dump_stack_lvl+0x100/0x190 [ 83.519924][ T7495] should_fail_ex.cold+0x5/0xa [ 83.519945][ T7495] ? do_syscall_64+0x123/0x790 [ 83.519969][ T7495] get_futex_key+0x1d0/0x14f0 [ 83.519993][ T7495] ? __pfx_get_futex_key+0x10/0x10 [ 83.520022][ T7495] futex_wake+0xf4/0x5e0 [ 83.520049][ T7495] ? __pfx_futex_wake+0x10/0x10 [ 83.520078][ T7495] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 83.520100][ T7495] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.520123][ T7495] do_futex+0x2b2/0x440 [ 83.520147][ T7495] ? __pfx_do_futex+0x10/0x10 [ 83.520177][ T7495] __x64_sys_futex+0x34f/0x4d0 [ 83.520204][ T7495] ? __pfx___x64_sys_futex+0x10/0x10 [ 83.520237][ T7495] do_syscall_64+0x123/0x790 [ 83.520259][ T7495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.520277][ T7495] RIP: 0033:0x7f635ad9e159 [ 83.520293][ T7495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.520310][ T7495] RSP: 002b:00007f635bd210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 83.520328][ T7495] RAX: ffffffffffffffda RBX: 00007f635b025fa8 RCX: 00007f635ad9e159 [ 83.520340][ T7495] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f635b025fac [ 83.520351][ T7495] RBP: 00007f635b025fa0 R08: 0000000000000001 R09: 0000000000000000 [ 83.520362][ T7495] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 83.520373][ T7495] R13: 00007f635b026038 R14: 00007ffdc6e96e20 R15: 00007ffdc6e96f08 [ 83.520397][ T7495] [ 83.526147][ T7428] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.536499][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.536595][ T6576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.541697][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.541781][ T6576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.682653][ T5837] hsr_slave_0: left promiscuous mode [ 83.686055][ T5837] hsr_slave_1: left promiscuous mode [ 83.689152][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.689253][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.698993][ T5837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.699082][ T5837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.715259][ T5837] veth1_macvtap: left promiscuous mode [ 83.715389][ T5837] veth0_macvtap: left promiscuous mode [ 83.723318][ T5837] veth1_vlan: left promiscuous mode [ 83.723405][ T5837] veth0_vlan: left promiscuous mode [ 83.753967][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 83.754532][ T43] audit: type=1400 audit(1788589544.456:606): avc: denied { write } for pid=7504 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.903004][ T5837] team0 (unregistering): Port device team_slave_1 removed [ 83.983990][ T5444] 8021q: adding VLAN 0 to HW filter on device eth15 [ 84.036707][ T5089] Bluetooth: hci1: command tx timeout [ 84.093696][ T43] audit: type=1400 audit(1788589544.796:607): avc: denied { getattr } for pid=7515 comm="syz.6.388" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=18187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.101133][ T43] audit: type=1400 audit(1788589544.806:608): avc: denied { setattr } for pid=7515 comm="syz.6.388" name="secretmem" dev="secretmem" ino=18187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.126176][ T43] audit: type=1400 audit(1788589544.826:609): avc: denied { write } for pid=7514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.211720][ T43] audit: type=1400 audit(1788589544.916:610): avc: denied { write } for pid=7526 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.225333][ T7530] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.268870][ T5837] IPVS: stop unused estimator thread 0... [ 84.272240][ T5444] 8021q: adding VLAN 0 to HW filter on device eth16 [ 84.279580][ T7371] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 84.285560][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.314007][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.6.397'. [ 84.314116][ T7535] netlink: 28 bytes leftover after parsing attributes in process `syz.6.397'. [ 84.472366][ T43] audit: type=1400 audit(1788589545.176:611): avc: denied { write } for pid=7555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.544645][ T7428] veth0_vlan: entered promiscuous mode [ 84.552062][ T7428] veth1_vlan: entered promiscuous mode [ 84.565413][ T7569] ip6t_rpfilter: unknown options [ 84.570016][ T7570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 84.572985][ T7428] veth0_macvtap: entered promiscuous mode [ 84.578066][ T7428] veth1_macvtap: entered promiscuous mode [ 84.591326][ T43] audit: type=1400 audit(1788589545.296:612): avc: denied { write } for pid=7566 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.602028][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.614125][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.667129][ T5837] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.706564][ T5807] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.706657][ T5807] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.716792][ T5444] 8021q: adding VLAN 0 to HW filter on device eth17 [ 84.746635][ T5837] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.750874][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.750973][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.769177][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.769225][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.784010][ T43] audit: type=1400 audit(1788589545.486:613): avc: