last executing test programs: 10m33.559503846s ago: executing program 4 (id=976): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="ae69f8583237390dc3705427da7f9c9636e8d9a115daacd24acd086d10d61024a8ba652e3fa2e2195fab779a523b29958da3e00694dabbc6d4a3549a4cbd19f3a118131084bb1ac1594cbc6278d0afc80272e1ff4489b2d43877c635e17eaa6a501410ddcf613bf14b7c54120ecb497839", 0x71}], 0x1}}], 0x2, 0x400c010) 10m33.447501122s ago: executing program 4 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_ublk_setup_io_uring(0x401c, &(0x7f0000000080)={0x0, 0xf48c, 0x200, 0x2, 0x264, 0x0, r3}, 0x0, &(0x7f00000001c0), 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001480)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800, 0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7, 0x1, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x1000, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x2000000}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {0x1}, {}, {0x400000}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000002f00090027bd7000000000000400000008"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 10m32.375189663s ago: executing program 4 (id=981): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r3, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) lseek(r5, 0xa3d2, 0x1) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x200088c1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 10m30.527822712s ago: executing program 4 (id=985): syz_emit_ethernet(0x2b, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf"], 0x70}, 0x1, 0x7}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) syz_usb_connect$uac2(0x2, 0xc4, &(0x7f0000000400)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb2, 0x3, 0x1, 0xfb, 0x10, 0x80, {0x8, 0xb, 0x2, 0x2, 0x1, 0xff, 0x20, 0xfe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xbc, 0x3, 0x20, 0x2}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x400, 0x8, 0x3, 0x3, 0x5, 0xf}, @effect_unit={0xb, 0x24, 0x7, 0x2, 0x2, 0x4, [0x0, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1000, 0x0, 0xfe, 0x8}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf, 0x2, 0x7, 0x4, 'hrG', 's'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x7, "bd", "b9d718"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x80}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x373, 0x6, 0x8c, 0x61}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0xfa, 0x6, {0x8, 0x25, 0x1, 0x87, 0x33, 0x1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x240, 0x10, 0x27, 0x6, {0x8, 0x25, 0x1, 0x3, 0x3, 0x1, 0xc77}}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x1, 0xfe, 0x8, 0x4aba3524795739f6, 0x8}, 0x5, &(0x7f0000000540)={0x5, 0xf, 0x5}, 0x4, [{0xa3, &(0x7f0000000680)=@string={0xa3, 0x3, "1ed56bb5f3dbbebc3c560c71844bf42bb0bfc35d3652ca2dbf4406ca577a29e3633bd465db6253f7db35b86f71074e1dd60705f8a2d5193e283e8850dad3dc5bfcc7fc01928fc31ceaa897d0b52abc6665d1f39d6a01898e278063d79c66b25ce85c022ec8093fad6f2ed3cff6b8f6e20aa1c9daf14c657e294ec9f2b7cd92d70b6ea42ef2c714b122ba46b0aaeaaf27b0a33baa8cedffb65216417bb39eeaa579"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x861}}, {0x74, &(0x7f0000000780)=@string={0xffffffffffffff48, 0x3, "c6e05fe438571fa3285a7fdcea59e1a73dc7dac99cabcd1c66990e5ed8a9d0113b788057b4033226802e9a49569df1c84315405a3f685126c69ae55fb756d5bf9b9323624f7b201d94591541f128e33a4c379959af41ffa005e24789b924996db9295fa402ded4e325cc80bd25ae9ed7d5ce"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x403}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r4, 0x4040099d}}, 0x48) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000000)={0xa, 0x1, 0x4, {0x80000004, 0x1, 0x2, 0x8800001}}) writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000980)="ca8144a3345937e035b64298fc9768633e8636fb51bc7060583cecdbbf9adedc002490e75fb9237aab945c97f7a9528d5c2a50201b57bd21277db6b689c2b148057bdfb0fe1b55318dd2b8498aa3ab759127a2c7adeac6f02a04246f07398d43c6c92680275bb4a9aea2561bd9bd30fc4445c015ef3f77e8266782a5a8242927ba1aa2037eb0f022f815ee3d430b4e784abbdf0ac34a664483be679a9de9", 0x9e}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x5}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') ioctl(r6, 0x3, &(0x7f00000001c0)) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0xa3, 0x0) 10m28.981485879s ago: executing program 4 (id=999): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x180) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101500, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 10m28.945663326s ago: executing program 4 (id=1000): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x2000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x2000}) getpgrp(0x0) (async) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) getpid() (async) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0xfffffe89}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x32f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x70}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xdf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x80}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000440), 0x60, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f0000000440), 0x60, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x80000000000003) (async) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x80000000000003) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_TDX_INIT_MEM_REGION(r0, 0xc008aeba, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xea}}) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="300200007d00000005ef0003000000000000000000000700000000000000000090c0000000000000000004000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e11400cfc26dd7c500f04cd85f2a70f5e9930e3c5db45a5500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dab2884baf05000000000074e7c70521cabff20f9c1cbe36f4fd1a4cc280e8e289da649a3700002c016f6465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b65021d7989528fd1739e1c2d87fff0000000000000000000000000000000000000000000000000000000000f20208a4125e1190c110580142d2314471f5ca5dc9175706a651411b44fd6afd2d84295d9ba38d7a3a89d5", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 10m13.680982881s ago: executing program 32 (id=1000): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x2000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x2000}) getpgrp(0x0) (async) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) getpid() (async) r3 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0xfffffe89}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x32f}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x70}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xdf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x80}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000440), 0x60, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f0000000440), 0x60, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x80000000000003) (async) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x80000000000003) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_TDX_INIT_MEM_REGION(r0, 0xc008aeba, &(0x7f0000000200)={0x3, 0x0, &(0x7f00000001c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xea}}) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x11, @private=0xa010101, 0x803, 0x3, 'lc\x00', 0x2, 0x7ff, 0x3e}, 0x2c) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x88b02, 0x0) write$P9_RSTATu(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYRES32=0x0], 0x230) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) mq_open(0x0, 0x8c2, 0x30, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 5m34.502319147s ago: executing program 1 (id=2172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x10ff, 0xe, 0x0, &(0x7f0000000380)="f17b85654f877025428d584dffcd", 0x0, 0x100, 0x0, 0x0, 0x19, 0x0, &(0x7f0000000180)="dec8b3e9a45e0bbbe0ce791cdc00d0bc2b6e3c9039b4264735"}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000010000000080000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x0, 0x10000001}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000100224e0000", 0x8d}], 0x1) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000600)=0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000100)) getuid() write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @loopback}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000030000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r10, 0x0, 0x0}, 0x10) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)) 5m30.114661725s ago: executing program 1 (id=2190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000040)={0x4c, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000300)={0x0, 0x4ae0, 0x2000, 0x2, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001440)={&(0x7f0000001040)={0x14, r2, 0x713, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 5m29.852915167s ago: executing program 1 (id=2192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 5m27.420696347s ago: executing program 1 (id=2197): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x80, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000004, 0x800, 0x2, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfdfefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x3fef, 0xdbc, 0x0, 0x0}}, 0x0) socket(0x2000000000000021, 0x2, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0xc, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x7b6e, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 5m27.154592296s ago: executing program 1 (id=2200): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003d55fc8089904a489cd4f010203010902230001020030050904e88001ffa57350082302af1a0201000905055a4d0f4cc860bc3099ab164907979703b180d816f5da5e0cc74a656c87f271c3a81fdde5b0d20222d534f337ea44c6687e03e4329b881681969eae7e76a54b0adb58c4ac75bd2fcd3d8941490c8d2acba464beea07075051844ccc34a8"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x2400ccd1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xe8, 0x403, 0x89, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_SWAPEXT(r2, 0xc0c0586d, &(0x7f0000000000)={0x0, r2, r2, 0xffffffff, 0x9, '\x00', {0x10, 0x5, 0x7, 0x8, 0x1000, 0x6, 0x3, 0xff, {0x4, 0x7}, {0xa, 0xfffffeff}, {0x3, 0xb}, 0x4, 0x6, 0x7fff, 0xe, 0x2, 0x7, 0x5, 0xb, 0x4, 0x1, '\x00', 0x4, 0x7, 0x8001, 0x78}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001700090025ae700001dcdf25060000000800010003"], 0x1c}}, 0x4000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000005f80), r6) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)=ANY=[@ANYBLOB="14004000740ba18281382ebbcc47219d2f340bab23313d1a10ec24c385833df350fd45739817329cf5245e31c8fe56ecdaa6519ae35a28389b25bc5bcc7a69530c6b004973669b7299199973457f1c99bc8e14271eac4050794ef79e183291706f72c769e18b", @ANYRES16=0x0, @ANYBLOB="08002dbd7000ffdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x200008b5}, 0x24000880) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005fc0)={0x14, r7, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x8800) (async) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa0102}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="00000300804f19722be08e3d0e963db2507a04003e4f7026a49a5bbf90b2b5a4fa31bcfc90c7f8a6d6a3e99bcd1924f1c5fca28a5404f59774f93733", @ANYRES16=r7, @ANYBLOB="00042abd7000fedbdf250100000008"], 0x24}, 0x1, 0x0, 0x0, 0x2c00c055}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x268, 0x268, 0x33a, 0x0, 0x268, 0x3a0, 0x460, 0x460, 0x3a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0xd8000000, {0x9402}, [@common=@inet=@hashlimit2={{0x150}, {'pimreg\x00', {0x0, 0x8, 0x0, 0x1, 0x10000000, 0x5, 0x9}}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'dvmrp1\x00', {0xfffffffffffff000}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) (async) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "d6e4e5", "9cd2c4f95ae9d4c3c7957c03798b3765f52e8bafbefd5ebba89045bf8700030b4a4cc8189c3db018469a88dae18c59543ff2471300cbea8df084fa5168c05c66a74c56da27599051904ce1a7e55e8579895dd9b4d83fecd8cb291fa900bbc72a9979e868a305e84596f61acabf8b381fe6a62f4e84533bf1981eec84f04e5222f7b1c8ed8ba3ac6b7355e01b03b58fc562a7f019c0b58f882f242f3bafc94b129bd9e4dc3f309694467097f37d293a90cce80b96d284fd46789187bbf7ece0204a5ec5dc72a56e447621f61afedcdd627d595ba6cf1c06f40b1041d06fa59559c49b39f946d349b263b0e7f9021ec14e44df4284e347d252b48cd2a3e8cf3076"}}, 0x110) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x5}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x401}]}}]}, 0x40}}, 0x4800) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x51) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000880)=ANY=[], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 5m26.170511538s ago: executing program 1 (id=2208): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2a) fadvise64(r0, 0x4, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(r3, 0x0, r2, 0x0, &(0x7f0000000080)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r4, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r4}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000270001002bbd7000fedbdf2506000000f085d173ddb4dadb91e408cac322e4b6abfc0f"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) 5m10.806707399s ago: executing program 33 (id=2208): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2a) fadvise64(r0, 0x4, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(r3, 0x0, r2, 0x0, &(0x7f0000000080)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x1, 0xb38, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r4, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1bee, 0x80000, 0x1000002, 0x141, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x100, 0x0, 0x8004146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e8b, 0x1000, 0xffffffff, 0x2fd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2, 0x2, 0xc5, 0x0, r4}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000270001002bbd7000fedbdf2506000000f085d173ddb4dadb91e408cac322e4b6abfc0f"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4044804) 2m43.949697297s ago: executing program 3 (id=2820): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4212, 0x0}, 0xfffffffffffffd3b) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x2e, &(0x7f0000000140)=""/46, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x4, 0x75a1}, 0x10, r5, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[r4, r3, r3, r3], &(0x7f0000000300)=[{0x5, 0x3, 0x0, 0x4}, {0x1, 0x1, 0x4}], 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x562}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0x7, 0x9}, 0x10, r5, r2, 0x2, 0x0, &(0x7f0000000300)=[{0x1, 0x5, 0x6, 0x6}, {0x0, 0x4, 0x8, 0x3}], 0x10, 0x7}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) write$tun(r6, 0x0, 0x0) 2m43.486068713s ago: executing program 3 (id=2822): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2083) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r4, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2032, 0x59}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4030}, 0x8805) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) unshare(0x42000000) 2m42.652552063s ago: executing program 3 (id=2828): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2000a800, &(0x7f0000000280)={0xa, 0x4c25, 0x7ffffff7, @remote, 0x8}, 0x1c) 2m42.193653501s ago: executing program 3 (id=2830): write(0xffffffffffffffff, &(0x7f0000000140), 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x134b8, &(0x7f0000000740)={0x0, 0x2730, 0x20000, 0x10000802, 0x86}, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1}) r5 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x0, 0xd1, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x800ed, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r8, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r9, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) 2m40.628446309s ago: executing program 3 (id=2835): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x400, 0x7, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x27}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000000500)={0x0, 0x5e5d, 0x10, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5ffffe, 0x0, 0x3, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x400, 0xfffffffd, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40f910, 0x10, 0x2, 0xc0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x40000, 0x3, 0x175}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x1, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 2m40.354991048s ago: executing program 3 (id=2837): socket$kcm(0x2, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r2, 0x101}, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) 2m28.823875326s ago: executing program 6 (id=2874): r0 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000090000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='dax\x00', &(0x7f0000000140)='\x00\x00\x00\x00\x00', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000400)='io.stat\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x840) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x4c, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16=r10, @ANYBLOB="010000000000000000000400000008000100", @ANYRES32=0x0, @ANYRESDEC], 0x24}}, 0x0) 2m28.146454556s ago: executing program 6 (id=2876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf81}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m27.956590077s ago: executing program 6 (id=2877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, 0xd, 0x6, 0x601, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4000) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0xe) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000040)=0x9, 0x4) 2m27.585121011s ago: executing program 6 (id=2880): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)="2933cb00000000000000004660aa128492500dc2cb0a3fd3582f307ec29a83f9593338e847c55cde8176607334f61b", 0x0, 0x2f}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r4, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 2m25.353815647s ago: executing program 6 (id=2884): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) syz_clone3(&(0x7f00000002c0)={0x230a8000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x8, 0x0, 0x0, 0xfd, 0xe1, 0x6, 0x8, 0xc5, 0x2, 0x7, 'syz1\x00'}) shutdown(r0, 0x1) 2m25.285817622s ago: executing program 34 (id=2837): socket$kcm(0x2, 0x3, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r2, 0x101}, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) 2m19.342221733s ago: executing program 6 (id=2898): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000001dc0)=""/4096, 0x1000) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) lseek(r4, 0xf596, 0x3) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xb, @pix_mp={0x70000, 0x7, 0x59565955, 0x6, 0x5, [{0xb, 0x8fd}, {0x6, 0x40}, {0x7fff, 0x4800}, {0x9, 0x3}, {0x1c}, {0x5, 0x9908}, {0x7, 0x2}, {0x7, 0xf6ac}], 0x5, 0x11, 0x4, 0x2, 0x1}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x27, 0x1, 0x0, 0x0, {0xe}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x3c}}, 0x24040084) 2m3.887185177s ago: executing program 35 (id=2898): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000001dc0)=""/4096, 0x1000) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) lseek(r4, 0xf596, 0x3) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xb, @pix_mp={0x70000, 0x7, 0x59565955, 0x6, 0x5, [{0xb, 0x8fd}, {0x6, 0x40}, {0x7fff, 0x4800}, {0x9, 0x3}, {0x1c}, {0x5, 0x9908}, {0x7, 0x2}, {0x7, 0xf6ac}], 0x5, 0x11, 0x4, 0x2, 0x1}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x27, 0x1, 0x0, 0x0, {0xe}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x3c}}, 0x24040084) 1m37.843521711s ago: executing program 7 (id=2986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg\x00', 0x100}) r1 = socket$kcm(0x2, 0x5, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000180)="f5a33db6", 0x4, 0xffffffffffffffff) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100), 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f0000000240)=""/69, 0x45, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) timerfd_create(0x8, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') mkdirat(r5, &(0x7f0000000340)='./file0\x00', 0x100) read$eventfd(r5, &(0x7f00000004c0), 0x8) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) set_robust_list(0x0, 0x0) memfd_secret(0x80000) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, 0xfffffffffffffffc) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000001c0)=0x40) bind$packet(r4, &(0x7f0000000240)={0x11, 0xd, 0x0, 0x1, 0xfc, 0x6, @random="04000097bd00"}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'veth1_to_bond\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 1m36.945816678s ago: executing program 7 (id=2990): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x181402, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r3 = syz_open_pts(r2, 0x20800) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x44) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x1c564}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0xba01, 0x0, 0x40d0}, 0x810) 1m35.542340409s ago: executing program 7 (id=2997): r0 = socket$l2tp6(0xa, 0x2, 0x73) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000800)=ANY=[@ANYBLOB='mpol=default']) setns(0xc9, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000ec0), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000f00)={{}, 'port0\x00', 0x0, 0x1000, 0x91e, 0x5a, 0x0, 0x1000, 0x8, 0x0, 0x1, 0x8}) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) mount(0x0, &(0x7f0000000200)='./dev\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x800, 0x1) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/235}, 0xf3, 0x3, 0x800) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0x6, @mcast1, 0xf9af}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="140000000000000029"], 0x30}}], 0x1, 0x20000000) 1m32.480035897s ago: executing program 7 (id=3001): openat$userio(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040b9701000000000000ecff", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r3, &(0x7f0000001600), &(0x7f0000001700)=@udp=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f0000000040)}, 