denied { mounton } for pid=7428 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 85.001367][ T7608] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.010383][ T7604] FAULT_INJECTION: forcing a failure. [ 85.010383][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 85.010466][ T7604] CPU: 1 UID: 0 PID: 7604 Comm: syz.7.406 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.010509][ T7604] Tainted: [L]=SOFTLOCKUP [ 85.010517][ T7604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.010528][ T7604] Call Trace: [ 85.010534][ T7604] [ 85.010542][ T7604] dump_stack_lvl+0x100/0x190 [ 85.010575][ T7604] should_fail_ex.cold+0x5/0xa [ 85.010618][ T7604] should_failslab+0xc2/0x120 [ 85.010645][ T7604] kmem_cache_alloc_noprof+0x92/0x6a0 [ 85.010669][ T7604] ? __kernfs_new_node+0xd2/0xa10 [ 85.010697][ T7604] __kernfs_new_node+0xd2/0xa10 [ 85.010726][ T7604] ? __pfx___kernfs_new_node+0x10/0x10 [ 85.010752][ T7604] ? lock_acquire+0x1d1/0x380 [ 85.010770][ T7604] ? kernfs_root+0x23/0x2a0 [ 85.010813][ T7604] ? find_held_lock+0x2b/0x80 [ 85.010844][ T7604] ? kernfs_root+0xee/0x2a0 [ 85.010869][ T7604] ? kernfs_root+0xee/0x2a0 [ 85.010899][ T7604] kernfs_new_node+0x117/0x150 [ 85.010929][ T7604] __kernfs_create_file+0x53/0x350 [ 85.010953][ T7604] sysfs_add_file_mode_ns+0x207/0x3c0 [ 85.010982][ T7604] internal_create_group+0x593/0xfb0 [ 85.011021][ T7604] ? __pfx_internal_create_group+0x10/0x10 [ 85.011056][ T7604] ? kernfs_create_link+0x1bd/0x240 [ 85.011077][ T7604] internal_create_groups+0x9d/0x150 [ 85.011103][ T7604] device_add+0xf60/0x1970 [ 85.011126][ T7604] ? __pfx_device_add+0x10/0x10 [ 85.011150][ T7604] ? lockdep_init_map_type+0x5c/0x250 [ 85.011171][ T7604] ? __init_waitqueue_head+0xca/0x150 [ 85.011194][ T7604] wakeup_source_device_create+0x243/0x2e0 [ 85.011214][ T7604] wakeup_source_sysfs_add+0x1c/0x90 [ 85.011228][ T7604] wakeup_source_register+0x154/0x3e0 [ 85.011240][ T7604] ep_create_wakeup_source+0x1df/0x2e0 [ 85.011254][ T7604] ? __mutex_unlock_slowpath+0x35d/0x930 [ 85.011268][ T7604] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 85.011285][ T7604] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 85.011300][ T7604] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 85.011319][ T7604] do_epoll_ctl_file+0x1e26/0x36e0 [ 85.011339][ T7604] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 85.011354][ T7604] ? lock_acquire+0x1d1/0x380 [ 85.011364][ T7604] ? __fget_files+0x34/0x3d0 [ 85.011381][ T7604] ? find_held_lock+0x2b/0x80 [ 85.011400][ T7604] ? __fget_files+0x215/0x3d0 [ 85.011420][ T7604] ? __fget_files+0x21f/0x3d0 [ 85.011441][ T7604] ? do_epoll_ctl+0xfd/0x1a0 [ 85.011476][ T7604] do_epoll_ctl+0xfd/0x1a0 [ 85.011496][ T7604] ? __pfx_do_epoll_ctl+0x10/0x10 [ 85.011524][ T7604] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 85.011544][ T7604] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 85.011564][ T7604] do_syscall_64+0x123/0x790 [ 85.011578][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.011590][ T7604] RIP: 0033:0x7f00b199e159 [ 85.011600][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.011611][ T7604] RSP: 002b:00007f00b2937028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 85.011622][ T7604] RAX: ffffffffffffffda RBX: 00007f00b1c25fa0 RCX: 00007f00b199e159 [ 85.011629][ T7604] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 85.011636][ T7604] RBP: 00007f00b1a35024 R08: 0000000000000000 R09: 0000000000000000 [ 85.011642][ T7604] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.011649][ T7604] R13: 00007f00b1c26038 R14: 00007f00b1c25fa0 R15: 00007ffdfe26c068 [ 85.011663][ T7604] [ 85.089660][ T7613] netlink: 67 bytes leftover after parsing attributes in process `syz.2.409'. [ 85.094358][ T7613] openvswitch: netlink: Message has 12 unknown bytes. [ 85.176312][ T43] audit: type=1400 audit(1788589545.876:614): avc: denied { map } for pid=7616 comm="syz.2.411" path="socket:[20969]" dev="sockfs" ino=20969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.176857][ T43] audit: type=1400 audit(1788589545.886:615): avc: denied { read } for pid=7616 comm="syz.2.411" path="socket:[20969]" dev="sockfs" ino=20969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 85.257884][ T7619] netlink: 56 bytes leftover after parsing attributes in process `syz.2.411'. [ 85.298900][ T7622] netlink: 'syz.7.412': attribute type 1 has an invalid length. [ 85.300986][ T7623] netlink: 'syz.7.412': attribute type 1 has an invalid length. [ 85.343351][ T7627] tipc: Enabling of bearer rejected, failed to enable media [ 85.498374][ T7635] netlink: 'syz.7.416': attribute type 10 has an invalid length. [ 85.510877][ T7635] team0 (unregistering): Port device team_slave_0 removed [ 85.521066][ T7635] team0 (unregistering): Port device team_slave_1 removed [ 85.575155][ T7638] netlink: 36 bytes leftover after parsing attributes in process `syz.7.416'. [ 85.615225][ T7644] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.886593][ T5843] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 86.036514][ T5843] usb 10-1: Using ep0 maxpacket: 16 [ 86.037589][ T5843] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 86.042230][ T5843] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 86.053551][ T5843] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.053632][ T5843] usb 10-1: Product: syz [ 86.053933][ T5843] usb 10-1: Manufacturer: syz [ 86.053949][ T5843] usb 10-1: SerialNumber: syz [ 86.076721][ T5843] usb 10-1: config 0 descriptor?? [ 86.082560][ T5843] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 86.082934][ T5843] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 86.117459][ T5089] Bluetooth: hci1: command tx timeout [ 86.638405][ T5880] e1000 0000:00:06.0 eth0: Reset adapter [ 86.691448][ T5843] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 86.827025][ T5880] e1000 0000:00:06.0 eth0: Reset adapter [ 87.011571][ T7679] bridge1: entered promiscuous mode [ 87.011612][ T7679] bridge1: entered allmulticast mode [ 87.100599][ T7645] binder: 7643:7645 ioctl 4018620d 0 returned -22 [ 88.196562][ T5089] Bluetooth: hci1: command tx timeout [ 88.199393][ T5843] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 88.200753][ T5843] em28xx 10-1:0.0: board has no eeprom [ 88.256615][ T5843] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 88.256673][ T5843] em28xx 10-1:0.0: dvb set to bulk mode. [ 88.258262][ T10] em28xx 10-1:0.0: Binding DVB extension [ 88.283402][ T10] em28xx 10-1:0.0: Registering input extension [ 88.626889][ T6687] usb 10-1: USB disconnect, device number 3 [ 88.630118][ T6687] em28xx 10-1:0.0: Disconnecting em28xx [ 88.630336][ T6687] em28xx 10-1:0.0: Closing input extension [ 88.677733][ T6687] em28xx: Freeing device [ 88.808751][ T43] kauditd_printk_skb: 15 callbacks suppressed [ 88.808846][ T43] audit: type=1400 audit(1788589549.516:631): avc: denied { write } for pid=7717 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.955910][ T43] audit: type=1400 audit(1788589549.656:632): avc: denied { write } for pid=7720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.022049][ T43] audit: type=1400 audit(1788589549.726:633): avc: denied { write } for pid=7723 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.079340][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 89.133209][ T43] audit: type=1400 audit(1788589549.836:634): avc: denied { write } for pid=7726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.190493][ T43] audit: type=1400 audit(1788589549.896:635): avc: denied { write } for pid=7729 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.710864][ T43] audit: type=1400 audit(1788589550.416:636): avc: denied { write } for pid=7734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.768610][ T43] audit: type=1400 audit(1788589550.476:637): avc: denied { write } for pid=7737 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.854606][ T43] audit: type=1400 audit(1788589550.556:638): avc: denied { write } for pid=7740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.910790][ T43] audit: type=1400 audit(1788589550.616:639): avc: denied { write } for pid=7743 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.286534][ T5089] Bluetooth: hci1: command tx timeout [ 93.207407][ T43] audit: type=1400 audit(1788589553.916:640): avc: denied { write } for pid=7754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.382822][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 95.382943][ T43] audit: type=1400 audit(1788589556.086:642): avc: denied { write } for pid=7759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.440750][ T43] audit: type=1400 audit(1788589556.146:643): avc: denied { write } for pid=7762 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.603631][ T43] audit: type=1400 audit(1788589556.306:644): avc: denied { write } for pid=7765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.659344][ T43] audit: type=1400 audit(1788589556.366:645): avc: denied { write } for pid=7768 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.059712][ T43] audit: type=1400 audit(1788589556.766:646): avc: denied { write } for pid=7771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.117264][ T43] audit: type=1400 audit(1788589556.826:647): avc: denied { write } for pid=7775 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.372195][ T43] audit: type=1400 audit(1788589557.076:648): avc: denied { write } for pid=7778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.423571][ T43] audit: type=1400 audit(1788589557.126:649): avc: denied { write } for pid=7781 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.195876][ T43] audit: type=1400 audit(1788589557.896:650): avc: denied { write } for pid=7784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.259458][ T43] audit: type=1400 audit(1788589557.966:651): avc: denied { write } for pid=7787 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.075313][ T7797] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.174951][ T7808] kvm [7807]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 100.305305][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.442'. [ 100.326792][ T50] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 100.409098][ T7827] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.487819][ T50] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 100.487875][ T50] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 100.496620][ T50] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.496671][ T50] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.496699][ T50] usb 12-1: config 0 interface 0 has no altsetting 0 [ 100.497511][ T50] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.497533][ T50] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.497546][ T50] usb 12-1: config 0 interface 0 has no