0x20) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) 1m31.954696413s ago: executing program 7 (id=3004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x700, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @initial, {0x6, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}}}]}, 0x50}}, 0x0) 1m31.550619457s ago: executing program 7 (id=3007): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x6c, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x0, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r8, 0x425, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="37160000", @ANYRES16=r8, @ANYBLOB="00012abd7000fddbdf25090000002400018005000200fa0000000500020040000000050002000700000008000700", @ANYRES32=r5, @ANYBLOB="0800020006000000"], 0x40}}, 0x4010) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) sync() connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2a1, 0x2}, 0xe) setrlimit(0xb, &(0x7f0000000100)={0x6, 0x4}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$inet(r9, &(0x7f0000000d00)={&(0x7f00000005c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000600)="486cece80394ed58975ea92bcbcbb8db69e6dc8a5938dbc4185840a88d6f178ea26942c5c574896ed04ce32bd66808506313148e414aba8deb6ac4162b5cf7e5633a318143e15e90024e4ac2d82a125dcd3877bb8166bfa000271a533776cefdeb87ffe432341db5bdaa2a6fbc7d1447fc1ba2058ab204c6f9299b6c818c202e45489b2d6f46c58d56314f884e485d0ee3d1efe0ab0595e9c2a5ac1a941d49a8614e4048763b16696fe054e646ace4ef666dee0907f7f805a43a2c1bb83ca222b90b05243275a8ff7f", 0xc9}, {&(0x7f0000000700)="8c692dc899efeb6eec624b3273c4d6a2437f0d7b57a3d692df433c269c36ba39932c21a51d2b998f6a35b088beb4781502d1a37ac0ed281f60b8a898fe7e547a8731189618c7d85f99579aaa5714c07944620b3d185472cc57459467dba5e2d25d0278370d9c58f7721b460f32763267e88b1930df588a6d0bf6b0feb15a27ac0b463f7e0a08efc9e6452e27f23fcaa7c241c3a5b54fd95e23077070bddceb3ceecb853ff8905fbc94179f1d560ae2d7e7bddea6d0962b8f75d407182da37f9abe1ef54afa2367d19394711277535e020e582b56f7", 0xd5}, {&(0x7f0000000800)="273a411d6ff2e408c527175540ccfd986ac96dde5c0b152b0842f875e0e4b4712128c170be0f1d0b8ffc8ebb6a93d2434db6621acabcd73068bd556aef73b06367fd24640144784e65b1e7c86dc76a044f2a2d9cf07fdcc92f2bd5af1b51c94be966f650a2349004beb612d6d4feaaa7", 0x70}, {&(0x7f0000000940)="70120bb844cd2f1a1aab70a5b612a290620d03d102ac5ce580618bdb43a19126466e0c55e7947be75c0b51a1c1c2e36645acfd85ca9ca6e73508d8b8b72967af8193435913d1f11088ebf6f0f35dd49dc5859c6a95727a1d2c8c92d93396fecb89c9fd8479ac055928a93b5624301d866f693935b840f00e41b9e4246cda3061f382f2b9abf7b50358852ca4aab3f1257460c216372c20b5f88f6ef66dd7e7da424589451c7f942402dd3fb12fcd877f2a88867ad1a81d8af49183e93f2326eebb99597c9e98b02bd30406c0418a1344b84b1a452679c6cc393bdf535c69fde6e70aae5e", 0xe4}, {&(0x7f0000000a40)="5a4916ad10e04065949d7c45652375131a3b1c095ad042e16c9a8ace4f484061d9cbe2d922dd1c923064ccf1e144adfbf8b30996de91185dd50326e4a51581b9d83c23381dba86ddb8c37d2945e913b6210588a5e10cf7726b24fa2513889b3f21a82230f7186fd100adffe8bde045e987284fc3568a4bf77ef4d94616aff87eb73681fe5e31782a66a72facd0e27c243d67c50133c940772db8e59ba11d445921ee9a445130628a2f134daa9ec5", 0xae}, {&(0x7f0000000b00)="0e6175f68aefe11918b42b69d879f0c66b4868cc19744757981e30c634e705d41d933cfb45476ca4d5346a5d628f86c35a8bbc12", 0x34}], 0x6, &(0x7f0000000bc0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x88, 0xe, "f66bd853d6fc25bc0caa1c54"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x3c, [@multicast2, @loopback, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x108}, 0x20004080) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000b0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040) 1m16.317181159s ago: executing program 36 (id=3007): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x6c, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x0, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80000}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r7) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r8, 0x425, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="37160000", @ANYRES16=r8, @ANYBLOB="00012abd7000fddbdf25090000002400018005000200fa0000000500020040000000050002000700000008000700", @ANYRES32=r5, @ANYBLOB="0800020006000000"], 0x40}}, 0x4010) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff17, 0x0, 0x0) sync() connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2a1, 0x2}, 0xe) setrlimit(0xb, &(0x7f0000000100)={0x6, 0x4}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$inet(r9, &(0x7f0000000d00)={&(0x7f00000005c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000600)="486cece80394ed58975ea92bcbcbb8db69e6dc8a5938dbc4185840a88d6f178ea26942c5c574896ed04ce32bd66808506313148e414aba8deb6ac4162b5cf7e5633a318143e15e90024e4ac2d82a125dcd3877bb8166bfa000271a533776cefdeb87ffe432341db5bdaa2a6fbc7d1447fc1ba2058ab204c6f9299b6c818c202e45489b2d6f46c58d56314f884e485d0ee3d1efe0ab0595e9c2a5ac1a941d49a8614e4048763b16696fe054e646ace4ef666dee0907f7f805a43a2c1bb83ca222b90b05243275a8ff7f", 0xc9}, {&(0x7f0000000700)="8c692dc899efeb6eec624b3273c4d6a2437f0d7b57a3d692df433c269c36ba39932c21a51d2b998f6a35b088beb4781502d1a37ac0ed281f60b8a898fe7e547a8731189618c7d85f99579aaa5714c07944620b3d185472cc57459467dba5e2d25d0278370d9c58f7721b460f32763267e88b1930df588a6d0bf6b0feb15a27ac0b463f7e0a08efc9e6452e27f23fcaa7c241c3a5b54fd95e23077070bddceb3ceecb853ff8905fbc94179f1d560ae2d7e7bddea6d0962b8f75d407182da37f9abe1ef54afa2367d19394711277535e020e582b56f7", 0xd5}, {&(0x7f0000000800)="273a411d6ff2e408c527175540ccfd986ac96dde5c0b152b0842f875e0e4b4712128c170be0f1d0b8ffc8ebb6a93d2434db6621acabcd73068bd556aef73b06367fd24640144784e65b1e7c86dc76a044f2a2d9cf07fdcc92f2bd5af1b51c94be966f650a2349004beb612d6d4feaaa7", 0x70}, {&(0x7f0000000940)="70120bb844cd2f1a1aab70a5b612a290620d03d102ac5ce580618bdb43a19126466e0c55e7947be75c0b51a1c1c2e36645acfd85ca9ca6e73508d8b8b72967af8193435913d1f11088ebf6f0f35dd49dc5859c6a95727a1d2c8c92d93396fecb89c9fd8479ac055928a93b5624301d866f693935b840f00e41b9e4246cda3061f382f2b9abf7b50358852ca4aab3f1257460c216372c20b5f88f6ef66dd7e7da424589451c7f942402dd3fb12fcd877f2a88867ad1a81d8af49183e93f2326eebb99597c9e98b02bd30406c0418a1344b84b1a452679c6cc393bdf535c69fde6e70aae5e", 0xe4}, {&(0x7f0000000a40)="5a4916ad10e04065949d7c45652375131a3b1c095ad042e16c9a8ace4f484061d9cbe2d922dd1c923064ccf1e144adfbf8b30996de91185dd50326e4a51581b9d83c23381dba86ddb8c37d2945e913b6210588a5e10cf7726b24fa2513889b3f21a82230f7186fd100adffe8bde045e987284fc3568a4bf77ef4d94616aff87eb73681fe5e31782a66a72facd0e27c243d67c50133c940772db8e59ba11d445921ee9a445130628a2f134daa9ec5", 0xae}, {&(0x7f0000000b00)="0e6175f68aefe11918b42b69d879f0c66b4868cc19744757981e30c634e705d41d933cfb45476ca4d5346a5d628f86c35a8bbc12", 0x34}], 0x6, &(0x7f0000000bc0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x88, 0xe, "f66bd853d6fc25bc0caa1c54"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1d}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010101, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x3c, [@multicast2, @loopback, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x108}, 0x20004080) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000b0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040) 15.97288559s ago: executing program 9 (id=3290): socket$l2tp6(0xa, 0x2, 0x73) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000800)=ANY=[@ANYBLOB='mpol=default']) setns(0xc9, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(0xffffffffffffffff) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) 15.504616387s ago: executing program 9 (id=3291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0xb, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x7, 0x9}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = syz_io_uring_setup(0x64de, &(0x7f00000003c0)={0x0, 0xd63f, 0x40, 0x2, 0xba}, &(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)) r4 = io_uring_setup(0x1b7b, &(0x7f0000000580)={0x0, 0x5731, 0x1c0a0, 0x0, 0x44a, 0x0, r3}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) io_uring_enter(r4, 0x2219, 0x35a5, 0x16, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$vcsa(&(0x7f0000000240), 0x5, 0x48a940) (async) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0x5, 0x48a940) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000280)={0x3, r6}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) mq_timedreceive(r2, &(0x7f0000000140)=""/140, 0x8c, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 15.354383386s ago: executing program 5 (id=3293): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r1, 0x3b8e, &(0x7f0000000000)="10") pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x77, &(0x7f0000000180)={@empty, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x4}}, {@mpls_mc={0x8848, {[{0x0, 0x0, 0x1}, {0xffff8, 0x0, 0x1}, {0x401}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xffff, 0x0, 0x1}, {0x3}, {}], @llc={@llc={0x80, 0x8e, "ea", "009de6e066f1cd63c9da94bad3987ff9a55595e17402151fb13d5529804eff03bf789a5db2118f70b4b01a962bd0129f06f0971ca4e90db5d0e513e1ca6a"}}}}}}, &(0x7f0000000200)={0x1, 0x1, [0xe61, 0xa6c, 0xb90, 0x799]}) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x26c}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000002c0)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x5) 13.559188741s ago: executing program 5 (id=3296): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r6 = dup(r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100, 0x1, 0x3}) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[], 0x32600) write$make_it_fail(r6, &(0x7f00000003c0)='N\x00', 0x2) close_range(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0xffcc) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) 12.760118038s ago: executing program 9 (id=3298): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x4, 0x6b, &(0x7f0000000080)="2cee097d01c42ca36b20bbe674ffc1e97f56cb38a02063bbb76cf971be4b15263664ab0579ab2ba451d26eae9af0bcc4d66a512680ec4436e09fb647292ee3c158f3a4d9e0a4225666f604b30607595622e5add823928f824451ae7d0f8258e627783e7a35d26df464b1cb", 0x1}, {0x4, 0x56, &(0x7f0000000200)="77987f663c7039619e8cd2fa1866349570ca200debfe877bf2683580cc1c721f3e2ac9466be719a8dcec31fc50510bf9aeb92572cf5322191f20edb67d5f86e9e702bbbffc8191f354bfbeb546c5f120671bb260ff63", 0x0, 0x1}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) 10.588524589s ago: executing program 0 (id=3300): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xef}]}]}], {0x14}}, 0x8c}}, 0x0) 10.511466672s ago: executing program 2 (id=3302): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040080) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x48, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x80402, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r3, @ANYBLOB="31000000bf3f9f8008000a00", @ANYBLOB="54001280110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 10.372604222s ago: executing program 0 (id=3303): syz_open_dev$video4linux(&(0x7f0000000180), 0x3, 0x101100) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='ns\x00') exit(0x10003) syz_emit_ethernet(0x52, &(0x7f0000000400)=ANY=[], 0x0) r0 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x7, 0x6, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r3}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0xf) close(r4) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x3d, &(0x7f0000000680)=ANY=[], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="c31d930c40fae59b380a48fb7bc3e768eddc76e4e08fbaa0d0045f325e0ac74af05b04eec26dfe628b556b4dda40a2984291a54e6c54d96bb3b71500da7f4fb3120dac243dde0b6bd67164947f8bb60c2ba0f022d371cafcc2156d8a81d3af8ae635f3c87bfd3cb1997e7a7d7efcfaff66c9ac9465f194379aaa256852eba0de125a120f20fcab1eaa1f1aabe9c07089ee149c873a09f697dcd4bb4c49d03b57ace18aa331f12e9c4eed785d6c61ede03d9d01ea6fdc6e1469c5587434dd276d230b4bd5", @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000810}, 0x4081) r5 = socket$inet(0x2, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x10) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xfff, 0xe, 0x1, 0x5263, 0x3}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={r9, 0x8, 0x5}, &(0x7f0000000200)=0x8) sendmmsg$alg(r7, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x880}], 0x1, 0x80001) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10.278239959s ago: executing program 9 (id=3304): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x2, 0xb4, 0x2000000, 0x5}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x1f4, 0x36, 0xffffffb9, 0x1a}, 0x9c) 9.930159164s ago: executing program 8 (id=3305): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030303030bc00000000000000303034303030302c757365725f69c33d707b973f41038f7b403d3548c9ae", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) setresgid(0x0, 0x0, 0xee01) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x40, 0x0) shmctl$IPC_RMID(r0, 0x0) inotify_init() sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000214010023bd7000fddb"], 0x24}, 0x1, 0x0, 0x0, 0x60408a0}, 0x488c0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000080)='%', 0x0, 0xd01, 0x0, 0xfd2c, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.776446499s ago: executing program 2 (id=3306): socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x5c, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x48, 0x1, [@m_mpls={0x44, 0xd, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x9727a}]}, {0xd, 0x6, "c2cca64ae9666f0039"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040005}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 9.607631562s ago: executing program 8 (id=3307): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x62482, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x130) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xa400, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0xce6a, 0x4a3, 0x8001, 0x6, 0xb, "e0933386a9a20414dfd20022a7517c4d220de3"}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') r5 = fcntl$dupfd(r0, 0x406, r0) read$msr(r5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x62482, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x130) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xa400, 0x0) (async) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0xce6a, 0x4a3, 0x8001, 0x6, 0xb, "e0933386a9a20414dfd20022a7517c4d220de3"}) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') (async) fcntl$dupfd(r0, 0x406, r0) (async) read$msr(r5, 0x0, 0x0) (async) 9.327611749s ago: executing program 2 (id=3308): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r6 = dup(r0) write$P9_RSTATFS(r6, &(0x7f0000000100)={0x43, 0x9, 0x2, {0x569142f7, 0x5, 0x6, 0x0, 0x800007f, 0xa, 0x7, 0x200, 0x7}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffa, 0x4e2c, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) r7 = syz_open_pts(r0, 0x80) dup3(r7, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/227, 0x25) 9.185351536s ago: executing program 9 (id=3309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) io_setup(0x5, &(0x7f0000000240)) sched_setattr(r1, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) listen(0xffffffffffffffff, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) 6.307673433s ago: executing program 2 (id=3310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private0}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {0xfffffffffffffffe}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1044}, 0x20000010) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x7d) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600120009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x5b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) 5.899039702s ago: executing program 0 (id=3311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0xfffffffffffffd97) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)='\x00'/1412, 0x584}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000"], 0x18}, 0x8000) recvfrom(r6, &(0x7f0000000300)=""/2048, 0x800, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r8, &(0x7f0000000500)="000000020104", 0x6) 5.807229765s ago: executing program 9 (id=3312): r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000540)={{0x0, 0xfffffffffffffff8, 0x6, 0x5, 0x2, 0xffffffff, 0x6, 0x4d3, 0x4, 0x80000000, 0x4, 0x1000, 0x2, 0xc0d6, 0x8000000000000000}}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001540)={r1, 0x81}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="190000000400000004000000010002"], 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7021000000000100000014000200776730000000000000000000000000000800070008000000060006004e210000"], 0x38}, 0x1, 0x0, 0x0, 0x40048d0}, 0x40000) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@empty, @local, 0xffffffffffffffff, "cae5c66b00e4bfdb8ea8fbabf2121dc8b1f8567a2939f7e3b4927f49a62f1a25", 0xfffffff5, 0x4, 0x8e, 0x9}, 0x3c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r9, &(0x7f0000000040), 0x0, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.727216668s ago: executing program 8 (id=3313): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xef}]}]}], {0x14}}, 0x8c}}, 0x0) 4.50385758s ago: executing program 5 (id=3314): syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x4, 0x6b, &(0x7f0000000080)="2cee097d01c42ca36b20bbe674ffc1e97f56cb38a02063bbb76cf971be4b15263664ab0579ab2ba451d26eae9af0bcc4d66a512680ec4436e09fb647292ee3c158f3a4d9e0a4225666f604b30607595622e5add823928f824451ae7d0f8258e627783e7a35d26df464b1cb", 0x1}, {0x4, 0x56, &(0x7f0000000200)="77987f663c7039619e8cd2fa1866349570ca200debfe877bf2683580cc1c721f3e2ac9466be719a8dcec31fc50510bf9aeb92572cf5322191f20edb67d5f86e9e702bbbffc8191f354bfbeb546c5f120671bb260ff63", 0x0, 0x1}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) 3.988317279s ago: executing program 8 (id=3315): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5d78, 0x800, 0x1000002, 0x78}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x436f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x8, 0x5, 0x9e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.829143634s ago: executing program 0 (id=3316): r0 = memfd_create(&(0x7f00000000c0)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x5) sendfile(r0, r0, &(0x7f0000001000), 0xffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3ff, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008081, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) 3.70018249s ago: executing program 2 (id=3317): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x28e, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r2, 0x44, 0x8, 0x9) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7347, @rand_addr, 0x1}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7347, @rand_addr, 0x1}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="001e0000000000000720000000010640e2ff0400000000000000ffffffffffffff7f9700000000000000d8c4b0539f18efa5913e4628b5c36915e7074f2f0929bc22803510a87d442f3c5121c4463f0bf5a90d230399f484ce0e28cc8e55ecf60c7aef4254eafb2d5a5d8f32a3b4cb8bc17125e090084cde14d9118d4aa7d146c0c603ea6634eaa953ef7821ed64580183fab84f112232be92268f21ee5db67c09434a719426cd9afe481b00e77e3b4ea001b435bbe3333ca500091a90d37a8869158c2bb35b884437cd148b14140917c61227ab096eeabc243f78cf93777b668e851df796bd55f20013d8b0cba5f5ac040108c2040000000900000000000000"], 0x100) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x262803, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xa4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffff7e}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffff7e}) setns(r2, 0x10000000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) listen(r1, 0x7c2) (async) listen(r1, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6002000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c94bcbff334a0bb2ee931207b8ae06401681391f25478a14e592b9a8e265009a371bef93cfb486b10a0cc12420115392fd220adbcefe79ef0cbc081451fef6b2360e89877c0819eb8b0a019927ae9a13beb9cadbab131ab9da3c92bdc12f1f86c3993ca609ffe1862a35c419d0b3b52c38c6269d19f60649b6135f25e85d6c2f6f5308b59f50cbc0bf929fe91aa3c7363d3fe8d19cf9f523666c392259759"], 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) (async) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) 3.57397852s ago: executing program 0 (id=3318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x3c, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private0}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfb, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {0xfffffffffffffffe}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x1044}, 0x20000010) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x7d) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="0600120009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x5b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x890b, &(0x7f0000000000)) 3.435680952s ago: executing program 8 (id=3319): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x2, 0xb4, 0x2000000, 0x5}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x1f4, 0x36, 0xffffffb9, 0x1a}, 0x9c) 3.260170145s ago: executing program 2 (id=3320): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100", 0x2}, {&(0x7f0000000480)="bff86c0c12df76", 0x7}, {&(0x7f0000000540)="09d6c6bb9e1e63174fdb169d5c", 0xd}], 0x4) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="f9781f5be94ebf980d90ef2849f07456f54d6427a0a46d8a101830478ff6fb36f790542b418262b83efb042f1c687968ee4981b15a583bec2766f77647e1d2bd1bc404f6efbf4f8cab15955040171ccd1e9db9f20e2b81141f1fcfe6d9845cc5302f74f8d2ab9dee2ea470e6b2b06c9e99f25b5a3751322f9b61a244be4137c6201ff0599a9308bcb76ffae623aa7c187369c847e83b07b78b939f5227ff073c35f55f7011a088794ba2b5cc888d97488997f3f6d716a89f7869"], 0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40f40) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) read$FUSE(r4, &(0x7f0000003800)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x94, "84d5c1d2e534139f3d4c378032ef492a002e60f729546939a014f00b52c6ed1b6e8c69d92bfe9ca342b39768d67c64840741ed1a57656241ab0e64fbf54d58f0d76bb6f3df1f65531cd160f03138921d91d22f640a8712d37ff89321e9891bc4795486facb6ab63d6cc823fbcb670c919d7762427069e16c5eb60578e6ada4cc01a867f5c25219474338628eabfebc2ae8271f54"}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000340)={r6, 0x6}, &(0x7f0000000380)=0x8) listen(r3, 0xfffff789) r7 = accept(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x6, 0x0, 0x0) 2.881864324s ago: executing program 5 (id=3321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) listen(0xffffffffffffffff, 0x74) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r6 = userfaultfd(0x801) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f00002f4000/0x3000)=nil, 0x3000, 0x9) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private1, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0xa, @in=@empty, 0x0, 0x3, 0x0, 0x3}}, 0xe8) 2.021282804s ago: executing program 8 (id=3322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffc000/0x3000)=nil) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4041) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040e4220"], 0x7) 1.863166585s ago: executing program 5 (id=3323): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002580)="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", 0x2000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800000010000d04bd7000"/20, @ANYRES32=0x0, @ANYBLOB="a400060040000000240012800c0001006d6163766c616e001400028008000900018000000800070000000008140035006d6163766c616e30"], 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) syz_fuse_handle_req(r2, &(0x7f0000004e80)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x5, {0xee9b, 0xffff9777, 0x0, {0x3, 0x7ff, 0x2, 0x8, 0x6, 0x70000000000, 0x9, 0x1, 0xe, 0xc000, 0xffff, 0x0, 0x0, 0xa, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r4, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000002c0)={r4, &(0x7f00000000c0)='-.}\x00', 0x0, &(0x7f0000000100)={@_ha_fsid={[0x9]}, {0x5, 0xd, 0x3, 0x1}}, 0xa7, &(0x7f0000000200), &(0x7f0000000280)=0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.802711962s ago: executing program 0 (id=3324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010140}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08000500020000000ebeea8a0a1ab82aad7789bde74b50da1c84b8b980812987c7c7420ac253cadfa90e40cfc39bec192739461ef881282a4d893102984ae443868a8daf0b31bb6c5044a141dabf70feddb1e3343e8b710af01332b76a94e922c2cceb0f24f41eda1d630734b3346e589878b3a1d02a0fc7aa71ddcb8ab8065f64910747f9de07c28e8f1ce316b7e8b75603523d254b7cf3fb915788ca13db3a267f8522546c045b5e0fdbb8d8f25da885e22cafe1c21fc515853866d0bf2f39b684d5dfde58a55ac24f1ff6a94098a24ee7bd55f4752061e8f93c419dd0fb85631187"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000001000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000800350000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdafd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) fanotify_init(0x10, 0x80000) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) bind(r8, &(0x7f0000000100)=@can={0x1d, r9, 0x1, 0x2}, 0x10) r10 = socket$can_raw(0x1d, 0x3, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x19, &(0x7f0000000240)=0xa1a1, 0xfffffffffffffeae) sendto$inet6(r11, 0x0, 0x0, 0x24000000, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r11, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x3ffffffa}], 0x4000000000001fc, 0x40010041, 0x0) sendmsg$can_raw(r10, &(0x7f0000000200)={&(0x7f0000000380)={0x1d, r9}, 0x10, &(0x7f0000000400)={&(0x7f0000000280)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) read(r8, &(0x7f0000000500)=""/100, 0x64) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r12, &(0x7f0000000380), 0x8) r13 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') sendmmsg$inet(r13, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000bc0)="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", 0x21c}], 0x1}}], 0x2, 0x40) 0s ago: executing program 5 (id=3325): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/nr_hugepages\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='00\n', 0x3) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000c}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sysfs$1(0x1, &(0x7f0000000140)='\xdc\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001bc0)={'sit0\x00', &(0x7f0000001b80)={'sit0\x00', 0x0, 0x80, 0x20, 0xffff7fff, 0x5, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x64, 0x0, 0x80, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r8, @ANYBLOB="080002007f00000108000400ac1e"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) sendmmsg$inet(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)="527666fa2a9139fc197c024c7d5a40ae31d849cf78bafd08eeecced40d3841215ce9cacdfb4980845283400d69bfed0dad4fa396258551b35209dea08dce1cea6cca1aa183d2a89c1797108773809030c9b1944ce3efe388", 0x58}, {&(0x7f0000000240)="97657de2639fbe7946a52522881806f56cefc3cd998a3a33a7dd36f0abebe074247e80b911eb0e959bc1702814b947eed5e5983a8b2ab44888b5bf47258339413f8600922faa7d31d4fc81b432c989fcb4471ebbbcc471bc97b28bdea5c9773b91f7c694ace2c00e9741a516254807c52c6e70059ff46178f6f96265419eab8be36ce006e4ce3f514216d631c043937b838dfd590b5665c16dab511d8a0fd8d8fe43ff85cad2d3bc5058e412b4e99ffc18b35138a87f042e995128f71e5566a5db1a08499f2282e9b4e47ca6b412", 0xce}], 0x2, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x23}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x80}}, {{&(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000480)="22f5bb47867479a855298f9c6da1107b8df595d705bdd687fec9067f00a53f8944f0bdf136998e17722f02f187e8926bb1e5372380d7974674a36a6c0b41f2a7ef170a", 0x43}, {&(0x7f0000000500)="03a792e20365e37474744292d2ab8468e1129889e0e27ce97df6e23300f97f655d197768c633c051003a6eac", 0x2c}, {&(0x7f0000000540)="2edc3b353cfa2606a1c1fb4fad4f9026315c7a1b039239dd9802e708a1157da00d5ec5f38d0dc58075e96fcb0c4e258bb1a1c5b383bf52e926de5cdab36dcc11c583fecfa3bab1c9c554baa17f0684f15498d6ea4c091d02564b6b015a499213796a9f313c5947092a97c9c71f40fbfb06fbc1f935c6542913225e843adb1418f2ea78711949226555008bf1be052ffbb643f96581f11575b49e770731f4f6fbeb4bc97a0a452590ec60e8eafd6b1592bd0cc5cc453a701e4ca205", 0xbb}, {&(0x7f0000000600)="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", 0xff}], 0x4, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd4bd6131}}, @ip_retopts={{0x78, 0x0, 0x7, {[@end, @ssrr={0x89, 0x1b, 0xfc, [@local, @multicast2, @rand_addr=0x64010101, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}]}, @timestamp_addr={0x44, 0xc, 0x99, 0x1, 0x9, [{@multicast1, 0x9}]}, @cipso={0x86, 0x36, 0x0, [{0x5, 0xe, "d357805f3f3db4f9e897d97c"}, {0x0, 0xc, "96e334418a77d28631be"}, {0x6, 0xc, "46056dff8dc99307e9ee"}, {0x1, 0xa, "f35f7570409cd9e5"}]}, @lsrr={0x83, 0x7, 0xa9, [@multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xd8}}, {{&(0x7f0000000840)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000980)=[{&(0x7f0000002240)="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", 0x131}], 0x1, &(0x7f0000004c40)=ANY=[@ANYBLOB="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"], 0xd8}}, {{&(0x7f0000000ac0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="f4d612adf3fc6707b35c", 0xa}], 0x2, &(0x7f0000004fc0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="a814143f7f00000100000000bb8a3b87b760d059474bfcd01352d7e3e095e5f1931c3f7f4d421db33309f409bd0820feba1e0f84567ef4580b9a738294071f6ccea5997501075693b9a5193470d56931b4a09e5253f5d3be85f815de7c07f50331dacc69eed6985b530d234dffb858c65e03d2a6e5bcc8a8417504d7be91e6f1cd1a2d3099ebcc4a9ae206ca966dca52be3cd7633fc1bf8f00143b20da3befc7614bd409823cb2770111fc5a0fb1f45b4ad4c68087ef0628f1d6e0df67d3ec0f29f4e0f930dceb9d3dcf55ed945d45c1cf7358b400cb7c26baac51d52933285aa6acea7c3d63eedc306aa0eea623f4b64fb40a3c92d77a"], 0x100}}, {{&(0x7f0000001d00)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000001d40)="e504a97e2ec9dba6b03a7d41a2a015d8d896dec41658f6a5bcbf25bfe977d3cd4dc34c0a6016e2b0ed2473046f0d65981baf05d53c1de4afd2ff636825b755e5b92685c5e945e5ca9c7b2485172bd5c830f28e4bc3f86599ae0038a865bf452e58037f0f0ddf67303daffe54111cb88330ffb2acaa68ad1cec36f127fafb63e76c58dfb0443dcb1b15f99c8f66d3dcc0db341dceaeb93daffffe1476fa658bb64a3bbba61e3228fcb72d5b37a91176fd69040b8eab7e813cb826d73c25d23eb1f3a0cbc53b76d0d8e8bc9f74035f289c6eeb2428bd0b082abcea0356ad36aaaa7e6946176a444f212610abbcbd", 0xed}, {&(0x7f0000001e40)="182c944c5fc862d6a3fdc1d4495c81c61121f2f6c43cf7c19ef803def6c9633f8898795f29956b6daeb53e67cc1a35b5b2eadc7f819e49d5f24b6688bd9812edb63aeec9b13012577beb858db261abd33d15d93f5b55da30c8693373003a91fa2d52115f67f886814aeb44c2cefefd93663915e12ec5fffca5a9400b947a1639eae9ed2b1f85db2285f79907f4f391d1951e8a8d48fb6c0b4bc8cafda29ab9f4e253dac034c3197d0b14fa3f8987799f3c", 0xb1}, {&(0x7f0000001f00)="b85aef79307f0cabb950925df317cc32bb904482a2681c911089779c53308235a207f61b7698bfa48ddb12a93cdd52370c71", 0x32}, {&(0x7f0000001f40)="1fcfdea834584cda7850cdfe64907286da4b47b8c6e42e8995ddd5160a0c0265b8cd5d257df57d80d1f8c943f6b896f93499b89bb719035ba017877587ffdc27ae6a63a1209f0feb00b194ddd380c8035917285fc18eaa25b7a72cd23bbda624f5d17acf374dba08862dde8ec20b3cbe451d9670b5a56ef9ee8ec14141eee5c54d4953294e2777fed7d03f29439f36bbc82de763e4d6d52a44fd2c39256abbbbcb692a82674863fd37f34e410236c947f8fb08145a8bad809bf3c7ab2daa3f0aae30f0b5f880731b6819c306198db6f82f99116b5e4faa91cb13fe2a1e", 0xdd}, {&(0x7f0000002040)="6827716bff7fea607327d91222c18132a1bc2eaec80ca79c05dd2d9d5024e35268bfb99ff0c37f011c8e9774d88d4e3c7aae36b284f53380f846fe873b138f719a5046ac447c2f69443cfc073f06c430c0ef766f9b7b5f828b5fa347c43371bdd071bf8bda680da4266552fd465fe798c6226dc2cabc0dfa1028", 0x7a}, {&(0x7f00000020c0)="fe3db307afc45e096b0c136ccf1170225ce4b7d0b18f4d9ee866e69dd28da6f198af39801966f2f27bb690ebe452fd39038cddc82c3f1d8d8eb00f7736fad494b14eecfa2ff901999989c006c47fcb83fa5d07215327c29554fe9eeb00a57e545ab1b4cc86ae6abf2ec9c25adb4f1c865d72a83e21312a46f2adc52cc881bc8d9bd7a13df2681068f2b6e3a7ac42c3291a9a47bb74bbec81386ad44e9f475eed454678cba8b1214099a2c5279325280a5b6fab1c65625459e5a5d3dcddc35b8d55986236ba38bd2b2432fabb2aff5977b5430f7d460a963ea170473577f78c4bc2a92c4d52", 0xe5}], 0x6, &(0x7f0000004e40)=ANY=[@ANYBLOB="4c000000000000000000000007000000019404000086370000000201020107a21a169785051218ff4e688b4337f5a2f141e51c7d25c2b3051c6837010ce3d339b51d0cf5d757a70205472bcd0000000014000000000000000000000002000000000000000000000011000000000000000000000001000000070000000000000014000000000000000000000001000000faffffff0000000014000000000000000000000002000000040000000000000070000000000000000000000007000000441432200000d41f000000040000491900000003862b00000000050cce24554ce73d1cfae1d40709e5f62334e536a107103f74d3bc0baced1a3eb8ee3e53d3040b71c8e2412f206f4825861300000002070de36e0f891a4ecdf44ae97b0000001c0000000000000000000000080000002be5df191ac96fb1f3cde659d5055089dd183fb4c2f357372f3a517e0ee3908bfefcd3", @ANYRES32=r8, @ANYRES8=r4], 0x140}}, {{&(0x7f0000000440)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000004840)=[{&(0x7f00000023c0)="14837a194c5bc246d9cc19039817b2c6702b1ad97b5b8a785b878deaf53cb9107955ff5b2bc924ecb038ed0dc4d07dd1a6b02bd2013d79d70dc4a05bd757252e2a3fd947da2857ecd6abf25e7effa2bdb8b645b6d81f290a7d8ac7861332727eeb8efbcb1c157ace08eef7b9157aa754b00581b434faeb4bba39955064504d2f4fa079f6e8e08bd12048b5a226864e6e7ce7b1375ba466653e8046a6e8a5", 0x9e}, {&(0x7f0000002480)}, {&(0x7f0000002500)="0e8d9f2dced440ef88db89803f4e790ea86130e7f8e37b2b24fb933e68f2b5c337be0e59c771ad18acebc6a38d892f3175b81a517bd6ba1184046bd940f7bd1a97a4b4e2e5c24052202607ce384eaa79b39328c928288b64831d66651632cdcef5955b5b98ab4312b88076d68fe1e83562215fa48bf0f0901e42089bfc485b5d16062f58a6fa38cc757ad377c6d5deb6b3fc07d8f5fd96816ab173807f2ef007da1586e11b72e6a927f2a22135b1367d16fcfdb43d7a221d538da3176a6e6a441b89825f72cd59be14474e4adc4b2026fe4b97229ceb124f646923171a377af80a95e5a132dbfae878663c38cfb37a6e1d80574fef5be7cfa51ec632efd2d276bccc1bc8dc3a03460c8c106680d8aa7cb92a81dc0ca7bcfbad1e21bc0bd6f0983c8473e70fa4de08a47bffa4e8c0877a2b15064b3290cc5b1521f6ff5188ef3f2638c15c11f0e457af9887e5f38d5380607071cde57ddaf319905222a7b4aa35f10e1bb6b41e654575fc7365c042fbf2baa5ce48685d7bc1e35e30a2a9911e610c70e5ff00634716be4981e2e3d771b349edb222b724f9db8a2e30182d9ff407c03087ce5e0930080055406e4c9c436bd6e2047e9a31ed8efdd8f823d569ac22c9d0369304a1ca704da22e1c0d524ef5163bd238019853a72c912eff8138f0878c3cccddc98591da79d760dc4747e3e1559e26b7b2505822e43ea24df42af960344116b47350de29698d184713447174c5ce4bdf6246edfc428450893e09416622ca2776b86fb1308b1e62077ca5fc1a7aff83f1150b93c90496c7700a62c5077beba24ef1f551df4b48529828a1051fc884f167561d07c0e4d4096375384d610e009e3fa1266d62cea211927020c2529621f6139a2f4a8940093bdc58760533b0c9fe95b9167528ada902be2bd8c3941a27c260d6ba74cc1a2a22c2d9a1f10858fdcf97e5f8761a0291fd6967d718a89be9faaff6ea6db42666ba56a01a6a3801313d9c29de43a60f74ae8705be9e0e432874c183f531e9b2563d2a6569af65fc469478323a65c9220008f5d55feea3839315c1db5f07fb8cec57e00a384ebdf7db80412a99fa80158660d7fe2ba8105d32f5542e966e31b70ca483b57d888cfd482dbdacbc04024491ce2cd55f303fb1b9edc461cabe1699af357d3ef79e06af5fa1b5cd0ff30b2f41cf972484d1e388d33b92a9d9c5f7fd117a416bfa18c1ece44ccda15a63144df53b8a3b20b4078b90dcaae65e211a80f05f1d6960b9ffd6090806b77837ee053fae249cdff03149b714302586718b4aa3a953461b18e9cddc83d351ba112365a20f154f2c225279c9cbb515bfeb90aa55b4a51d110c09b7b69faece5c2fe3b19acc7b999c0c24ded079a6faa59f2704401758192320ab7f28287424cb0bf03234382102d61df952ae694c9c2c15eff853183594ca67afd40b6273ca0c680851cc5ba47d4ea325a0fb591b731727f8580da93640aa4d71e093c5faf5f906bbd3e528b1d504739ec8cf802f560063319372914f65c5e6bc7c7d97b64af2a538edfa8b7dc422d8f4a5d51654062532d74ad28ec4c21ee505249f87afe388022e8416598e86dc6fdd8f38c3af148f56a6999d7e7a947c86d7d1b306951a978fad39e3f8dcc3657b33ff59fb1e114a423c85ccafb88662e76c1dec0506267765bcd39d3cd2f54b3be16ebe43daf1597bf5f86f06854e9d8e305218086cdb8321ba33bbe725c5e063a32badca39de18e56fecec7624f19ed0bceedc6632bc6fce4dd007fe4331dcb73ad24189fe2e9898261a55f611c2f3df75f721454e4413461781f5bc800dac720398cfba585e38c18f6e0c23fcbee787a556dd9883f9b6bd376d0795aff4dfb9919a555549ef27e2b91111108d1b85696fe45d48b369bcca86319c6866af54696a50913f731551ee312545da95b513e0d0cf251740ed01a6475eaaa98def6a2e42371af3b64551baba3a28990f0b0e696d26bcf56f6b19919a3767ca53d9c4bc3890be776860d8ae295c6e6136d3616c2b92a00fc82e0556717e5564d43c57456f3f587eafdfec6f63ce4edfa8cd0d0d28c5ba8be435556dc8ea33f941a503a419c02fc3eecbfd9da2ab92d850857fdf3aad34b481b21607ebaf9a101303e2cf1973030d8cb92dfb18f07a5b445e49c685175615dab940bcfdc82a6a463ee445593fc2d65b0d2fa3f16c359ada911ab629ba387d89b58e1c72293b87bc99ca0c6575cf84922899ddc277845faed2158b39bac3ca7a15fa1714ed49331264387fbb1d4da9e4e07eabc2d94ad2fc3017033e75b2050a7f7e5940fe80e958e4593980cb29408a5815f9fe5508e0ea383ddc0ed6fc15e8af4c0c8e9f62da6f137fad313da7ec4c70cf4b250dc8b72f19bf8139b62874c15b05119b23e7eb2659ab551100a9f416ee60dca1440c1a26f2225c6a0ec7076137e21af37928dc65843ceb9c60896a9f748cfb076669ad8dbe2cda76cdc7c4dd865aaad786a36e9bb601b2de94a852c6ccf4528db85f539775ea4eec06790934031feacfb62d4d50909a2a34435a3107343436b46ccfb0b9e3cc159871472fb2de2fead6ad545a60bbf5bde1d784715ba19bfe095ea05f795b6986fa42db024102f7e6aec975c7908a8a505e7a43c2f913ad20326ae35bf60643ae76dd639cedf826962db896cadfa9a21b9b0d300b6442400ec84c227da73f6bfe8f5e64ad3a41164c6706eab7d5caf1cf77642b46041091051da0b0f0f6f57dee928e855a55083a557dc1762e6784822ad1caf59b8a134a3736e0fe7da13a397c253718eae11794a83b4bed9a099120649484017d4db2f29c551c1337e873eda9125956f9d5b90527326e31bd86527b646a35443024b634830645e7da41fd222c457fa37180cb2366d0e21c338feebb5a8d458428e9207282b91d95d51a5e9dc2f0eece3f675ca2fd21e8661155bc88e6d6c73436faaf7cd1956885a5e0e09a2f6b168b062471a986ada46fb3635b2a83fafd4f67bc6ffe10d72925b926da500f67b5901e7b39cfaae95cd5299ada4c9ced38b4bea91d9b18036353705cf95fccd6d38ab9c0f25fb33703d4de17714cd1745fe2f7d5d31fd9c3eb65988aea552b893a2ea55bff28a6f267d3c3542f74390be0376a3bd4b4fd2ec793725e7f87c09f84d0ff1a096d8a35b7ca5662fb73ba474e77a342f71193fd432cd8d2476e2f3a919aea2c99bf803cb8f7824b67201fe7b945a269a4042a35fa2661d646d3b41a92a9068c29c7d0a7ee310e33ed52342def73ba5fe1a8c4aaddfc4226b24b2569544ce660cb3a66fce1fafa5a564a3a237a596eb3f357a9648b95f3cf8296feb39d8b12bd5559535838d6215be29279c3136851d318c4363e0cf706294ea917897407836bdb5acdc60576754ac1058453c1e69752b0708417b90c8e0d66f0e40e3568669dd90771c557beb42b51b741a35b45e65b5bf16812d8634d3981f84613506223f9cdbacda338b3f623153ab4a5cdfc27b808205a10d6c2c9c998deea176f7c2562616ae1b5c492721b019a22cdd08f34425b1736d757357196cdfa0318acfbb1e458437999e8fa01a2c416e59366d79efbbe9edc20eda8ee78c855b3ae6c149baba3fa81ebab298de55971a57f102e341ad660fdb1a56cd3486c69776b46d955d2f489e310987706d44716e0aa6bd19a99526890830f19e26e47005c9379732e27b81b891796481c454be60133f8ceb0c8f2d960993f12181e7e0ed8f96785e91df77f95195b4087f5e4a8365d0e9cf0a3de5e13eb5bda90d4e783f67321014df3f4ae926c7dca624a954dc6ac436b621519aa9cda4bfc9f94c68122572f616a5804e29e0c818bc6a86404f34463b71e93f8dd92f7c8f2d9d17425a16936eb786188b30ab6e6ff5ca41635cb23cb2e2643fd7a6e450935ee6c7bce70f6588a5027a10e4f3aab364ce3e29f6e62faa3d18504310664fe8184ebf8efa01fc20c339e23659144f3b0fd1dec026193e6d64f6f5fa028497f1e880d6c1a112a4f0f483d886196b47bfccecebb26b1c6e3e91b4ce38787263c714a4e427651714456fe3358d3a5487b92644a8e67e716d91cddd32be351843ef81f6319ff0194ddff5ada8fc2804eca4e450571b23cc86c22e4cac5bc2a73169e6639410a118baaf5fdbcde455af5e55534e71f21a770cd90b4414a9d121d02719ae4e0940164385529b86e6c03d5b16c588127404536c08135821d3b21ab0388b414517c8e674be723faedc5a3976d3e3c9ad6f9786350cd3e28d20ccbc3c3740dc394fb43018b31cbff4b6f3fc603be614024bd71cc3c3fe5ac180a20279df870cddb29b2bec51e9d9e40d1d43f18f5a49a26ad946d1ceac43cbe7d766707bd7a95fbd719d10f0b38b1da4156eddbf23a89a88fe8e1ba8452a455be38ede9ec929cc8bf3f5dc294ce74905c206f213d140e65270ab849e351bcd235f392f1690a2da04115542a74c781cdadcffcadccdd79d5bf7e11c2121a313b8d7326bb9e96b26ee91e82a1c2f4d854a9ccc2eb1c72ad5021b57d5d448e50246ec86a0fc8c37ce87cb521e4fbb76d5dd4b5a9661fb7e5cbe2c8fa32e81d1b92cf0543e7c98bd6900039adbbaa9e2c02b3547ceb8b7e99bd88d99d043c8a015801b0fe72fe12241ecc6d99649dc033d66479498d26bea2115aa7866dee46e4aae74a8ac3a25228c14715a12da698ea8fb717a2b264a0d4d2cf6d1576e3b1957cd2c89c32f1c618bfc716cb59944b4df0c8345c67636190cac7fbe5ff354f362b48866023ca5fb6571986416b0bacf4b2a4f9e32336d0743b37213901941ad2a597c11ff0a6290cfd0547cdc47c817421637ae742ee87f73002d5fb2b7ae42722f6f64e1b35d94a93e6e9ce210b50a292d142ee22896c52d91faf016cbc0fd860dbd00934356ab524a193fad35b77e723c9b743fd731252e4d0928e3dc1cfe351ae58f4a18583d1e5cd76a6fa8dc3addd131ed0912dcefd89ccc8a6cfa07464e82c266a1b52c4c0a4cf14839202f86946b3f69654a6e53145c63d3a2a19df0bd1e9817cba270b9f3712bedfdc96a7b551adbdfbf71b247a69077dd6226329b525b0631b2a6779f2516037b9fc99de9f5b1f6a36da6e8c9d12372b669898bc1d59bb8bf8d07527f58c0ec88616ca349aa66b0e8a1e840a8373c9e5c38051b7c4ffd3cb97dc9403ac9dedf5e6589e335aa47ad7d91494404fba927363b789b840f297cb81a4bc8482ce49d3e407642bbe6878e4d24156bf81da7cc8a35374afa561cbbf2bdbb4253411187d72963a319f35804af1474844cfdc2f5adcde2418491d165ba8ad08a1b294f924bd0305429d9120ab05c07eff589064df38b814befe3b513ad96e27df3de6a84f6968c379c90db5ef12868dff14e25a4c71c821521dd80e1e055e1823ceaefbe72136e2863cdf8692e79b710cd782ff0df1c8fab1398457f0a4c583f2b47aa2b43980c1902b68792d4fa6a801367b2bfd3bf5879a36a00b1edc34ed93ab697fd18f0459cb9381d304191e8f173850339535755dafde81f0f6d12d71adccca896a1369183b477c16757efb7d69d57b0b036bca0a34af2d6d1709cbdaadff17d05dcdf802d6a90826f333e5054d4e4ac92ed219569a5707efd9079ca00c179a61bd34afff6861495baee362ac29606b33527e07b00dd737f69f3a98705441d524fc1e595f983aad98fd9e9734ffd1b469f45038e72c6493876fc63b99c9933f7a32014308b751cf7d3f5c62db7ab95d96a9bb", 0xff0}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000004500)="2c9bd50aae9aaea14a0124cb1349f53c039d2a5fea0a498208278b90b365e87da4cab130a617117c5d741a9bf90890129a7b2fcafa0d980ffb86d351d91ee4d289687917b065cbbe26ef49519dd87901fa81ab85518389dd5bd40a779336a5f78ee04822bc7c1dc4a5c37459fc7bd559ce5679f084042f822a2e2b956e02be73cc8e84b12a52354a448853115269baeead74bfbf5e3e69ee02afa52127941255b1ad4a5687a53142e5e9db427d4f1e173febb76e101744cfcfd6764399232b480f787517fb", 0xc5}, {&(0x7f0000004600)="52a8869a206b2c0982460d49dc146caabe91f3fc9ab746e02b8cfd18ebc7fa8acb66a11c39c0aebabc9b48d4b7cf265b0f78f992b830279ca17682aff0775d9987fd41b9085b66b18987f9bd8fb84cdfa66a78f45fc9bcce19e3e4bc0279f7c57668fab5510095", 0x67}, {&(0x7f0000004680)="fb3d18f7", 0x4}, {&(0x7f00000046c0)="53a04272c52472e599a80fe84df6d41d97be7fdb1a10dc722818242770e86c9364de064a53eb6fefacfc1e4633ba00dc530b3baa84c2ed6d0ece54647a90a219ac2c36999a59c29e19f8f273a3d65c336c2b5f4298d563f4c1f5b28350ebeb48a1bcb0f8d07d04ad9469214294bd16228779782fd0a99a6115ce5e399e59445fb782b6b22b3be605901fe981b699886d2499b5ecdc7911cbaeea301014c734e54becdce92a14a45e7ac98ebb762d37b308500d4f1a4cd62e53ba966f", 0xbc}, {&(0x7f0000004780)="ac8aa5b7179664fd5318f65653c1c5ade254dfe1b8444e37cd5a85341d1e301036f1b686852bbd957e2f1e94c4d3edbe9d069ef1b6af06b1805641494acbdbce73341eb2ec4d7d7b842586228487faaaf75be83d693e45784e0aafe97921546664f165d1d11ae03c784832c7bfd512336db82ff2504090ee0c1a0ce6298fb6c32867e3bea1920166b81e3f756b75f6ee163448263f2aacf33dcde3f3000bb2d2e307bd057e266b5fcb6ed8a6174e0e11", 0xb0}], 0x9, &(0x7f0000005300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x2c, 0x0, 0x9, [0x8001, 0x100, 0x4, 0x3, 0x4, 0x2, 0x1ff, 0xb9]}, @end, @timestamp_prespec={0x44, 0x44, 0xc8, 0x3, 0x8, [{@rand_addr=0x64010102, 0x7}, {@private=0xa010100, 0x9}, {@loopback}, {@multicast1, 0x6}, {@multicast1, 0x800}, {@rand_addr=0x64010101, 0x7fff}, {@private=0xa010102, 0x3d27}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_addr={0x44, 0x54, 0x3b, 0x1, 0x7, [{@loopback, 0x10}, {@multicast2, 0xfff}, {@local, 0x4}, {@private=0xa010100, 0x7}, {@local, 0x5}, {@loopback, 0x1}, {@remote, 0x9a}, {@remote, 0xfffffffa}, {@remote, 0x5}, {@local, 0x94bb}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x108}}], 0x6, 0x24000011) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000001600)={0x1, 0x6}, 0x4) kernel console output (not intermixed with test programs): bond2 (unregistering): Released all slaves [ 768.735129][ T31] audit: type=1400 audit(1791290066.788:2660): avc: denied { write } for pid=19945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.777564][ T6920] bond3 (unregistering): Released all slaves [ 768.941593][ T6920] ovs-dp0: left promiscuous mode [ 769.128450][ T31] audit: type=1400 audit(1791290067.178:2661): avc: denied { write } for pid=20013 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.415557][T16654] Bluetooth: hci0: command tx timeout [ 769.448435][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 