altsetting 0 [ 100.498348][ T50] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.498378][ T50] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.498397][ T50] usb 12-1: config 0 interface 0 has no altsetting 0 [ 100.499237][ T50] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.499269][ T50] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.499289][ T50] usb 12-1: config 0 interface 0 has no altsetting 0 [ 100.500161][ T50] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.500191][ T50] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.500209][ T50] usb 12-1: config 0 interface 0 has no altsetting 0 [ 100.501084][ T50] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.501106][ T50] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.501119][ T50] usb 12-1: config 0 interface 0 has no altsetting 0 [ 100.501890][ T50] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.501911][ T50] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.501924][ T50] usb 12-1: config 0 interface 0 has no altsetting 0 [ 100.502707][ T50] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.502733][ T50] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.502752][ T50] usb 12-1: config 0 interface 0 has no altsetting 0 [ 100.504477][ T50] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 100.504491][ T50] usb 12-1: Product: syz [ 100.504499][ T50] usb 12-1: Manufacturer: syz [ 100.504507][ T50] usb 12-1: SerialNumber: syz [ 100.506804][ T50] usb 12-1: config 0 descriptor?? [ 100.521983][ T50] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 100.545552][ T7833] bpf: Bad value for 'uid' [ 100.545606][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 100.545614][ T43] audit: type=1400 audit(1788589561.256:654): avc: denied { mounton } for pid=7832 comm="syz.6.448" path="/66/proc/192/task/193/fail-nth" dev="proc" ino=20116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 100.560269][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.560297][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.560962][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.560978][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.560990][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.561001][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.561013][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.561024][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.561036][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.561047][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 100.572618][ T35] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 100.573773][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.573958][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.826477][ T35] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 100.883385][ T43] audit: type=1400 audit(1788589561.586:655): avc: denied { read } for pid=7845 comm="syz.5.450" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 100.883691][ T43] audit: type=1400 audit(1788589561.586:656): avc: denied { open } for pid=7845 comm="syz.5.450" path="/77/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 100.884228][ T43] audit: type=1400 audit(1788589561.586:657): avc: denied { ioctl } for pid=7845 comm="syz.5.450" path="/77/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 100.891334][ T7846] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 100.891344][ T7846] device-mapper: raid: Choosing default region size of 4MiB [ 100.941808][ T43] audit: type=1400 audit(1788589561.646:658): avc: denied { setattr } for pid=7845 comm="syz.5.450" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 100.997340][ T35] usb 11-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 100.997837][ T35] usb 11-1: config 0 has no interfaces? [ 100.997889][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.999288][ T35] usb 11-1: config 0 descriptor?? [ 101.046633][ T43] audit: type=1400 audit(1788589561.746:659): avc: denied { write } for pid=7851 comm="syz.2.452" name="core" dev="configfs" ino=4873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.061367][ C1] usb 12-1: yurex_control_callback - control failed: -71 [ 101.061540][ T2334] usb 12-1: USB disconnect, device number 2 [ 101.063024][ T2334] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 101.077008][ T7846] device-mapper: table: 248:0: raid: Component device(s) too small (-EINVAL) [ 101.077061][ T7846] device-mapper: ioctl: error adding target to table [ 101.159586][ T7859] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.197006][ T43] audit: type=1400 audit(1788589561.906:660): avc: denied { write } for pid=7860 comm="syz.5.456" name="file0" dev="9p" ino=72377545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.197134][ T43] audit: type=1400 audit(1788589561.906:661): avc: denied { open } for pid=7860 comm="syz.5.456" path="/81/file0/file0" dev="9p" ino=72377545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.205999][ T50] usb 11-1: USB disconnect, device number 3 [ 101.306515][ T5829] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 101.436525][ T5829] usb 7-1: device descriptor read/64, error -71 [ 101.437211][ T43] audit: type=1400 audit(1788589562.146:662): avc: denied { execute } for pid=7865 comm="syz.5.458" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 101.696538][ T5829] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 101.707991][ T7879] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.763455][ T7888] netlink: 48 bytes leftover after parsing attributes in process `syz.7.468'. [ 101.767865][ T7888] netlink: 'syz.7.468': attribute type 3 has an invalid length. [ 101.769296][ T7888] netlink: 20 bytes leftover after parsing attributes in process `syz.7.468'. [ 101.769852][ T43] audit: type=1400 audit(1788589562.476:663): avc: denied { recv } for pid=5716 comm="sshd-session" saddr=10.0.2.2 src=34486 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 101.794633][ T7892] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.794953][ T7892] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 101.821005][ T7895] fuse-io-uring is disabled by module parameter [ 101.826542][ T5829] usb 7-1: device descriptor read/64, error -71 [ 101.897888][ T7911] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.915171][ T7913] No source specified [ 101.947025][ T5829] usb usb7-port1: attempt power cycle [ 101.978384][ T7922] Cannot find add_set index 0 as target [ 101.979928][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.479'. [ 102.010968][ T7924] sit1: entered promiscuous mode [ 102.017844][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.480'. [ 102.040964][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.481'. [ 102.117848][ T7934] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.306474][ T5829] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 102.337149][ T5829] usb 7-1: device descriptor read/8, error -71 [ 102.473577][ T7952] netlink: 348 bytes leftover after parsing attributes in process `syz.6.491'. [ 102.576593][ T5829] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 102.609286][ T5829] usb 7-1: device descriptor read/8, error -71 [ 102.618658][ T7957] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 102.669814][ T7959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 102.720496][ T5829] usb usb7-port1: unable to enumerate USB device [ 102.989682][ T7978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.043880][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.6.502'. [ 103.045670][ T7988] netlink: 32 bytes leftover after parsing attributes in process `syz.7.503'. [ 103.099154][ T7988] netlink: 24 bytes leftover after parsing attributes in process `syz.7.503'. [ 103.203924][ T8001] No such timeout policy "syz1" [ 103.232525][ T8006] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.236666][ T5089] Bluetooth: hci4: unexpected subevent 0x37 length: 25 > 13 [ 103.240197][ T8008] xt_nfacct: accounting object `syz0' does not exist [ 103.295874][ T8010] 9p: Could not find request transport: ut/tun [ 103.373049][ T8023] xt_nat: multiple ranges no longer supported [ 103.458639][ T8035] random: crng reseeded on system resumption [ 103.462279][ T8032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.557226][ T7291] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 103.709601][ T7291] usb 10-1: unable to get BOS descriptor or descriptor too short [ 103.709692][ T7291] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 103.710895][ T7291] usb 10-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.713702][ T7291] usb 10-1: string descriptor 0 read error: -22 [ 103.713765][ T7291] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.887028][ T5816] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 104.016471][ T5816] usb 11-1: device descriptor read/64, error -71 [ 104.123235][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.123494][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.256586][ T5816] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 104.302719][ T8066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.359115][ T8072] netlink: 'syz.7.537': attribute type 7 has an invalid length. [ 104.361921][ T8072] netlink: 'syz.7.537': attribute type 7 has an invalid length. [ 104.386567][ T5816] usb 11-1: device descriptor read/64, error -71 [ 104.389475][ T8073] bridge2: entered promiscuous mode [ 104.391184][ T8073] bridge2: entered allmulticast mode [ 104.393633][ T8072] netlink: 'syz.7.537': attribute type 7 has an invalid length. [ 104.396940][ T8072] netlink: 'syz.7.537': attribute type 7 has an invalid length. [ 104.400280][ T8072] netlink: 'syz.7.537': attribute type 7 has an invalid length. [ 104.408639][ T8073] bridge3: entered promiscuous mode [ 104.410479][ T8073] bridge3: entered allmulticast mode [ 104.417427][ T8073] bridge4: entered promiscuous mode [ 104.419354][ T8073] bridge4: entered allmulticast mode [ 104.421806][ T8072] netlink: 'syz.7.537': attribute type 7 has an invalid length. [ 104.421971][ T8072] netlink: 'syz.7.537': attribute type 7 has an invalid length. [ 104.422067][ T8072] netlink: 'syz.7.537': attribute type 7 has an invalid length. [ 104.422177][ T8072] netlink: 'syz.7.537': attribute type 7 has an invalid length. [ 104.430520][ T8073] bridge5: entered promiscuous mode [ 104.430535][ T8073] bridge5: entered allmulticast mode [ 104.435388][ T8073] bridge6: entered promiscuous mode [ 104.435493][ T8073] bridge6: entered allmulticast mode [ 104.441311][ T8073] bridge7: entered promiscuous mode [ 104.441341][ T8073] bridge7: entered allmulticast mode [ 104.445408][ T8073] bridge8: entered promiscuous mode [ 104.445420][ T8073] bridge8: entered allmulticast mode [ 104.449694][ T8073] bridge9: entered promiscuous mode [ 104.449707][ T8073] bridge9: entered allmulticast