770.772161][T19863] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.772232][T19863] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.772378][T19863] bridge_slave_0: entered allmulticast mode [ 770.804150][T19863] bridge_slave_0: entered promiscuous mode [ 770.820629][T19863] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.837232][T19863] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.837394][T19863] bridge_slave_1: entered allmulticast mode [ 770.866168][T19863] bridge_slave_1: entered promiscuous mode [ 771.018130][ T31] audit: type=1400 audit(1791290069.078:2662): avc: denied { write } for pid=20064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.096461][T19863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.124636][T19863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.409584][ T31] audit: type=1400 audit(1791290069.468:2663): avc: denied { write } for pid=20174 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.495404][ T5606] Bluetooth: hci0: command tx timeout [ 771.531346][T20183] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 771.675968][T19863] team0: Port device team_slave_0 added [ 771.766608][T19863] team0: Port device team_slave_1 added [ 771.844811][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 772.021132][T19863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.021145][T19863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.021169][T19863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.022752][T19863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.022773][T19863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.022788][T19863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.327526][T19863] hsr_slave_0: entered promiscuous mode [ 772.331290][T19863] hsr_slave_1: entered promiscuous mode [ 772.331781][T19863] debugfs: 'hsr0' already exists in 'hsr' [ 772.331803][T19863] Cannot create hsr debugfs directory [ 772.439966][ T6920] hsr_slave_0: left promiscuous mode [ 772.440465][ T6920] hsr_slave_1: left promiscuous mode [ 772.571392][T20268] 9p: Bad value for 'wfdno' [ 772.638714][T20270] netlink: 'syz.5.2857': attribute type 10 has an invalid length. [ 772.789141][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 772.916706][ T9] usb 7-1: device descriptor read/64, error -71 [ 773.080513][ T31] audit: type=1400 audit(1791290071.138:2664): avc: denied { write } for pid=20263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.164249][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 773.297544][ T9] usb 7-1: device descriptor read/64, error -71 [ 773.298892][ T59] smbdirect: ib_dev[syz2] removed [ 773.381919][ T31] audit: type=1400 audit(1791290071.438:2665): avc: denied { write } for pid=20280 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.409591][ T9] usb usb7-port1: attempt power cycle [ 773.570562][T20268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 773.571840][T20270] syz_tun: entered promiscuous mode [ 773.574918][ T5606] Bluetooth: hci0: command tx timeout [ 773.640595][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7 [ 773.746597][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 773.763895][ T9] usb 7-1: device descriptor read/8, error -71 [ 774.017226][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 774.041860][ T9] usb 7-1: device descriptor read/8, error -71 [ 774.145656][ T9] usb usb7-port1: unable to enumerate USB device [ 774.221779][ T6920] IPVS: stop unused estimator thread 0... [ 774.754703][T20421] tc_dump_action: action bad kind [ 774.755922][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2859'. [ 775.117224][ T31] audit: type=1400 audit(1791290073.178:2666): avc: denied { write } for pid=20385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.383056][T20442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20442 comm=syz.5.2861 [ 775.596226][ T31] audit: type=1400 audit(1791290073.658:2667): avc: denied { write } for pid=20443 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.657453][T20448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2862'. [ 775.760183][T20453] x_tables: ip_tables: ECN target: only valid in mangle table, not proc_dir [ 775.868192][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2863'. [ 775.868209][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2863'. [ 776.039778][T20453] netlink: 'syz.2.2864': attribute type 10 has an invalid length. [ 776.204368][T20453] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.206228][T20453] bond0: (slave team0): Enslaving as an active interface with an up link [ 776.272233][T20474] block nbd6: shutting down sockets [ 777.616206][ T31] audit: type=1400 audit(1791290075.678:2668): avc: denied { write } for pid=20476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.019703][ T31] audit: type=1400 audit(1791290076.078:2669): avc: denied { write } for pid=20522 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.216072][T19863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 778.260599][T19863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 778.276455][T19863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 778.316881][T19863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 778.317572][T19863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 778.362168][T19863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 778.376365][T19863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 778.478705][T19863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.479844][ T31] audit: type=1400 audit(1791290076.538:2670): avc: denied { create } for pid=20539 comm="syz.6.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 778.520339][ T31] audit: type=1400 audit(1791290076.578:2671): avc: denied { setopt } for pid=20539 comm="syz.6.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 778.870406][T19863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.916362][T19863] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.935741][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.935823][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.971274][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.971347][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.083737][ T1796] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 779.234049][ T1796] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.234954][ T1796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.234973][ T1796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.234996][ T1796] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.235030][ T1796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.245937][ T31] audit: type=1400 audit(1791290077.308:2672): avc: denied { write } for pid=20538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.258434][ T1796] usb 7-1: config 0 descriptor?? [ 779.575601][T20575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2881'. [ 779.856464][ T31] audit: type=1400 audit(1791290077.919:2673): avc: denied { write } for pid=20580 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.930229][ T1796] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 780.110078][ T9] usb 7-1: USB disconnect, device number 20 [ 780.378409][T20594] fido_id[20594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 781.087034][T19863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.341307][T19863] veth0_vlan: entered promiscuous mode [ 781.405815][T19863] veth1_vlan: entered promiscuous mode [ 781.558998][T16654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 781.581153][T16654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 781.596865][T20639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 781.598550][T20639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 781.599338][T20630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2883'. [ 781.599661][T20639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 781.755018][T19863] veth0_macvtap: entered promiscuous mode [ 781.804260][T19863] veth1_macvtap: entered promiscuous mode [ 781.960625][T19863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.011749][T19863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.067021][ T31] audit: type=1400 audit(1791290080.129:2674): avc: denied { write } for pid=20614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.155935][ T6920] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.156851][ T6920] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.156885][ T6920] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.156916][ T6920] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.689254][ T31] audit: type=1400 audit(1791290081.749:2675): avc: denied { write } for pid=20652 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.736096][T20639] Bluetooth: hci6: command tx timeout [ 783.937410][T20628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input26 [ 784.038928][T20027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.038953][T20027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.271841][ T6086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.271867][ T6086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.044382][T20688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2829'. [ 785.044417][T20688] netlink: 'syz.0.2829': attribute type 8 has an invalid length. [ 785.044426][T20688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2829'. [ 785.138202][T20688] erspan0: entered promiscuous mode [ 785.159388][T20688] gretap0: entered promiscuous mode [ 785.229821][T20688] erspan0: left promiscuous mode [ 785.284668][T20688] gretap0: left promiscuous mode [ 785.652117][ T31] audit: type=1400 audit(1791290083.709:2676): avc: denied { write } for pid=20670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.813587][T20639] Bluetooth: hci6: command tx timeout [ 786.116843][ T31] audit: type=1400 audit(1791290084.179:2677): avc: denied { write } for pid=20743 comm="syz.0.2892" name="cluster" dev="configfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 786.118171][ T31] audit: type=1400 audit(1791290084.179:2678): avc: denied { write } for pid=20737 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.181789][ T31] audit: type=1400 audit(1791290084.239:2679): avc: denied { write } for pid=20743 comm="syz.0.2892" name="node" dev="configfs" ino=54620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 786.217710][ T31] audit: type=1400 audit(1791290084.279:2680): avc: denied { read write } for pid=20743 comm="syz.0.2892" name="ipv4_address" dev="configfs" ino=54624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 786.217755][ T31] audit: type=1400 audit(1791290084.279:2681): avc: denied { open } for pid=20743 comm="syz.0.2892" path="/2/config/cluster/ocfs2/node/node0/ipv4_address" dev="configfs" ino=54624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 786.324761][T20749] cgroup: Need name or subsystem set [ 786.346101][ T31] audit: type=1400 audit(1791290084.409:2682): avc: denied { write } for pid=20743 comm="syz.0.2892" name="heartbeat" dev="configfs" ino=54621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 787.011073][T20817] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 787.011122][T20817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 787.055831][T20817] fuse: fd is not a fuse device [ 787.108554][T20633] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.122271][T20633] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.122422][T20633] bridge_slave_0: entered allmulticast mode [ 787.142388][T20633] bridge_slave_0: entered promiscuous mode [ 787.196239][T20633] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.198114][T20633] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.198270][T20633] bridge_slave_1: entered allmulticast mode [ 787.228062][T20633] bridge_slave_1: entered promiscuous mode [ 787.416523][T20633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.606741][T20633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.625092][T20857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2899'. [ 787.625125][T20857] netlink: 'syz.2.2899': attribute type 8 has an invalid length. [ 787.625133][T20857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2899'. [ 787.893951][T20639] Bluetooth: hci6: command tx timeout [ 787.944365][T20857] erspan0: entered promiscuous mode [ 787.961261][T20857] gretap0: entered promiscuous mode [ 787.980509][T20857] erspan0: left promiscuous mode [ 787.999134][T20857] gretap0: left promiscuous mode [ 788.230377][T20633] team0: Port device team_slave_0 added [ 788.277984][T20633] team0: Port device team_slave_1 added [ 788.408658][T20028] Bluetooth: hci7: Frame reassembly failed (-84) [ 788.411411][ T31] audit: type=1400 audit(1791290086.469:2683): avc: denied { write } for pid=20767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.481540][T20633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.481561][T20633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.481585][T20633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.543005][T20633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.543028][T20633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.543053][T20633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.771244][T20633] hsr_slave_0: entered promiscuous mode [ 789.789653][T20633] hsr_slave_1: entered promiscuous mode [ 789.793710][T20633] debugfs: 'hsr0' already exists in 'hsr' [ 789.793729][T20633] Cannot create hsr debugfs directory [ 790.334083][ T5606] Bluetooth: hci6: command tx timeout [ 790.453063][ T5606] Bluetooth: hci7: command 0x1003 tx timeout [ 790.454070][T20639] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 790.538999][ T31] audit: type=1400 audit(1791290088.599:2684): avc: denied { write } for pid=20934 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.625584][ T31] audit: type=1400 audit(1791290088.689:2685): avc: denied { name_bind } for pid=20956 comm="syz.2.2905" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 791.668940][T20633] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 791.690961][T20633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 791.692107][T20633] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 791.743759][T20633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 791.745164][T20633] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 791.776137][T20633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 791.777616][T20633] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 791.825052][T20633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 792.052714][T20633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.077952][T20633] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.093619][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.093700][ T6086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.099773][T20027] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.101597][T20027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.596272][T20633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.635035][T21066] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2910'. [ 792.635070][T21066] netlink: 'syz.5.2910': attribute type 8 has an invalid length. [ 792.635088][T21066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2910'. [ 792.676213][T21066] erspan0: entered promiscuous mode [ 792.678148][T21066] gretap0: entered promiscuous mode [ 792.708058][T21066] erspan0: left promiscuous mode [ 792.710157][T21066] gretap0: left promiscuous mode [ 793.559718][T20960] ceph: No mds server is up or the cluster is laggy [ 794.592538][T21075] Bluetooth: MGMT ver 1.23 [ 794.944316][ T6784] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 795.005168][T20633] veth0_vlan: entered promiscuous mode [ 795.028735][T20633] veth1_vlan: entered promiscuous mode [ 795.096460][T20633] veth0_macvtap: entered promiscuous mode [ 795.103282][ T6784] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.110455][ T6784] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.110482][ T6784] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 795.110495][ T6784] usb 1-1: config 1 has no interface number 0 [ 795.110529][ T6784] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.110556][ T6784] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 795.176719][ T6784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.176747][ T6784] usb 1-1: Product: syz [ 795.176766][ T6784] usb 1-1: Manufacturer: syz [ 795.176775][ T6784] usb 1-1: SerialNumber: syz [ 795.178974][T20633] veth1_macvtap: entered promiscuous mode [ 795.256197][T20633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.285885][T20633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.332295][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.332671][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.332703][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.332724][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.655463][T21096] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2915'. [ 795.686230][T21096] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2915'. [ 795.866222][T20026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.866238][T20026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.966588][T21107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2917'. [ 796.011347][T20028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.011382][T20028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.023029][ T6784] cdc_ncm 1-1:1.1: bind() failure [ 796.059465][ T6784] usb 1-1: USB disconnect, device number 32 [ 796.174852][T21120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2918'. [ 796.174893][T21120] netlink: 'syz.2.2918': attribute type 8 has an invalid length. [ 796.174902][T21120] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2918'. [ 797.948617][T21124] 9p: Bad value for 'wfdno' [ 797.969166][ T31] audit: type=1400 audit(1791290096.030:2686): avc: denied { append } for pid=21121 comm="syz.7.2885" name="comedi2" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 798.118224][T21134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2921'. [ 798.118258][T21134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2921'. [ 798.158723][T21134] erspan0: entered promiscuous mode [ 798.161597][T21134] gretap0: entered promiscuous mode [ 798.191311][T21137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2921'. [ 798.191347][T21137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2921'. [ 798.242302][ T6784] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 798.394800][ T6784] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 798.397743][ T6784] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 798.397764][ T6784] usb 8-1: config 0 interface 0 has no altsetting 0 [ 798.431134][ T6784] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 798.431152][ T6784] usb 8-1: Product: syz [ 798.431172][ T6784] usb 8-1: Manufacturer: syz [ 798.431181][ T6784] usb 8-1: SerialNumber: syz [ 798.464672][ T6784] usb 8-1: config 0 descriptor?? [ 798.483529][ T6784] usb 8-1: selecting invalid altsetting 0 [ 798.543107][ T6086] IPVS: starting estimator thread 0... [ 798.563219][T21153] IPVS: sh: FWM 1 0x00000001 - no destination available [ 798.610209][T21153] binder: 21146:21153 ioctl c0306201 200000000040 returned -14 [ 798.646555][ T5598] process 7303 (syz.2.387) no longer affine to cpu1 [ 798.697992][T21155] IPVS: using max 63 ests per chain, 151200 per kthread [ 798.698612][T21123] comedi comedi2: comedi_config --init_data is deprecated [ 798.732543][ T6784] usb 8-1: USB disconnect, device number 2 [ 798.863602][T19716] udevd[19716]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 799.219972][ T5606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 799.236095][ T5606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 799.238330][ T5606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 799.240267][ T5606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 799.250190][ T5606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 800.370082][ T6278] syz_tun (unregistering): left allmulticast mode [ 800.370950][ T6278] bond0: (slave syz_tun): Releasing backup interface [ 800.632235][ T6784] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 800.750448][T20024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.804893][ T6784] usb 8-1: Using ep0 maxpacket: 16 [ 800.806119][ T6784] usb 8-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 800.807115][ T6784] usb 8-1: config 0 interface 0 altsetting 183 endpoint 0x2 has an invalid bInterval 55, changing to 9 [ 800.807144][ T6784] usb 8-1: config 0 interface 0 has no altsetting 0 [ 800.807163][ T6784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.876979][ T6784] usb 8-1: config 0 descriptor?? [ 801.115369][T20024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.216883][T20024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.293908][ T6783] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 801.317143][T20024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.356261][T21208] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2931'. [ 801.412105][T20639] Bluetooth: hci7: command tx timeout [ 801.451953][ T6783] usb 1-1: Using ep0 maxpacket: 32 [ 801.454965][ T6783] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 801.456240][ T6783] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 801.458116][ T6783] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 801.458141][ T6783] usb 1-1: Product: syz [ 801.458150][ T6783] usb 1-1: Manufacturer: syz [ 801.458170][ T6783] usb 1-1: SerialNumber: syz [ 801.521206][ T6783] usb 1-1: config 0 descriptor?? [ 801.528718][T21226] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 801.554497][ T6783] hub 1-1:0.0: bad descriptor, ignoring hub [ 801.554516][ T6783] hub 1-1:0.0: probe with driver hub failed with error -5 [ 801.591764][ T6784] usbhid 8-1:0.0: can't add hid device: -71 [ 801.591854][ T6784] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 801.626438][ T6784] usb 8-1: USB disconnect, device number 3 [ 802.398065][T21282] : renamed from vlan0 (while UP) [ 802.524327][ T31] audit: type=1400 audit(1791290100.590:2687): avc: denied { mounton } for pid=21311 comm="syz.7.2934" path="/3/file1/proc" dev="autofs" ino=55899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 802.668000][ T31] audit: type=1400 audit(1791290100.730:2688): avc: denied { unmount } for pid=20633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 802.963574][T20639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 802.982282][T20639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 802.983807][T20639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 802.984473][T20639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 802.989979][T20639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 803.192770][T21330] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2935'. [ 803.192965][ T31] audit: type=1400 audit(1791290101.260:2689): avc: denied { write } for pid=21319 comm="syz.7.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 803.493471][ T5606] Bluetooth: hci7: command tx timeout [ 803.497370][ T6785] usb 1-1: USB disconnect, device number 33 [ 803.670961][ T6785] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 803.699586][ T31] audit: type=1400 audit(1791290101.760:2690): avc: denied { write } for pid=21303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.832404][ T6785] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 803.833259][ T6785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 803.834965][ T6785] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 803.834980][ T6785] usb 1-1: Product: syz [ 803.834999][ T6785] usb 1-1: Manufacturer: syz [ 803.835008][ T6785] usb 1-1: SerialNumber: syz [ 803.837144][ T6785] usb 1-1: config 0 descriptor?? [ 803.839660][T21282] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 803.905844][ T6785] hub 1-1:0.0: bad descriptor, ignoring hub [ 803.905872][ T6785] hub 1-1:0.0: probe with driver hub failed with error -5 [ 803.999497][T20024] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 804.019493][T20024] bond0 (unregistering): (slave team0): Releasing backup interface [ 804.044703][T20024] bond0 (unregistering): Released all slaves [ 804.147037][ T31] audit: type=1400 audit(1791290102.210:2691): avc: denied { write } for pid=21351 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.372214][ T6785] usb 1-1: USB disconnect, device number 34 [ 804.433855][T20024] tipc: Disabling bearer [ 804.471217][T20024] tipc: Left network mode [ 804.699494][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 804.717810][T20024] IPVS: stopping backup sync thread 20183 ... [ 804.872933][T21179] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.873012][T21179] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.873160][T21179] bridge_slave_0: entered allmulticast mode [ 804.874388][T21179] bridge_slave_0: entered promiscuous mode [ 805.040344][T21179] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.040415][T21179] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.040540][T21179] bridge_slave_1: entered allmulticast mode [ 805.041847][T21179] bridge_slave_1: entered promiscuous mode [ 805.091913][ T5606] Bluetooth: hci1: command tx timeout [ 805.200045][ T5606] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 805.200074][ T5606] Bluetooth: unknown link type 96 [ 805.200111][ T5606] Bluetooth: hci5: connection err: -111 [ 805.247392][T21438] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2938'. [ 805.447407][T21179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.473852][T21179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.571793][ T5606] Bluetooth: hci7: command tx timeout [ 805.709143][T21179] team0: Port device team_slave_0 added [ 805.731036][T21179] team0: Port device team_slave_1 added [ 806.022534][ T5606] Bluetooth: hci5: unexpected event 0x04 length: 11 > 10 [ 806.022564][ T5606] Bluetooth: unknown link type 96 [ 806.022579][ T5606] Bluetooth: hci5: connection err: -111 [ 807.092334][T21512] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.2940'. [ 807.128731][T21179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.128752][T21179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.128767][T21179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.183407][ T5606] Bluetooth: hci1: command tx timeout [ 807.286441][T21179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.286463][T21179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.286488][T21179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.651684][ T5606] Bluetooth: hci7: command tx timeout [ 807.683960][ T6785] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 807.817233][ T6785] usb 8-1: device descriptor read/64, error -71 [ 808.024982][T21179] hsr_slave_0: entered promiscuous mode [ 808.025770][T21179] hsr_slave_1: entered promiscuous mode [ 808.047161][T21179] debugfs: 'hsr0' already exists in 'hsr' [ 808.047190][T21179] Cannot create hsr debugfs directory [ 808.068346][ T6785] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 808.557641][ T31] audit: type=1400 audit(1791290106.620:2692): avc: denied { write } for pid=21493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.018973][ T31] audit: type=1400 audit(1791290107.080:2693): avc: denied { write } for pid=21644 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 809.251640][ T5606] Bluetooth: hci1: command tx timeout [ 809.470491][T20024] hsr_slave_0: left promiscuous mode [ 809.480291][T20024] hsr_slave_1: left promiscuous mode [ 810.689101][ T31] audit: type=1400 audit(1791290108.750:2694): avc: denied { ioctl } for pid=21573 comm="syz.5.2943" path="/378/file0" dev="tmpfs" ino=2071 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 811.331530][ T5606] Bluetooth: hci1: command tx timeout [ 811.406875][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 811.447904][T21662] trusted_key: encrypted_key: keyword 'ew' not recognized [ 811.939473][T21695] bridge0: port 3(syz_tun) entered blocking state [ 811.939544][T21695] bridge0: port 3(syz_tun) entered disabled state [ 811.939705][T21695] syz_tun: entered allmulticast mode [ 811.940888][T21695] syz_tun: entered promiscuous mode [ 811.980042][T21695] bridge0: port 3(syz_tun) entered blocking state [ 811.980124][T21695] bridge0: port 3(syz_tun) entered forwarding state [ 812.146235][T20024] IPVS: stop unused estimator thread 0... [ 812.162995][ T6785] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 812.322948][ T6785] usb 8-1: Using ep0 maxpacket: 32 [ 812.341314][ T6785] usb 8-1: unable to get BOS descriptor or descriptor too short [ 812.341355][ T6785] usb 8-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 812.371926][ T6785] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.371954][ T6785] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 812.424909][ T6785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.424937][ T6785] usb 8-1: Product: syz [ 812.424947][ T6785] usb 8-1: Manufacturer: syz [ 812.424957][ T6785] usb 8-1: SerialNumber: syz [ 812.504547][ T6785] usb 8-1: 0:1 : does not exist [ 812.504573][ T6785] usb 8-1: 0:2 : does not exist [ 813.020094][T21709] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 813.050313][T21754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.050683][T21754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.088906][T21756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2953'. [ 813.088942][T21756] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2953'. [ 813.171732][T21762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2953'. [ 813.171769][T21762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2953'. [ 813.704474][T21756] erspan0: entered promiscuous mode [ 813.747130][T21756] gretap0: entered promiscuous mode [ 813.747720][T21756] debugfs: 'hsr1' already exists in 'hsr' [ 813.747734][T21756] Cannot create hsr debugfs directory [ 813.747785][T21756] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 813.747815][T21756] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 814.208331][ T31] audit: type=1400 audit(1791290112.270:2695): avc: denied { write } for pid=21741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.862791][ T31] audit: type=1400 audit(1791290112.930:2696): avc: denied { write } for pid=21823 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.961516][ T6785] usb 8-1: 3:0: failed to get current value for ch 0 (-22) [ 815.020063][ T6785] usb 8-1: 3:0: cannot get min/max values for control 2 (id 3) [ 815.020084][ T6785] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 815.020105][ T6785] usb 8-1: [3] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 815.085582][ T6785] usb 8-1: 3:0: cannot get min/max values for control 3 (id 3) [ 815.299313][ T6785] usb 8-1: 3:0: cannot get min/max values for control 3 (id 3) [ 815.312888][T21851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2956'. [ 815.312936][T21851] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2956'. [ 815.376839][ T6785] usb 8-1: 3:0: cannot get min/max values for control 2 (id 3) [ 815.419378][T21852] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2956'. [ 815.419416][T21852] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2956'. [ 815.529963][ T6785] usb 8-1: 3:0: cannot get min/max values for control 2 (id 3) [ 815.576217][ T6785] usb 8-1: USB disconnect, device number 6 [ 815.664965][T21321] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.665036][T21321] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.665184][T21321] bridge_slave_0: entered allmulticast mode [ 815.666469][T21321] bridge_slave_0: entered promiscuous mode [ 815.670530][T19965] udevd[19965]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 815.776737][T21851] erspan0: entered promiscuous mode [ 815.788518][T21851] gretap0: entered promiscuous mode [ 815.796645][T21851] debugfs: 'hsr1' already exists in 'hsr' [ 815.796665][T21851] Cannot create hsr debugfs directory [ 815.893909][T21321] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.893982][T21321] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.894124][T21321] bridge_slave_1: entered allmulticast mode [ 815.901484][T21321] bridge_slave_1: entered promiscuous mode [ 816.386518][T21321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.438729][T21321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.645426][T21321] team0: Port device team_slave_0 added [ 816.666134][T21321] team0: Port device team_slave_1 added [ 816.930196][T21321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.930209][T21321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.930234][T21321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.995083][T21321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.995105][T21321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.995120][T21321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.371879][T21977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2958'. [ 817.475777][ T31] audit: type=1400 audit(1791290115.541:2697): avc: denied { write } for pid=21879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 817.687888][T21321] hsr_slave_0: entered promiscuous mode [ 817.702428][T21321] hsr_slave_1: entered promiscuous mode [ 817.903754][ T31] audit: type=1400 audit(1791290115.971:2698): avc: denied { write } for pid=21990 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.341226][ T31] audit: type=1326 audit(1791290116.401:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.7.2962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda9899e199 code=0x0 [ 818.683471][T22025] xt_ecn: cannot match TCP bits for non-tcp packets [ 818.687757][T21179] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 818.688264][T22029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2964'. [ 818.688294][T22029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2964'. [ 818.737437][T21179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.785183][T22040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2964'. [ 818.785217][T22040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2964'. [ 818.824958][T22043] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2965'. [ 818.824994][T22043] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2965'. [ 818.904526][T22047] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2965'. [ 818.904574][T22047] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2965'. [ 818.953222][T21179] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 819.213967][T21179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.216629][T21179] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 819.275452][T21179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 819.557463][T21179] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 819.606748][T21179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 819.677366][ T31] audit: type=1400 audit(1791290117.741:2700): avc: denied { write } for pid=22015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.899725][ T31] audit: type=1400 audit(1791290117.961:2701): avc: denied { ioctl } for pid=22101 comm="syz.7.2967" path="/dev/sg0" dev="devtmpfs" ino=1152 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 820.124604][ T31] audit: type=1400 audit(1791290118.191:2702): avc: denied { write } for pid=22119 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.345120][T21179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.837184][T21179] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.203961][ T6917] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.204040][ T6917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.237648][ T6917] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.237730][ T6917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.806046][T21321] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 821.846596][T21321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.847311][T21321] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 821.884819][ T31] audit: type=1400 audit(1791290119.951:2703): avc: denied { write } for pid=22127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.889979][T21321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 821.950065][T21321] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 821.975324][T21321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.222525][T21321] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 822.251772][T21321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.354960][ T31] audit: type=1400 audit(1791290120.421:2704): avc: denied { write } for pid=22161 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.436386][T22162] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2971'. [ 823.006936][T21321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.109608][T21321] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.168342][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.168413][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.226744][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.226824][ T6086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.801270][ T6784] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 823.936446][ T6784] usb 1-1: device descriptor read/64, error -71 [ 824.222036][ T6784] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 824.351022][ T6784] usb 1-1: device descriptor read/64, error -71 [ 824.432250][ T31] audit: type=1400 audit(1791290122.501:2705): avc: denied { name_bind } for pid=22204 comm="syz.5.2975" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 824.465476][ T6784] usb usb1-port1: attempt power cycle [ 824.476418][T22205] netlink: 'syz.5.2975': attribute type 39 has an invalid length. [ 824.603906][T22210] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2976'. [ 824.603939][T22210] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2976'. [ 824.716750][T22219] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2976'. [ 824.716784][T22219] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2976'. [ 824.805927][ T6784] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 824.824441][ T6784] usb 1-1: device descriptor read/8, error -71 [ 825.064948][ T6784] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 825.085288][ T6784] usb 1-1: device descriptor read/8, error -71 [ 825.195253][ T6784] usb usb1-port1: unable to enumerate USB device [ 825.488142][ T31] audit: type=1400 audit(1791290123.551:2706): avc: denied { write } for pid=22185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.590265][T22238] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2977'. [ 825.590300][T22238] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2977'. [ 825.736039][T22245] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2977'. [ 825.736073][T22245] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2977'. [ 826.041248][T21179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.107910][ T31] audit: type=1400 audit(1791290124.171:2707): avc: denied { write } for pid=22255 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.394185][T21179] veth0_vlan: entered promiscuous mode [ 826.454694][T21179] veth1_vlan: entered promiscuous mode [ 826.647899][T21179] veth0_macvtap: entered promiscuous mode [ 826.676889][T21179] veth1_macvtap: entered promiscuous mode [ 826.781255][T21179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.819429][T21179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.861661][ T6917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.879974][T20028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.892328][T20028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.893225][T20028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.054724][T21321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.680156][ T6086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.680182][ T6086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.796779][T22301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2982'. [ 828.073492][T20024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.073517][T20024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.266224][ T31] audit: type=1400 audit(1791290126.331:2708): avc: denied { write } for pid=22274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.666582][T22327] MTD: Attempt to mount non-MTD device "/dev/md0" [ 828.666679][ T31] audit: type=1400 audit(1791290126.731:2709): avc: denied { mounton } for pid=22325 comm="syz.2.2925" path="/0/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 828.766001][ T31] audit: type=1400 audit(1791290126.831:2710): avc: denied { write } for pid=22326 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.863048][T21321] veth0_vlan: entered promiscuous mode [ 828.885259][ T31] audit: type=1400 audit(1791290126.951:2711): avc: denied { getopt } for pid=22329 comm="syz.0.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 828.964229][T21321] veth1_vlan: entered promiscuous mode [ 829.128495][T21321] veth0_macvtap: entered promiscuous mode [ 829.166143][T21321] veth1_macvtap: entered promiscuous mode [ 829.295152][T21321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.341020][T21321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.465608][ T6086] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.466654][ T6086] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.496273][T20028] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.536470][T20028] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.677511][ T31] audit: type=1400 audit(1791290127.741:2712): avc: denied { accept } for pid=22340 comm="syz.5.