mode [ 104.455422][ T8073] bridge10: entered promiscuous mode [ 104.455739][ T8073] bridge10: entered allmulticast mode [ 104.461461][ T8073] bridge11: entered promiscuous mode [ 104.461538][ T8073] bridge11: entered allmulticast mode [ 104.466133][ T8073] bridge12: entered promiscuous mode [ 104.466312][ T8073] bridge12: entered allmulticast mode [ 104.470838][ T8073] bridge13: entered promiscuous mode [ 104.470900][ T8073] bridge13: entered allmulticast mode [ 104.475901][ T8073] bridge14: entered promiscuous mode [ 104.476092][ T8073] bridge14: entered allmulticast mode [ 104.481221][ T8073] bridge15: entered promiscuous mode [ 104.482742][ T8073] bridge15: entered allmulticast mode [ 104.487521][ T8073] bridge16: entered promiscuous mode [ 104.487622][ T8073] bridge16: entered allmulticast mode [ 104.491835][ T8073] bridge17: entered promiscuous mode [ 104.491897][ T8073] bridge17: entered allmulticast mode [ 104.496954][ T5816] usb usb11-port1: attempt power cycle [ 104.498050][ T8073] bridge18: entered promiscuous mode [ 104.498078][ T8073] bridge18: entered allmulticast mode [ 104.502361][ T8073] bridge19: entered promiscuous mode [ 104.502575][ T8073] bridge19: entered allmulticast mode [ 104.507889][ T8073] bridge20: entered promiscuous mode [ 104.507963][ T8073] bridge20: entered allmulticast mode [ 104.512488][ T8073] bridge21: entered promiscuous mode [ 104.512535][ T8073] bridge21: entered allmulticast mode [ 104.517584][ T8073] bridge22: entered promiscuous mode [ 104.517647][ T8073] bridge22: entered allmulticast mode [ 104.521874][ T8073] bridge23: entered promiscuous mode [ 104.521922][ T8073] bridge23: entered allmulticast mode [ 104.529456][ T8073] bridge24: entered promiscuous mode [ 104.529519][ T8073] bridge24: entered allmulticast mode [ 104.534568][ T8073] bridge25: entered promiscuous mode [ 104.534622][ T8073] bridge25: entered allmulticast mode [ 104.541983][ T8073] bridge26: entered promiscuous mode [ 104.542047][ T8073] bridge26: entered allmulticast mode [ 104.546917][ T8073] bridge27: entered promiscuous mode [ 104.546976][ T8073] bridge27: entered allmulticast mode [ 104.551191][ T8073] bridge28: entered promiscuous mode [ 104.551220][ T8073] bridge28: entered allmulticast mode [ 104.558287][ T8073] bridge29: entered promiscuous mode [ 104.558359][ T8073] bridge29: entered allmulticast mode [ 104.562792][ T8073] bridge30: entered promiscuous mode [ 104.562870][ T8073] bridge30: entered allmulticast mode [ 104.567626][ T8073] bridge31: entered promiscuous mode [ 104.567683][ T8073] bridge31: entered allmulticast mode [ 104.571834][ T8073] bridge32: entered promiscuous mode [ 104.571908][ T8073] bridge32: entered allmulticast mode [ 104.577528][ T8073] bridge33: entered promiscuous mode [ 104.577586][ T8073] bridge33: entered allmulticast mode [ 104.582515][ T8073] bridge34: entered promiscuous mode [ 104.582579][ T8073] bridge34: entered allmulticast mode [ 104.836550][ T5816] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 104.857834][ T5816] usb 11-1: device descriptor read/8, error -71 [ 105.096495][ T5816] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 105.117196][ T5816] usb 11-1: device descriptor read/8, error -71 [ 105.230063][ T5816] usb usb11-port1: unable to enumerate USB device [ 105.946456][ T5829] usb 12-1: new low-speed USB device number 3 using dummy_hcd [ 106.117583][ T5829] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 106.118486][ T5829] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.118499][ T5829] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 106.118519][ T5829] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 106.118538][ T5829] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.120662][ T8093] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 106.124149][ T5829] hub 12-1:1.0: bad descriptor, ignoring hub [ 106.124164][ T5829] hub 12-1:1.0: probe with driver hub failed with error -5 [ 106.124537][ T5829] cdc_wdm 12-1:1.0: skipping garbage [ 106.124545][ T5829] cdc_wdm 12-1:1.0: skipping garbage [ 106.130265][ T5829] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 106.130278][ T5829] cdc_wdm 12-1:1.0: Unknown control protocol [ 106.326245][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 106.326316][ T43] audit: type=1400 audit(1788589567.026:683): avc: denied { read write } for pid=8092 comm="syz.7.543" name="cdc-wdm0" dev="devtmpfs" ino=3078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 106.326462][ T43] audit: type=1400 audit(1788589567.026:684): avc: denied { open } for pid=8092 comm="syz.7.543" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 106.480944][ T8096] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.561997][ T8100] cramfs: checking physical address 0x000000002aa00000 for linear cramfs image [ 106.562053][ T8100] cramfs: wrong magic [ 106.562777][ T8100] cramfs: wrong magic [ 106.866563][ T5102] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 106.886459][ T8093] cdc_wdm 12-1:1.0: Error autopm - -16 [ 106.886562][ T5829] usb 12-1: USB disconnect, device number 3 [ 107.017461][ T5102] usb 7-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 107.018298][ T5102] usb 7-1: config 253 has an invalid interface number: 130 but max is 0 [ 107.018315][ T5102] usb 7-1: config 253 has no interface number 0 [ 107.018329][ T5102] usb 7-1: config 253 interface 130 has no altsetting 0 [ 107.023457][ T5102] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.023475][ T5102] usb 7-1: Product: syz [ 107.023483][ T5102] usb 7-1: Manufacturer: syz [ 107.023491][ T5102] usb 7-1: SerialNumber: syz [ 107.036435][ T5829] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 107.196528][ T5829] usb 12-1: Using ep0 maxpacket: 8 [ 107.197327][ T5829] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 107.201106][ T5829] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.201119][ T5829] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.201140][ T5829] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 107.201154][ T5829] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 107.201173][ T5829] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.202053][ T43] audit: type=1400 audit(1788589567.906:685): avc: denied { bpf } for pid=8109 comm="syz.6.550" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.202311][ T43] audit: type=1400 audit(1788589567.906:686): avc: denied { perfmon } for pid=8109 comm="syz.6.550" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.205097][ T5829] hub 12-1:1.0: bad descriptor, ignoring hub [ 107.205110][ T5829] hub 12-1:1.0: probe with driver hub failed with error -5 [ 107.205413][ T5829] cdc_wdm 12-1:1.0: skipping garbage [ 107.205421][ T5829] cdc_wdm 12-1:1.0: skipping garbage [ 107.208200][ T5829] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 107.208211][ T5829] cdc_wdm 12-1:1.0: Unknown control protocol [ 107.244926][ T8104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.245112][ T8104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.261194][ T5102] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 107.274483][ T43] audit: type=1400 audit(1788589567.976:687): avc: denied { firmware_load } for pid=5102 comm="kworker/3:3" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 107.286192][ T5102] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 107.289057][ T5102] dib0700: firmware download failed at 7 with -22 [ 107.294596][ T5102] usb 7-1: USB disconnect, device number 10 [ 107.422330][ T43] audit: type=1400 audit(1788589568.126:688): avc: denied { write } for pid=8092 comm="syz.7.543" name="/" dev="9p" ino=72377417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.423880][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.436217][ T43] audit: type=1400 audit(1788589568.136:689): avc: denied { remove_name } for pid=8092 comm="syz.7.543" name="file0" dev="9p" ino=72377545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.436292][ T43] audit: type=1400 audit(1788589568.136:690): avc: denied { unlink } for pid=8092 comm="syz.7.543" name="file0" dev="9p" ino=72377545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.456723][ T43] audit: type=1400 audit(1788589568.166:691): avc: denied { write } for pid=8092 comm="syz.7.543" name="/" dev="9p" ino=72377417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.457035][ T43] audit: type=1400 audit(1788589568.166:692): avc: denied { add_name } for pid=8092 comm="syz.7.543" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.491418][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.494054][ T8119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.596578][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.596672][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.597019][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.597043][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.661901][ T8124] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 107.676950][ T30] usb 12-1: USB disconnect, device number 4 [ 107.954535][ T8139] __nla_validate_parse: 5 callbacks suppressed [ 107.957624][ T8139] netlink: 248 bytes leftover after parsing attributes in process `syz.2.560'. [ 107.984623][ T8137] netlink: 148 bytes leftover after parsing attributes in process `syz.6.561'. [ 108.047734][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.561'. [ 108.069622][ T5816] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.216891][ T5816] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 108.217437][ T5816] usb 5-1: Dual-Role OTG device on HNP port [ 108.217650][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.225380][ T5816] gspca_main: spca501-2.14. ** replaying previous printk message ** [ 108.225380][ T5816] gspca_main: spca501-2.14.0 probing 0000:0000 [ 108.225878][ T5816] gspca_spca501: reg write: error -32 [ 108.225886][ T5816] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 108.225918][ T5816] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 108.227129][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 108.241553][ C3] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 108.244366][ C3] CPU: 3 UID: 0 PID: 7799 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 108.247703][ C3] Tainted: [L]=SOFTLOCKUP [ 108.249116][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.252257][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 108.254245][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 108.261047][ C3] RSP: 0018:ffffc900007089d8 EFLAGS: 00010002 [ 108.262944][ C3] RAX: dffffc0000000000 RBX: ffff88805bc08000 RCX: 0000000000000102 [ 108.265534][ C3] RDX: 00000000000000e6 RSI: ffffffff87f54ff6 RDI: ffff88805bc08128 [ 108.268003][ C3] RBP: ffff88805bc08128 R08: 0000000000000004 R09: 0000000000000020 [ 108.270504][ C3] R10: 0000000000000020 R11: 0000000000000001 R12: ffff88805bc080f0 [ 108.273197][ C3] R13: ffff88805bc08128 R14: ffff88805bc08740 R15: 0000000000000001 [ 108.276352][ C3] FS: 00007f41bb9e3880(0000) GS:ffff8880d5e5f000(0000) knlGS:0000000000000000 [ 108.279558][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.281662][ C3] CR2: 00007f635b027dac CR3: 000000003720f000 CR4: 0000000000352ef0 [ 108.284187][ C3] Call Trace: [ 108.285271][ C3] [ 108.286197][ C3] f_midi2_set_alt+0x444/0x5f0 [ 108.287718][ C3] composite_setup+0x16f8/0x9290 [ 108.289317][ C3] ? __lock_acquire+0x4c5/0x1ec0 [ 108.290882][ C3] ? __pfx_composite_setup+0x10/0x10 [ 108.292565][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.294340][ C3] ? do_raw_spin_lock+0x128/0x260 [ 108.295989][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 108.297774][ C3] ? configfs_composite_setup+0xfb/0x130 [ 108.299578][ C3] configfs_composite_setup+0xfb/0x130 [ 108.301319][ C3] dummy_timer+0x2039/0x3700 [ 108.302883][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 108.305074][ C3] ? debug_object_deactivate+0x2e4/0x3b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 108.307169][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 108.309468][ C3] ? mark_held_locks+0x40/0x70 [ 108.311360][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 108.313709][ C3] ? __pfx_dummy_timer+0x10/0x10 [ 108.315716][ C3] __hrtimer_run_queues+0x462/0x9c0 [ 108.318069][ C3] hrtimer_run_softirq+0x1ca/0x360 [ 108.320462][ C3] handle_softirqs+0x1e6/0x9d0 [ 108.322573][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 108.324661][ C3] ? _raw_spin_unlock+0x28/0x50 [ 108.326601][ C3] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 108.328882][ C3] __irq_exit_rcu+0x194/0x210 [ 108.330833][ C3] irq_exit_rcu+0x9/0x30 [ 108.332395][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 108.334233][ C3] [ 108.335212][ C3] [ 108.336390][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 108.338849][ C3] RIP: 0010:lock_acquire+0x5e/0x380 [ 108.340931][ C3] Code: 05 4f ed a4 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 5e e0 5d 0f 0f 82 c9 02 00 00 8b 35 fe 11 5e 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 ed ec a4 12 0f 85 09 03 00 00 48 83 c4 [ 108.347191][ C3] RSP: 0018:ffffc9000570f900 EFLAGS: 00000206 [ 108.349094][ C3] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 108.351554][ C3] RDX: 0000000000000000 RSI: ffffffff8e3c5579 RDI: ffffffff8c620f80 [ 108.354113][ C3] RBP: ffff8880397f0f80 R08: 00000000000213d7 R09: 0000000000000646 [ 108.356707][ C3] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000001 [ 108.359347][ C3] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 108.362118][ C3] ? __pfx___might_resched+0x10/0x10 [ 108.363921][ C3] ? find_held_lock+0x2b/0x80 [ 108.365427][ C3] down_read+0x99/0x4c0 [ 108.366765][ C3] ? lookup_slow+0x42/0x70 [ 108.368195][ C3] ? __pfx_down_read+0x10/0x10 [ 108.369723][ C3] ? __d_lookup+0x266/0x4a0 [ 108.371155][ C3] lookup_slow+0x42/0x70 [ 108.372534][ C3] link_path_walk+0x1377/0x1cc0 [ 108.374174][ C3] path_openat+0x1ac/0x2440 [ 108.375784][ C3] ? __pfx_path_openat+0x10/0x10 [ 108.377496][ C3] do_file_open+0x20e/0x430 [ 108.379012][ C3] ? __pfx_do_file_open+0x10/0x10 [ 108.380617][ C3] ? _raw_spin_unlock+0x28/0x50 [ 108.382225][ C3] ? alloc_fd+0x471/0x7a0 [ 108.383598][ C3] do_sys_openat2+0x10f/0x1e0 [ 108.385100][ C3] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.386774][ C3] ? __x64_sys_recvmsg+0x1b9/0x260 [ 108.388540][ C3] __x64_sys_openat+0x12d/0x210 [ 108.390106][ C3] ? __pfx___x64_sys_openat+0x10/0x10 [ 108.391825][ C3] do_syscall_64+0x123/0x790 [ 108.393412][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.395438][ C3] RIP: 0033:0x7f41bb2a7407 [ 108.396986][ C3] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 108.403080][ C3] RSP: 002b:00007ffda4916d60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 108.405696][ C3] RAX: ffffffffffffffda RBX: 00007f41bb9e3880 RCX: 00007f41bb2a7407 [ 108.408149][ C3] RDX: 0000000000080000 RSI: 00007ffda4916ee0 RDI: ffffffffffffff9c [ 108.410628][ C3] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 108.413249][ C3] R10: 0000000000000000 R11: 0000000000000202 R12: 00005644eb9fe7f5 [ 108.416005][ C3] R13: 00005644eb9fe7f5 R14: 0000000000000001 R15: 00005644eba19140 [ 108.418758][ C3] [ 108.419869][ C3] Modules linked in: [ 108.421210][ C3] ---[ end trace 0000000000000000 ]--- [ 108.422934][ C3] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 108.422956][ C3] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 108.422966][ C3] RSP: 0018:ffffc900007089d8 EFLAGS: 00010002 [ 108.422975][ C3] RAX: dffffc0000000000 RBX: ffff88805bc08000 RCX: 0000000000000102 [ 108.422982][ C3] RDX: 00000000000000e6 RSI: ffffffff87f54ff6 RDI: ffff88805bc08128 [ 108.422988][ C3] RBP: ffff88805bc08128 R08: 0000000000000004 R09: 0000000000000020 [ 108.422994][ C3] R10: 0000000000000020 R11: 0000000000000001 R12: ffff88805bc080f0 [ 108.423001][ C3] R13: ffff88805bc08128 R14: ffff88805bc08740 R15: 0000000000000001 [ 108.423007][ C3] FS: 00007f41bb9e3880(0000) GS:ffff8880d5e5f000(0000) knlGS:0000000000000000 [ 108.423029][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.423038][ C3] CR2: 00007f635b027dac CR3: 000000003720f000 CR4: 0000000000352ef0 [ 108.423046][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 108.457098][ C3] Kernel Offset: disabled [ 108.458460][ C3] Rebooting in 86400 seconds..