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 830.024851][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.024876][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.275086][T22344] ipvlan2: entered promiscuous mode [ 830.275251][T22344] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 830.275279][T22344] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 830.275474][T22344] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 830.719401][ T31] audit: type=1400 audit(1791290128.781:2713): avc: denied { write } for pid=22339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.761415][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 830.826582][T20024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.826599][T20024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.885236][ T31] audit: type=1400 audit(1791290128.951:2714): avc: denied { mounton } for pid=22396 comm="syz.7.2997" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 830.935934][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 830.953061][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 830.972499][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.972527][ T10] usb 3-1: Product: syz [ 830.972536][ T10] usb 3-1: Manufacturer: syz [ 830.972555][ T10] usb 3-1: SerialNumber: syz [ 831.245612][ T31] audit: type=1400 audit(1791290129.301:2715): avc: denied { write } for pid=22400 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.329507][ T31] audit: type=1400 audit(1791290129.391:2716): avc: denied { ioctl } for pid=22369 comm="syz.2.2995" path="/3/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 831.439066][T22401] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2996'. [ 831.688584][ T31] audit: type=1400 audit(1791290129.751:2717): avc: denied { read write } for pid=22408 comm="syz.8.2933" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 831.724631][ T31] audit: type=1400 audit(1791290129.791:2718): avc: denied { open } for pid=22408 comm="syz.8.2933" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 832.030913][ T6793] hid_parser_main: 30 callbacks suppressed [ 832.030942][ T6793] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 832.231455][ T6793] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 833.241333][ T6783] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 833.391831][ T6783] usb 1-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 833.395102][ T6783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 833.395147][ T6783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.451797][ T6783] usb 1-1: config 0 descriptor?? [ 833.602022][T22409] ip6gretap1: entered allmulticast mode [ 833.627223][T22409] batman_adv: batadv0: Adding interface: ip6gretap1 [ 833.627256][T22409] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.627284][T22409] batman_adv: batadv0: Interface activated: ip6gretap1 [ 833.832415][ T10] usb 3-1: Can't get UAC3 power state for id 10 [ 833.836657][ T10] usb 3-1: BAAD HEADPHONE p_chmask mismatch [ 833.925175][ T6783] logitech 0003:046D:C20A.0012: unknown main item tag 0x0 [ 833.925208][ T6783] logitech 0003:046D:C20A.0012: unknown main item tag 0x0 [ 833.925235][ T6783] logitech 0003:046D:C20A.0012: unknown main item tag 0x0 [ 833.925251][ T6783] logitech 0003:046D:C20A.0012: unknown main item tag 0x0 [ 833.925276][ T6783] logitech 0003:046D:C20A.0012: unknown main item tag 0x0 [ 833.925301][ T6783] logitech 0003:046D:C20A.0012: unknown main item tag 0x0 [ 833.925317][ T6783] logitech 0003:046D:C20A.0012: unknown main item tag 0x0 [ 833.925342][ T6783] logitech 0003:046D:C20A.0012: unknown main item tag 0x0 [ 833.998708][ T6785] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 834.027574][ T6783] logitech 0003:046D:C20A.0012: hidraw1: USB HID v0.00 Device [HID 046d:c20a] on usb-dummy_hcd.0-1/input0 [ 834.027633][ T6783] logitech 0003:046D:C20A.0012: no inputs found [ 834.162286][ T6785] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 834.163456][ T6785] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 834.163487][ T6785] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.163501][ T6785] usb 9-1: config 2 interface 0 has no altsetting 0 [ 834.163529][ T6785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.465731][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 834.522271][ T10] usb 3-1: USB disconnect, device number 55 [ 834.640365][T19717] udevd[19717]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.802944][T22495] tipc: Started in network mode [ 834.802975][T22495] tipc: Node identity ac14142f, cluster identity 4711 [ 834.809409][T22495] tipc: New replicast peer: 127.0.0.1 [ 834.839314][T22495] tipc: Enabled bearer , priority 10 [ 834.847897][T22495] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3007'. [ 834.890757][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 834.923487][ T6785] usbhid 9-1:2.0: can't add hid device: -71 [ 834.923570][ T6785] usbhid 9-1:2.0: probe with driver usbhid failed with error -71 [ 834.955775][ T6785] usb 9-1: USB disconnect, device number 2 [ 835.011775][ T6783] usb 1-1: USB disconnect, device number 39 [ 835.061251][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 835.080150][ T10] usb 3-1: config 1 has an invalid interface number: 243 but max is 2 [ 835.080168][ T10] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 835.080192][ T10] usb 3-1: config 1 has no interface number 3 [ 835.080249][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 835.161091][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.161119][ T10] usb 3-1: Product: syz [ 835.161129][ T10] usb 3-1: Manufacturer: syz [ 835.161147][ T10] usb 3-1: SerialNumber: syz [ 836.679221][ T6793] tipc: Node number set to 2886997039 [ 837.654157][T22535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3009'. [ 837.906987][T22539] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 838.859323][ T10] usb 3-1: USB disconnect, device number 56 [ 838.942890][T22556] FAT-fs (nullb0): bogus number of reserved sectors [ 838.942916][T22556] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 839.117409][T19851] udevd[19851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 839.914033][T22589] FAULT_INJECTION: forcing a failure. [ 839.914033][T22589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.914076][T22589] CPU: 0 UID: 0 PID: 22589 Comm: syz.0.3018 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.914095][T22589] Tainted: [L]=SOFTLOCKUP [ 839.914099][T22589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 839.914107][T22589] Call Trace: [ 839.914112][T22589] [ 839.914117][T22589] dump_stack_lvl+0x100/0x190 [ 839.914140][T22589] should_fail_ex.cold+0x5/0xa [ 839.914157][T22589] _copy_from_user+0x2e/0xd0 [ 839.914173][T22589] copy_msghdr_from_user+0x9f/0x4c0 [ 839.914188][T22589] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 839.914206][T22589] ? lock_acquire+0x1d1/0x380 [ 839.914220][T22589] ? get_pid_task+0x2a/0x250 [ 839.914237][T22589] ___sys_sendmsg+0x106/0x1e0 [ 839.914251][T22589] ? __pfx____sys_sendmsg+0x10/0x10 [ 839.914265][T22589] ? get_pid_task+0x106/0x250 [ 839.914286][T22589] ? find_held_lock+0x2b/0x80 [ 839.914313][T22589] __sys_sendmsg+0x160/0x210 [ 839.914330][T22589] ? __pfx___sys_sendmsg+0x10/0x10 [ 839.914354][T22589] do_syscall_64+0x123/0x790 [ 839.914376][T22589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.914389][T22589] RIP: 0033:0x7f63cf99e199 [ 839.914399][T22589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.914411][T22589] RSP: 002b:00007f63d0937028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.914424][T22589] RAX: ffffffffffffffda RBX: 00007f63cfc25fa0 RCX: 00007f63cf99e199 [ 839.914432][T22589] RDX: 000000000000c004 RSI: 0000200000000700 RDI: 0000000000000004 [ 839.914440][T22589] RBP: 00007f63d0937090 R08: 0000000000000000 R09: 0000000000000000 [ 839.914447][T22589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.914454][T22589] R13: 00007f63cfc26038 R14: 00007f63cfc25fa0 R15: 00007fff0637a358 [ 839.914470][T22589] [ 840.319912][T22596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3020'. [ 840.319949][T22596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3020'. [ 840.376911][T22597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3020'. [ 840.376957][T22597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3020'. [ 840.509646][ T6783] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 840.664198][ T6783] usb 1-1: unable to get BOS descriptor or descriptor too short [ 840.664633][ T6783] usb 1-1: not running at top speed; connect to a high speed hub [ 840.664662][ T6783] usb 1-1: New USB device found, idVendor=0451, idProduct=5052, bcdDevice=f0.86 [ 840.665640][ T6783] usb 1-1: config 1 has an invalid interface number: 122 but max is 0 [ 840.665656][ T6783] usb 1-1: config 1 has no interface number 0 [ 840.665688][ T6783] usb 1-1: config 1 interface 122 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 840.665716][ T6783] usb 1-1: config 1 interface 122 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 840.665740][ T6783] usb 1-1: config 1 interface 122 has no altsetting 0 [ 840.668245][ T6783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.668271][ T6783] usb 1-1: Product: syz [ 840.668280][ T6783] usb 1-1: Manufacturer: syz [ 840.677740][ T6783] usb 1-1: SerialNumber: syz [ 840.782594][T22591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 841.258969][T22596] erspan0: entered promiscuous mode [ 841.273023][T22596] gretap0: entered promiscuous mode [ 841.273571][T22596] debugfs: 'hsr1' already exists in 'hsr' [ 841.273586][T22596] Cannot create hsr debugfs directory [ 841.578994][ T31] audit: type=1400 audit(1791290139.642:2719): avc: denied { read } for pid=22619 comm="syz.2.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 841.614606][T22599] syzkaller0: entered promiscuous mode [ 841.614640][T22599] syzkaller0: entered allmulticast mode [ 841.805154][ T6783] ti_usb_3410_5052 1-1:1.122: TI USB 5052 2 port adapter converter detected [ 841.902992][ T6783] usb 1-1: USB disconnect, device number 40 [ 842.108581][ T31] audit: type=1400 audit(1791290140.172:2720): avc: denied { connect } for pid=22641 comm="syz.2.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 842.220645][ T31] audit: type=1400 audit(1791290140.292:2721): avc: denied { create } for pid=22647 comm="syz.2.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 842.329717][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 842.559790][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 842.560765][ T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 842.561618][ T10] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 842.561645][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.789839][ T10] usb 9-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 842.789868][ T10] usb 9-1: Product: syz [ 842.832736][ T10] usb 9-1: config 0 descriptor?? [ 843.101881][T22642] netlink: 'syz.8.3028': attribute type 12 has an invalid length. [ 843.101909][T22642] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3028'. [ 843.316521][ T10] usb 9-1: USB disconnect, device number 3 [ 843.467399][ T5606] Bluetooth: hci7: unexpected event 0x04 length: 11 > 10 [ 843.467429][ T5606] Bluetooth: unknown link type 96 [ 843.467466][ T5606] Bluetooth: hci7: connection err: -111 [ 845.250879][T22684] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3037'. [ 845.435507][T22691] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.3040'. [ 845.436050][T22691] netlink: 5364 bytes leftover after parsing attributes in process `syz.8.3040'. [ 847.275361][T22735] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3049'. [ 847.275383][T22735] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3049'. [ 847.792472][T22751] FAULT_INJECTION: forcing a failure. [ 847.792472][T22751] name failslab, interval 1, probability 0, space 0, times 0 [ 847.792506][T22751] CPU: 0 UID: 0 PID: 22751 Comm: syz.0.3052 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.792524][T22751] Tainted: [L]=SOFTLOCKUP [ 847.792529][T22751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 847.792536][T22751] Call Trace: [ 847.792541][T22751] [ 847.792546][T22751] dump_stack_lvl+0x100/0x190 [ 847.792568][T22751] should_fail_ex.cold+0x5/0xa [ 847.792593][T22751] should_failslab+0xc2/0x120 [ 847.792610][T22751] __kmalloc_noprof+0xfc/0x840 [ 847.792624][T22751] ? trace_kmalloc+0xeb/0x110 [ 847.792640][T22751] ? lsm_blob_alloc+0x68/0x90 [ 847.792654][T22751] lsm_blob_alloc+0x68/0x90 [ 847.792666][T22751] security_sk_alloc+0x2d/0x290 [ 847.792680][T22751] sk_prot_alloc+0x12a/0x2a0 [ 847.792695][T22751] sk_alloc+0x36/0xe80 [ 847.792711][T22751] bpf_prog_test_run_skb+0x4d2/0x3530 [ 847.792729][T22751] ? lock_acquire+0x1d1/0x380 [ 847.792742][T22751] ? __fget_files+0x34/0x3d0 [ 847.792759][T22751] ? find_held_lock+0x2b/0x80 [ 847.792776][T22751] ? __fget_files+0x161/0x3d0 [ 847.792795][T22751] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 847.792812][T22751] ? fput+0x7c/0x100 [ 847.792830][T22751] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 847.792845][T22751] __sys_bpf+0x2265/0x4a30 [ 847.792862][T22751] ? __pfx___sys_bpf+0x10/0x10 [ 847.792874][T22751] ? find_held_lock+0x2b/0x80 [ 847.792891][T22751] ? get_pid_task+0xfc/0x250 [ 847.792906][T22751] ? get_pid_task+0xfc/0x250 [ 847.792926][T22751] ? find_held_lock+0x2b/0x80 [ 847.792946][T22751] ? rcu_read_lock_any_held+0x6a/0x90 [ 847.792964][T22751] ? find_held_lock+0x2b/0x80 [ 847.792980][T22751] ? ksys_write+0x190/0x250 [ 847.792992][T22751] ? ksys_write+0x190/0x250 [ 847.793005][T22751] ? lock_acquire+0x1d1/0x380 [ 847.793028][T22751] ? fput+0x7c/0x100 [ 847.793043][T22751] ? ksys_write+0x1ac/0x250 [ 847.793064][T22751] ? __x64_sys_bpf+0xce/0x140 [ 847.793076][T22751] __x64_sys_bpf+0xce/0x140 [ 847.793089][T22751] ? do_syscall_64+0xae/0x790 [ 847.793103][T22751] do_syscall_64+0x123/0x790 [ 847.793117][T22751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.793129][T22751] RIP: 0033:0x7f63cf99e199 [ 847.793139][T22751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.793150][T22751] RSP: 002b:00007f63d0937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 847.793162][T22751] RAX: ffffffffffffffda RBX: 00007f63cfc25fa0 RCX: 00007f63cf99e199 [ 847.793170][T22751] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 847.793177][T22751] RBP: 00007f63d0937090 R08: 0000000000000000 R09: 0000000000000000 [ 847.793185][T22751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.793191][T22751] R13: 00007f63cfc26038 R14: 00007f63cfc25fa0 R15: 00007fff0637a358 [ 847.793207][T22751] [ 848.837704][ T6783] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 850.342618][ T6783] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 850.363931][ T6783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.363962][ T6783] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.363977][ T6783] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 850.364012][ T6783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.416798][ T6783] usb 1-1: config 0 descriptor?? [ 850.512276][ T31] audit: type=1400 audit(1791290148.582:2722): avc: denied { append } for pid=22771 comm="syz.8.3058" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 850.515389][ T31] audit: type=1400 audit(1791290148.582:2723): avc: denied { map } for pid=22771 comm="syz.8.3058" path="/dev/loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 850.517593][T22772] FAULT_INJECTION: forcing a failure. [ 850.517593][T22772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.517626][T22772] CPU: 0 UID: 0 PID: 22772 Comm: syz.8.3058 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.517645][T22772] Tainted: [L]=SOFTLOCKUP [ 850.517649][T22772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 850.517657][T22772] Call Trace: [ 850.517662][T22772] [ 850.517667][T22772] dump_stack_lvl+0x100/0x190 [ 850.517688][T22772] should_fail_ex.cold+0x5/0xa [ 850.517706][T22772] _copy_from_user+0x2e/0xd0 [ 850.517722][T22772] get_timespec64+0x8d/0x240 [ 850.517736][T22772] ? __pfx_get_timespec64+0x10/0x10 [ 850.517750][T22772] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 850.517768][T22772] __x64_sys_ppoll+0x189/0x350 [ 850.517786][T22772] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 850.517801][T22772] ? ksys_write+0x1ac/0x250 [ 850.517815][T22772] ? __pfx_ksys_write+0x10/0x10 [ 850.517833][T22772] do_syscall_64+0x123/0x790 [ 850.517848][T22772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.517860][T22772] RIP: 0033:0x7fe8f459e199 [ 850.517870][T22772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.517881][T22772] RSP: 002b:00007fe8f5386028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 850.517893][T22772] RAX: ffffffffffffffda RBX: 00007fe8f4825fa0 RCX: 00007fe8f459e199 [ 850.517902][T22772] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 850.517909][T22772] RBP: 00007fe8f5386090 R08: 0000000000000000 R09: 0000000000000000 [ 850.517916][T22772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.517924][T22772] R13: 00007fe8f4826038 R14: 00007fe8f4825fa0 R15: 00007ffd819cffa8 [ 850.517940][T22772] [ 850.798733][T22753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.801628][T22753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.136779][T20639] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 851.154312][T20639] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 851.163681][T20639] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 851.186334][T20639] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 851.186981][T20639] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 851.307901][ T6783] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 851.811388][T20024] rpcbind: server 127.0.0.1 not responding, timed out [ 852.080905][T22805] kvm [22802]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 852.081076][T22805] kvm [22802]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 852.410655][ C0] plantronics 0003:047F:FFFF.0013: usb_submit_urb(ctrl) failed: -1 [ 853.228117][ T31] audit: type=1400 audit(1791290151.293:2724): avc: denied { read } for pid=22869 comm="syz.0.3070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 853.329721][ T5606] Bluetooth: hci8: command tx timeout [ 853.337722][ T9] usb 1-1: USB disconnect, device number 41 [ 853.944183][T22916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3072'. [ 854.011091][ T5606] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 854.011120][ T5606] Bluetooth: unknown link type 96 [ 854.011157][ T5606] Bluetooth: hci1: connection err: -111 [ 855.413921][ T5606] Bluetooth: hci8: command tx timeout [ 855.746753][T22927] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.3073'. [ 855.909126][T22782] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.909216][T22782] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.909353][T22782] bridge_slave_0: entered allmulticast mode [ 855.910595][T22782] bridge_slave_0: entered promiscuous mode [ 855.986073][T22978] SELinux: policydb version 0 does not match my version range 15-35 [ 855.986315][T22978] SELinux: failed to load policy [ 856.422614][ T31] audit: type=1400 audit(1791290154.043:2725): avc: denied { load_policy } for pid=22976 comm="syz.0.3076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 856.520164][T22979] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3074'. [ 856.568819][T22782] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.568894][T22782] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.569033][T22782] bridge_slave_1: entered allmulticast mode [ 856.578276][T22782] bridge_slave_1: entered promiscuous mode [ 856.660319][T22981] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3074'. [ 856.754623][T22782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.786929][T22782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.864391][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 856.936117][T22782] team0: Port device team_slave_0 added [ 856.985923][T22782] team0: Port device team_slave_1 added [ 856.999348][ T9] usb 3-1: device descriptor read/64, error -71 [ 857.470705][ T31] audit: type=1400 audit(1791290155.533:2726): avc: denied { lock } for pid=23017 comm="syz.8.3080" path="socket:[59451]" dev="sockfs" ino=59451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 857.470936][T22782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.470945][T22782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.470968][T22782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.477845][T22782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.477858][T22782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.477883][T22782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.504660][ T5606] Bluetooth: hci8: command tx timeout [ 857.507276][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 857.670583][ T9] usb 3-1: device descriptor read/64, error -71 [ 857.779314][ T9] usb usb3-port1: attempt power cycle [ 857.783798][T22782] hsr_slave_0: entered promiscuous mode [ 857.786691][T22782] hsr_slave_1: entered promiscuous mode [ 857.795794][T22782] debugfs: 'hsr0' already exists in 'hsr' [ 857.795821][T22782] Cannot create hsr debugfs directory [ 858.179395][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 858.202231][ T9] usb 3-1: device descriptor read/8, error -71 [ 858.442750][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 858.466264][ T9] usb 3-1: device descriptor read/8, error -71 [ 858.571809][ T9] usb usb3-port1: unable to enumerate USB device [ 858.667107][T23163] netlink: 5280 bytes leftover after parsing attributes in process `syz.5.3087'. [ 858.682632][T23163] netlink: 5280 bytes leftover after parsing attributes in process `syz.5.3087'. [ 858.832388][T23167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.971899][ T5606] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 858.971929][ T5606] Bluetooth: unknown link type 96 [ 858.971944][ T5606] Bluetooth: hci1: connection err: -111 [ 859.568763][ T5606] Bluetooth: hci8: command tx timeout [ 860.609696][T22782] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 860.644956][T22782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 860.646954][T22782] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 860.667481][T23178] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.3089'. [ 860.691888][T22782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 860.694480][T22782] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 860.754859][T22782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 860.755550][T22782] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 860.797238][T22782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 860.947691][T23194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3091'. [ 862.230471][T22782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.254509][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 862.342534][T22782] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.361052][T23209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3093'. [ 862.382701][T20028] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.382773][T20028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.429338][T20028] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.429417][T20028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.734945][T23224] netlink: 5280 bytes leftover after parsing attributes in process `syz.5.3097'. [ 862.753917][T23224] netlink: 5280 bytes leftover after parsing attributes in process `syz.5.3097'. [ 863.842993][ T5606] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 863.843013][ T5606] Bluetooth: unknown link type 96 [ 863.843036][ T5606] Bluetooth: hci1: connection err: -111 [ 863.880165][T23248] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.3104'. [ 864.047693][T23251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3105'. [ 864.204216][T22782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.205241][T23257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3095'. [ 864.205273][T23257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3095'. [ 865.082529][ T31] audit: type=1400 audit(1791290163.143:2727): avc: denied { map } for pid=23292 comm="syz.0.3111" path="socket:[60213]" dev="sockfs" ino=60213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 865.273978][T23290] rnbd_client L202: map_device: Unknown parameter or missing value './cg' [ 865.322678][T22782] veth0_vlan: entered promiscuous mode [ 865.385887][T22782] veth1_vlan: entered promiscuous mode [ 865.526648][ T31] audit: type=1400 audit(1791290163.583:2728): avc: denied { getopt } for pid=23299 comm="syz.5.3113" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 865.576356][T23285] bridge_slave_0: left allmulticast mode [ 865.576387][T23285] bridge_slave_0: left promiscuous mode [ 865.576540][T23285] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.672926][T23304] __nla_validate_parse: 3 callbacks suppressed [ 865.672952][T23304] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3114'. [ 865.699394][T23304] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3114'. [ 865.806865][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3115'. [ 865.806900][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3115'. [ 865.880138][T23307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3115'. [ 865.880174][T23307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3115'. [ 865.936993][ T5606] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 865.937023][ T5606] Bluetooth: unknown link type 96 [ 865.937060][ T5606] Bluetooth: hci0: connection err: -111 [ 865.964613][T23310] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3117'. [ 865.964803][T23311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3116'. [ 865.964834][T23311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3116'. [ 866.002171][T23312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3116'. [ 866.561009][T23285] bridge_slave_1: left allmulticast mode [ 866.562012][T23285] bridge_slave_1: left promiscuous mode [ 866.562700][T23285] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.602358][T23285] bond0: (slave bond_slave_0): Releasing backup interface [ 866.622185][T23285] bond0: (slave bond_slave_1): Releasing backup interface [ 866.670481][T23285] team0: Port device team_slave_0 removed [ 866.685519][T23285] team0: Port device team_slave_1 removed [ 866.691839][T23285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.691866][T23285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.696989][T23285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.697014][T23285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.757303][T23285] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 866.790599][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 866.903811][T23289] team0: Port device xfrm0 added [ 866.904083][T23302] tipc: Started in network mode [ 866.904109][T23302] tipc: Node identity 76696dc3e263, cluster identity 4711 [ 866.948289][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 866.948933][ T10] usb 1-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 866.950125][ T10] usb 1-1: config 0 interface 0 altsetting 183 endpoint 0x2 has an invalid bInterval 55, changing to 9 [ 866.950155][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 866.950183][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.952473][ T10] usb 1-1: config 0 descriptor?? [ 867.021941][T23302] tipc: Enabled bearer , priority 0 [ 867.345574][T22782] veth0_macvtap: entered promiscuous mode [ 867.375101][T22782] veth1_macvtap: entered promiscuous mode [ 867.459388][T22782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.504269][T22782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.567885][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 867.574531][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 867.624996][ T10] usb 1-1: USB disconnect, device number 42 [ 867.668646][T20027] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.670180][T20023] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.670278][T20023] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.670369][T20023] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.044288][ T9] tipc: Node number set to 2483711427 [ 868.237049][T20025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.237074][T20025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.072118][T23363] loop9: detected capacity change from 0 to 2640 [ 869.072639][T23363] buffer_io_error: 10 callbacks suppressed [ 869.072649][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072679][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072709][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072737][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072763][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072806][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072842][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072873][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072892][T23363] ldm_validate_partition_table(): Disk read failed. [ 869.072912][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072938][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.072972][T23363] Dev loop9: unable to read RDB block 0 [ 869.073111][T23363] loop9: unable to read partition table [ 869.073256][T23363] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 869.971566][T23383] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 870.040548][T20028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.040573][T20028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.808115][T23407] __nla_validate_parse: 8 callbacks suppressed [ 870.808131][T23407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3129'. [ 870.808159][T23407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3129'. [ 872.458053][T23408] kthread_run failed with err -4 [ 873.878318][T23429] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3133'. [ 874.277713][ T6793] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 874.361905][T23452] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3136'. [ 874.388615][T23452] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.3136'. [ 874.430657][ T6793] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 874.431518][ T6793] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 874.431546][ T6793] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 874.431557][ T6793] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 874.431578][ T6793] usb 10-1: config 220 has no interface number 2 [ 874.431619][ T6793] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 874.431645][ T6793] usb 10-1: config 220 interface 0 has no altsetting 0 [ 874.431665][ T6793] usb 10-1: config 220 interface 76 has no altsetting 0 [ 874.431676][ T6793] usb 10-1: config 220 interface 1 has no altsetting 0 [ 874.528177][ T6793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.528203][ T6793] usb 10-1: Product: syz [ 874.528213][ T6793] usb 10-1: Manufacturer: syz [ 874.528232][ T6793] usb 10-1: SerialNumber: syz [ 874.830412][ T6793] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 874.830445][ T6793] uvcvideo 10-1:220.0: No valid video chain found. [ 874.830494][ T6793] usb 10-1: selecting invalid altsetting 0 [ 874.933736][ T6793] usb 10-1: selecting invalid altsetting 0 [ 874.933767][ T6793] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 874.941013][ T6793] usb 10-1: USB disconnect, device number 2 [ 875.036484][ T31] audit: type=1400 audit(1791290173.094:2729): avc: denied { read } for pid=23460 comm="syz.2.3128" lport=58449 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 875.557723][ T6793] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 875.583574][T23486] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3141'. [ 875.583609][T23486] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3141'. [ 875.622372][T23486] erspan0: entered promiscuous mode [ 875.624962][T23486] gretap0: entered promiscuous mode [ 875.625444][T23486] debugfs: 'hsr1' already exists in 'hsr' [ 875.625457][T23486] Cannot create hsr debugfs directory [ 875.688586][T23486] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3141'. [ 875.688622][T23486] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3141'. [ 875.738328][ T6793] usb 1-1: Using ep0 maxpacket: 32 [ 875.754049][ T6793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 875.754089][ T6793] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice= 0.40 [ 875.787810][ T6793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.787838][ T6793] usb 1-1: Product: syz [ 875.787848][ T6793] usb 1-1: Manufacturer: syz [ 875.787866][ T6793] usb 1-1: SerialNumber: syz [ 875.852305][ T6793] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 875.852389][ T6793] gspca_stv06xx: st6422 sensor detected [ 876.024653][T23500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3143'. [ 876.024689][T23500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3143'. [ 876.097366][T23504] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3143'. [ 876.097402][T23504] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3143'. [ 877.195219][T23497] tmpfs: Using encoding : utf8-12.1.0 [ 877.634055][T23497] netlink: 'syz.2.3142': attribute type 4 has an invalid length. [ 877.637085][T23512] netlink: 'syz.2.3142': attribute type 4 has an invalid length. [ 877.993276][ T6793] STV06xx 1-1:1.0: probe with driver STV06xx failed with error -71 [ 877.994122][ T6793] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 878.216049][ T6793] usb 1-1: USB disconnect, device number 43 [ 878.354633][T23447] udevd[23447]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 879.137475][ T6785] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 879.278666][T23568] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.3152'. [ 879.286974][T23568] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.3152'. [ 879.319488][ T6785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 879.321622][ T6785] usb 1-1: not running at top speed; connect to a high speed hub [ 879.321652][ T6785] usb 1-1: New USB device found, idVendor=0499, idProduct=7862, bcdDevice=3b.d1 [ 879.322933][ T6785] usb 1-1: config 1 has an invalid interface number: 81 but max is 0 [ 879.322959][ T6785] usb 1-1: config 1 has no interface number 0 [ 879.322997][ T6785] usb 1-1: config 1 interface 81 altsetting 215 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 879.323024][ T6785] usb 1-1: config 1 interface 81 altsetting 215 endpoint 0x7 has invalid wMaxPacketSize 0 [ 879.323047][ T6785] usb 1-1: config 1 interface 81 has no altsetting 0 [ 879.356356][ T6785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.356384][ T6785] usb 1-1: Product: syz [ 879.356394][ T6785] usb 1-1: Manufacturer: syz [ 879.356413][ T6785] usb 1-1: SerialNumber: syz [ 879.708632][ T6785] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 879.708957][ T6785] usb 1-1: invalid MIDI in EP 0 [ 880.293557][T23596] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3156'. [ 880.293594][T23596] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3156'. [ 880.355683][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3156'. [ 880.355718][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3156'. [ 880.569660][ T6783] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 880.730892][ T6783] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 880.752757][ T6783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.752786][ T6783] usb 9-1: Product: syz [ 880.752795][ T6783] usb 9-1: Manufacturer: syz [ 880.752814][ T6783] usb 9-1: SerialNumber: syz [ 880.828844][ T6785] snd-usb-audio 1-1:1.81: probe with driver snd-usb-audio failed with error -22 [ 880.867666][ T6785] usb 1-1: USB disconnect, device number 44 [ 881.094194][T23636] udevd[23636]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.81/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.149412][T23640] ip6t_rt: too many addresses specified [ 881.410357][ T6783] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 881.410404][ T6783] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 884.381647][ T6783] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 884.383059][ T6783] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 884.385379][ T6783] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 884.385445][ T6783] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 884.386798][ T6783] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 884.536778][ T6783] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 884.602346][ T6783] usb 9-1: USB disconnect, device number 4 [ 884.710548][T23670] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.3168'. [ 884.749717][T23671] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3169'. [ 884.749763][T23671] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3169'. [ 884.852608][T23678] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3169'. [ 884.852643][T23678] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3169'. [ 885.048759][ T1796] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 885.108636][ T5606] Bluetooth: hci8: unexpected event 0x04 length: 11 > 10 [ 885.108664][ T5606] Bluetooth: unknown link type 96 [ 885.108701][ T5606] Bluetooth: hci8: connection err: -111 [ 885.116097][T23697] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.3172'. [ 885.159700][T23698] FAULT_INJECTION: forcing a failure. [ 885.159700][T23698] name fail_futex, interval 1, probability 0, space 0, times 0 [ 885.159725][T23698] CPU: 0 UID: 0 PID: 23698 Comm: syz.2.3173 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.159749][T23698] Tainted: [L]=SOFTLOCKUP [ 885.159754][T23698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 885.159762][T23698] Call Trace: [ 885.159767][T23698] [ 885.159773][T23698] dump_stack_lvl+0x100/0x190 [ 885.159799][T23698] should_fail_ex.cold+0x5/0xa [ 885.159819][T23698] get_futex_key+0x1d0/0x14f0 [ 885.159838][T23698] ? __pfx_get_futex_key+0x10/0x10 [ 885.159856][T23698] ? __lock_acquire+0x5c0/0x1f40 [ 885.159875][T23698] futex_wake+0xf4/0x5e0 [ 885.159890][T23698] ? __pfx_futex_wake+0x10/0x10 [ 885.159905][T23698] ? find_held_lock+0x2b/0x80 [ 885.159922][T23698] ? do_sys_openat2+0x1b6/0x1e0 [ 885.159940][T23698] ? do_sys_openat2+0x1b6/0x1e0 [ 885.159960][T23698] do_futex+0x2b2/0x440 [ 885.159978][T23698] ? __pfx_do_futex+0x10/0x10 [ 885.159995][T23698] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.160013][T23698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 885.160031][T23698] __x64_sys_futex+0x34f/0x4d0 [ 885.160050][T23698] ? __x64_sys_openat+0x12d/0x210 [ 885.160068][T23698] ? __pfx___x64_sys_futex+0x10/0x10 [ 885.160092][T23698] do_syscall_64+0x123/0x790 [ 885.160108][T23698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.160122][T23698] RIP: 0033:0x7fd76399e199 [ 885.160132][T23698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.160144][T23698] RSP: 002b:00007fd7648270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 885.160157][T23698] RAX: ffffffffffffffda RBX: 00007fd763c25fa8 RCX: 00007fd76399e199 [ 885.160165][T23698] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd763c25fac [ 885.160173][T23698] RBP: 00007fd763c25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 885.160180][T23698] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 885.160188][T23698] R13: 00007fd763c26038 R14: 00007ffd0c5100e0 R15: 00007ffd0c5101c8 [ 885.160203][T23698] [ 885.234581][ T1796] usb 1-1: Using ep0 maxpacket: 16 [ 885.310941][ T1796] usb 1-1: unable to get BOS descriptor or descriptor too short [ 885.310991][ T1796] usb 1-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 885.311023][ T1796] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 885.507951][ T1796] usb 1-1: New USB device strings: Mfr=152, Product=129, SerialNumber=68 [ 885.507980][ T1796] usb 1-1: Product: syz [ 885.507990][ T1796] usb 1-1: Manufacturer: syz [ 885.507999][ T1796] usb 1-1: SerialNumber: syz [ 885.734160][ T31] audit: type=1400 audit(1791290183.794:2730): avc: denied { lock } for pid=23672 comm="syz.0.3170" path="socket:[61308]" dev="sockfs" ino=61308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 885.856826][ T1796] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 885.940614][T23719] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3176'. [ 885.940648][T23719] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3176'. [ 886.002022][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3176'. [ 886.002058][T23729] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3176'. [ 886.003690][ T1796] usb 1-1: USB disconnect, device number 45 [ 886.193455][T23636] udevd[23636]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.618177][T23753] netlink: 'syz.8.3179': attribute type 39 has an invalid length. [ 886.902043][ T31] audit: type=1400 audit(1791290184.954:2731): avc: denied { open } for pid=23761 comm="syz.9.3181" path="/dev/ttyr7" dev="devtmpfs" ino=398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 886.948476][ T31] audit: type=1400 audit(1791290185.014:2732): avc: denied { ioctl } for pid=23761 comm="syz.9.3181" path="socket:[61424]" dev="sockfs" ino=61424 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 887.507448][T23793] trusted_key: encrypted_key: insufficient parameters specified [ 887.716955][ T6783] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 887.779251][ T1796] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 887.868861][ T6783] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 887.869846][ T6783] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 240, changing to 11 [ 887.869875][ T6783] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 34560, setting to 1024 [ 887.869893][ T6783] usb 3-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 887.869918][ T6783] usb 3-1: config 0 interface 0 has no altsetting 0 [ 887.869946][ T6783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.956712][ T6783] usb 3-1: config 0 descriptor?? [ 887.966197][T23792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 887.981321][ T1796] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 887.983810][ T1796] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 887.983836][ T1796] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 888.012185][ T1796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.012212][ T1796] usb 1-1: Product: syz [ 888.012222][ T1796] usb 1-1: Manufacturer: syz [ 888.012231][ T1796] usb 1-1: SerialNumber: syz [ 888.188172][T23792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.243948][T23792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.263846][T23808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.264267][T23808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.403849][T23793] bridge0: port 3(wlan1) entered blocking state [ 888.403946][T23793] bridge0: port 3(wlan1) entered disabled state [ 888.404114][T23793] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 888.452644][ T6783] usbhid 3-1:0.0: can't add hid device: -71 [ 888.452748][ T6783] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 888.490822][ T6783] usb 3-1: USB disconnect, device number 61 [ 888.509173][T23793] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode [ 888.608781][ T31] audit: type=1400 audit(1791290186.665:2733): avc: denied { write } for pid=23791 comm="syz.0.3187" name="nullb" dev="configfs" ino=2354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 888.808584][T23820] bridge0: port 3(wlan1) entered disabled state [ 888.877413][T23820] mac80211_hwsim hwsim51 wlan1 (unregistering): left allmulticast mode [ 888.877445][T23820] mac80211_hwsim hwsim51 wlan1 (unregistering): left promiscuous mode [ 888.877544][T23820] bridge0: port 3(wlan1) entered disabled state [ 889.398922][ T1796] usb 1-1: USB disconnect, device number 46 [ 889.711253][ T5606] Bluetooth: hci5: Malformed LE Event: 0x0b [ 889.847573][T23874] __nla_validate_parse: 13 callbacks suppressed [ 889.847600][T23874] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3199'. [ 890.061347][T23880] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 890.061367][T23880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 890.098446][T23880] vhci_hcd vhci_hcd.0: Device attached [ 890.297037][ T1796] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 890.753709][T23900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3196'. [ 890.771500][T23881] vhci_hcd: connection reset by peer [ 890.830715][T20024] vhci_hcd vhci_hcd.8: stop threads [ 890.851993][T20024] vhci_hcd vhci_hcd.8: release socket [ 890.874559][T20024] vhci_hcd vhci_hcd.8: disconnect device [ 891.299157][ T6783] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 891.449181][ T6783] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 891.450025][ T6783] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.450061][ T6783] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 891.450085][ T6783] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 891.450114][ T6783] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 891.450148][ T6783] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.612026][T23916] netlink: 'syz.2.3207': attribute type 1 has an invalid length. [ 891.805804][T23916] bond1: entered promiscuous mode [ 891.820399][T23916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 891.839091][T23954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=23954 comm=syz.2.3207 [ 892.064267][ T6783] gud 10-1:1.0: probe with driver gud failed with error -121 [ 892.342467][T23916] bond1: (slave bridge1): making interface the new active one [ 892.342495][T23916] bridge1: entered promiscuous mode [ 892.557228][T20639] Bluetooth: hci0: command 0x0406 tx timeout [ 892.632267][T23916] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 892.855797][ T31] audit: type=1400 audit(1791290190.915:2734): avc: denied { setopt } for pid=23970 comm="syz.2.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 893.144998][T23978] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3213'. [ 894.918925][ T6785] usb 10-1: USB disconnect, device number 3 [ 895.406753][ T1796] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 895.810777][T24006] FAULT_INJECTION: forcing a failure. [ 895.810777][T24006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.810822][T24006] CPU: 0 UID: 0 PID: 24006 Comm: syz.9.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.810840][T24006] Tainted: [L]=SOFTLOCKUP [ 895.810845][T24006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 895.810854][T24006] Call Trace: [ 895.810859][T24006] [ 895.810864][T24006] dump_stack_lvl+0x100/0x190 [ 895.810888][T24006] should_fail_ex.cold+0x5/0xa [ 895.810908][T24006] _copy_from_user+0x2e/0xd0 [ 895.810925][T24006] restore_sigcontext+0xcd/0x6a0 [ 895.810944][T24006] ? __pfx_restore_sigcontext+0x10/0x10 [ 895.810973][T24006] ? __pfx_restore_altstack+0x10/0x10 [ 895.810991][T24006] ? _raw_spin_unlock_irq+0x23/0x50 [ 895.811011][T24006] ? lockdep_hardirqs_on+0x7d/0x110 [ 895.811027][T24006] __do_sys_rt_sigreturn+0x229/0x2c0 [ 895.811046][T24006] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 895.811070][T24006] do_syscall_64+0x123/0x790 [ 895.811085][T24006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.811098][T24006] RIP: 0033:0x7f288d93f519 [ 895.811109][T24006] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 895.811121][T24006] RSP: 002b:00007f288e90e400 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 895.811134][T24006] RAX: ffffffffffffffda RBX: 00007f288dc25fa8 RCX: 00007f288d93f519 [ 895.811143][T24006] RDX: 00007f288e90e400 RSI: 00007f288e90e530 RDI: 0000000000000021 [ 895.811151][T24006] RBP: 00007f288dc25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 895.811160][T24006] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 895.811168][T24006] R13: 00007f288dc26038 R14: 00007ffd8018fe00 R15: 00007ffd8018fee8 [ 895.811185][T24006] [ 896.395005][ T31] audit: type=1400 audit(1791290194.455:2735): avc: denied { write } for pid=24012 comm="syz.9.3222" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 896.693708][T24003] mmap: syz.0.3219 (24003): VmData 25837568 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 896.913017][T24018] loop7: detected capacity change from 0 to 7 [ 896.997692][ C0] blk_print_req_error: 11 callbacks suppressed [ 896.997722][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 896.997789][ C0] buffer_io_error: 11 callbacks suppressed [ 896.997797][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.004336][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 897.004393][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.004553][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 897.004607][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.005293][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 897.005355][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.005483][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 897.005531][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.005954][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 897.006025][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.033842][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 897.033930][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.034028][T24018] ldm_validate_partition_table(): Disk read failed. [ 897.159952][ T1796] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 897.179335][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 897.179414][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.189115][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 897.189182][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.238043][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 897.238098][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 897.238922][T24018] Dev loop7: unable to read RDB block 0 [ 897.240173][T24018] loop7: unable to read partition table [ 897.240340][T24018] loop7: partition table beyond EOD, truncated [ 897.240367][T24018] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 897.311267][T24029] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3226'. [ 897.332371][ T1796] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 897.353720][ T1796] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 897.353751][ T1796] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 897.353777][ T1796] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 125, changing to 4 [ 897.353801][ T1796] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 58175, setting to 1023 [ 897.353815][ T1796] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 897.370580][ T1796] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 897.370598][ T1796] usb 10-1: SerialNumber: syz [ 897.466245][ T1796] hub 10-1:1.0: bad descriptor, ignoring hub [ 897.474977][ T1796] hub 10-1:1.0: probe with driver hub failed with error -5 [ 897.492017][ T1796] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 897.699410][T24018] Invalid logical block size (14) [ 897.760558][ T31] audit: type=1800 audit(1791290195.825:2736): pid=24045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3230" name="nullb0" dev="tmpfs" ino=2513 res=0 errno=0 [ 897.761924][T24042] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 897.817007][ T6793] usb 10-1: USB disconnect, device number 4 [ 897.895422][T24045] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.5.3230:24045 [ 898.005672][T24054] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 898.324134][ T5606] Bluetooth: hci8: unexpected event 0x04 length: 11 > 10 [ 898.324155][ T5606] Bluetooth: unknown link type 96 [ 898.324177][ T5606] Bluetooth: hci8: connection err: -111 [ 898.350945][T24057] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.3232'. [ 898.827273][T24062] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 899.169382][T24075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3238'. [ 899.169426][T24075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3238'. [ 899.235366][T24083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3238'. [ 899.235400][T24083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3238'. [ 899.298665][T24079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x0800 instead [ 899.298682][T24079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x696d instead [ 899.298704][T24079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x726f instead [ 899.298715][T24079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000028: 0x6f63 instead [ 899.298734][T24079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000002c: 0x3220 instead [ 899.298744][T24079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000030: 0x3230 instead [ 899.298763][T24079] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000034: 0x7973 instead [ 899.302051][T24079] jffs2: notice: (24079) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 899.736014][T24098] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3242'. [ 899.736049][T24098] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3242'. [ 899.800886][T24104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3242'. [ 899.800922][T24104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3242'. [ 900.848533][ T5606] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 900.848561][ T5606] Bluetooth: unknown link type 96 [ 900.848585][ T5606] Bluetooth: hci0: connection err: -111 [ 901.393679][T24140] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 901.506727][T24117] kexec: Could not allocate control_code_buffer [ 901.622282][T24145] erspan0: entered promiscuous mode [ 901.625869][T24145] gretap0: entered promiscuous mode [ 901.626523][T24145] debugfs: 'hsr1' already exists in 'hsr' [ 901.626549][T24145] Cannot create hsr debugfs directory [ 902.348925][ T6793] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 902.508406][ T6793] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 902.509287][ T6793] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 902.509306][ T6793] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 902.509339][ T6793] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 902.511925][ T6793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.511951][ T6793] usb 10-1: Product: syz [ 902.511961][ T6793] usb 10-1: Manufacturer: syz [ 902.512015][ T6793] usb 10-1: SerialNumber: syz [ 902.525975][ T6793] usb 10-1: config 0 descriptor?? [ 902.609567][T24173] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 902.777299][ T6793] rc_core: IR keymap rc-streamzap not found [ 902.777322][ T6793] Registered IR keymap rc-empty [ 902.778244][ T6793] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 902.781399][ T6793] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input27 [ 903.271528][ T31] audit: type=1400 audit(1791290201.335:2737): avc: denied { bind } for pid=24172 comm="syz.9.3260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 903.400700][ T6086] IPVS: starting estimator thread 0... [ 903.496242][T24209] IPVS: using max 63 ests per chain, 151200 per kthread [ 903.712757][T24214] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 904.673961][ T5606] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 904.673989][ T5606] Bluetooth: unknown link type 96 [ 904.674005][ T5606] Bluetooth: hci1: connection err: -111 [ 904.702568][T24223] __nla_validate_parse: 7 callbacks suppressed [ 904.702592][T24223] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.3267'. [ 905.120057][ T6785] usb 10-1: USB disconnect, device number 5 [ 905.318339][T24239] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3269'. [ 905.318388][T24239] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3269'. [ 905.384900][T24246] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3269'. [ 905.384938][T24246] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3269'. [ 906.353136][T24279] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 906.656894][ T31] audit: type=1400 audit(1791290204.726:2738): avc: denied { listen } for pid=24282 comm="syz.2.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 907.288679][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3280'. [ 907.288706][T24297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3280'. [ 907.288723][T24297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3280'. [ 907.420858][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3280'. [ 907.420885][T24297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3280'. [ 907.553054][T20027] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 907.588871][T20025] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 907.589462][T20025] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 907.589495][T20025] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.046181][ T5606] Bluetooth: hci7: command tx timeout [ 910.471352][T24349] __nla_validate_parse: 2 callbacks suppressed [ 910.471365][T24349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3287'. [ 911.770192][T24354] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3292'. [ 912.628358][T24375] ip_tables: iptables: counters copy to user failed while replacing table [ 912.650839][ T31] audit: type=1400 audit(1791290210.716:2739): avc: denied { read write } for pid=24353 comm="syz.0.3292" name="file0" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 912.650893][ T31] audit: type=1400 audit(1791290210.716:2740): avc: denied { open } for pid=24353 comm="syz.0.3292" path="/95/file0" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 912.712027][ T31] audit: type=1400 audit(1791290210.776:2741): avc: denied { ioctl } for pid=24353 comm="syz.0.3292" path="/95/file0" dev="tmpfs" ino=515 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 912.810870][ T6785] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 912.934681][T20639] Bluetooth: hci6: command 0x0406 tx timeout [ 912.981168][ T6785] usb 3-1: Using ep0 maxpacket: 16 [ 912.982461][ T6785] usb 3-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 913.037474][ T6785] usb 3-1: config 0 interface 0 altsetting 183 endpoint 0x2 has an invalid bInterval 55, changing to 9 [ 913.037506][ T6785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 913.037535][ T6785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.039800][ T6785] usb 3-1: config 0 descriptor?? [ 913.088593][ T6783] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 913.246509][ T6783] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 913.247490][ T6783] usb 9-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 913.247521][ T6783] usb 9-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 913.247547][ T6783] usb 9-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 913.247572][ T6783] usb 9-1: config 1 interface 0 has no altsetting 0 [ 913.248436][ T6783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.248461][ T6783] usb 9-1: SerialNumber: syz [ 913.340366][T24375] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 913.355786][ T6783] hub 9-1:1.0: bad descriptor, ignoring hub [ 913.355813][ T6783] hub 9-1:1.0: probe with driver hub failed with error -5 [ 913.356236][ T6783] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 913.551201][T24374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3295'. [ 913.581377][ T6785] usbhid 3-1:0.0: can't add hid device: -71 [ 913.581490][ T6785] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 913.618089][ T6785] usb 3-1: USB disconnect, device number 62 [ 913.672115][ T6783] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 913.727878][ T6783] usb 9-1: USB disconnect, device number 5 [ 915.354584][T24418] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 915.421618][T24424] 9pnet_fd: Insufficient options for proto=fd [ 915.907122][ T31] audit: type=1400 audit(1791290213.966:2742): avc: denied { bind } for pid=24451 comm="syz.2.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 915.945103][ T31] audit: type=1400 audit(1791290214.016:2743): avc: denied { append } for pid=24451 comm="syz.2.3302" name="pfkey" dev="proc" ino=4026534507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 916.473239][T24470] fuse: Bad value for 'rootmode' [ 916.519284][T24473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3306'. [ 916.519319][T24473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3306'. [ 916.586920][T24476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3306'. [ 916.586956][T24476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3306'. [ 916.694501][T24484] overlayfs: workdir and upperdir must be separate subtrees [ 916.712179][ T31] audit: type=1400 audit(1791290214.776:2744): avc: denied { read append } for pid=24481 comm="syz.8.3307" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 916.714441][ T31] audit: type=1400 audit(1791290214.776:2745): avc: denied { open } for pid=24481 comm="syz.8.3307" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 916.715572][ T31] audit: type=1400 audit(1791290214.786:2746): avc: denied { ioctl } for pid=24481 comm="syz.8.3307" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 916.810286][T24484] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3307'. [ 916.851588][ T31] audit: type=1400 audit(1791290214.916:2747): avc: denied { read } for pid=24481 comm="syz.8.3307" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 916.851929][ T31] audit: type=1400 audit(1791290214.916:2748): avc: denied { open } for pid=24481 comm="syz.8.3307" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 920.689999][T24509] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 922.117627][T24513] trusted_key: encrypted_key: insufficient parameters specified [ 922.155378][ T31] audit: type=1400 audit(1791290220.206:2749): avc: denied { connect } for pid=24508 comm="syz.0.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 922.524036][T24523] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3316'. [ 922.770791][T24529] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 923.998413][T20639] Bluetooth: hci7: command 0x0406 tx timeout [ 924.073567][T20023] IPVS: starting estimator thread 0... [ 924.176579][T24546] IPVS: using max 63 ests per chain, 151200 per kthread [ 926.148797][T24566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.222428][ T32] INFO: task syz.3.2837:19896 blocked for more than 143 seconds. [ 926.222459][ T32] Tainted: G L syzkaller #0 [ 926.222467][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 926.222481][ T32] task:syz.3.2837 state:D stack:28520 pid:19896 tgid:19893 ppid:5600 task_flags:0x400140 flags:0x00080002 [ 926.222532][ T32] Call Trace: [ 926.222548][ T32] [ 926.222557][ T32] __schedule+0x1259/0x6920 [ 926.222584][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 926.222618][ T32] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 926.222649][ T32] ? __pfx___schedule+0x10/0x10 [ 926.224099][ T32] ? find_held_lock+0x2b/0x80 [ 926.224134][ T32] ? schedule+0x225/0x2c0 [ 926.224159][ T32] schedule+0xdd/0x2c0 [ 926.224172][ T32] schedule_preempt_disabled+0x13/0x30 [ 926.224193][ T32] __mutex_lock+0xccb/0x1bd0 [ 926.224208][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 926.224238][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 926.224264][ T32] ? net_generic+0x25/0x2a0 [ 926.224289][ T32] ? net_generic+0xea/0x2a0 [ 926.224302][ T32] ? net_generic+0xea/0x2a0 [ 926.224329][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 926.224353][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 926.224369][ T32] nfsd_umount+0x3b/0x60 [ 926.224395][ T32] deactivate_locked_super+0xbd/0x130 [ 926.224420][ T32] deactivate_super+0xea/0x110 [ 926.224435][ T32] cleanup_mnt+0x21f/0x450 [ 926.224462][ T32] task_work_run+0x150/0x240 [ 926.224491][ T32] ? __pfx_task_work_run+0x10/0x10 [ 926.224523][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 926.224550][ T32] ? rcu_is_watching+0x13/0xc0 [ 926.224578][ T32] do_syscall_64+0x661/0x790 [ 926.224594][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.224622][ T32] RIP: 0033:0x7fe957f9e199 [ 926.224633][ T32] RSP: 002b:00007fe958ee3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 926.224746][ T32] RAX: fffffffffffffffe RBX: 00007fe958225fa0 RCX: 00007fe957f9e199 [ 926.224755][ T32] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 926.224763][ T32] RBP: 00007fe9580358e0 R08: 0000000000000000 R09: 0000000000000000 [ 926.224781][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.224788][ T32] R13: 00007fe958226038 R14: 00007fe958225fa0 R15: 00007fff78799508 [ 926.224814][ T32] [ 926.224882][ T32] [ 926.224882][ T32] Showing all locks held in the system: [ 926.224893][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 926.224912][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 926.224961][ T32] locks held by kworker/u8:4/59: 2, on CPU#0: [ 926.224979][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 926.233217][ T32] #1: ffffc9000201fd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 926.233305][ T32] locks held by getty/5356: 2, on CPU#0: [ 926.233314][ T32] #0: ffff888030f530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 926.233364][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 926.233402][ T32] locks held by kworker/u9:3/5603: 3, on CPU#0: [ 926.233411][ T32] #0: ffff888056739140 ((wq_completion)hci1){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 926.233463][ T32] #1: ffffc90003f5fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 926.233506][ T32] #2: ffff88807cc84ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x180/0x4c0 [ 926.233560][ T32] locks held by syz-executor/10623: 2, last CPU#0: [ 926.233569][ T32] #0: ffff8880342fc2e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x5a/0x520 [ 926.399872][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 926.399933][ T32] locks held by syz.1.2208/16471: 2, on CPU#0: [ 926.399951][ T32] #0: ffffffff90d843c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 926.399993][ T32] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 [ 926.400050][ T32] locks held by syz.3.2837/19896: 2, on CPU#0: [ 926.400059][ T32] #0: ffff88804aef80e8 (&type->s_umount_key#95){++++}-{4:4}, at: deactivate_super+0xe2/0x110 [ 926.400102][ T32] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 926.400152][ T32] locks held by kworker/u8:16/20026: 3, last CPU#0: [ 926.400161][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 926.400214][ T32] #1: ffffc90004c5fd08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 926.400259][ T32] #2: ffff888057fbb258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 926.400318][ T32] locks held by syz.6.2898/20860: 2, on CPU#0: [ 926.400326][ T32] #0: ffffffff90d843c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 926.400376][ T32] #1: ffffffff8f289bc0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0x8a/0x2f0 [ 926.400424][ T32] locks held by syz.7.3007/22495: 1, on CPU#0: [ 926.400442][ T32] #0: ffff88804aef80e8 (&type->s_umount_key#95){++++}-{4:4}, at: super_lock+0x326/0x3f0 [ 926.400481][ T32] locks held by syz-executor/22782: 1, last CPU#0: [ 926.400490][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 926.400542][ T32] locks held by syz.2.3320/24540: 2, last CPU#0: [ 926.400551][ T32] #0: ffff88807d051bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 926.400591][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1f/0x220 [ 926.400642][ T32] locks held by syz.0.3324/24561: 1, last CPU#0: [ 926.400651][ T32] #0: ffff888088548260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: sock_gettstamp+0x257/0x300 [ 926.400708][ T32] locks held by modprobe/24565: 1, last CPU#0: [ 926.400717][ T32] #0: ffff88807d615900 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 926.400767][ T32] [ 926.400771][ T32] ============================================= [ 926.400771][ T32] [ 926.400801][ T32] NMI backtrace for cpu 0 [ 926.400812][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 926.400830][ T32] Tainted: [L]=SOFTLOCKUP [ 926.400835][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 926.400843][ T32] Call Trace: [ 926.400848][ T32] [ 926.400854][ T32] dump_stack_lvl+0x100/0x190 [ 926.400872][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 926.400890][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 926.400905][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 926.400924][ T32] sys_info+0x141/0x190 [ 926.400939][ T32] watchdog+0xcb1/0x1030 [ 926.400956][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 926.400968][ T32] ? __pfx_watchdog+0x10/0x10 [ 926.400984][ T32] ? __kthread_parkme+0x18f/0x230 [ 926.400999][ T32] ? kthread+0x13a/0x450 [ 926.401014][ T32] ? __pfx_watchdog+0x10/0x10 [ 926.401027][ T32] kthread+0x373/0x450 [ 926.401043][ T32] ? __pfx_kthread+0x10/0x10 [ 926.401059][ T32] ret_from_fork+0x730/0xd60 [ 926.401074][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 926.401088][ T32] ? __switch_to+0x800/0x10f0 [ 926.401104][ T32] ? __pfx_kthread+0x10/0x10 [ 926.401121][ T32] ret_from_fork_asm+0x1a/0x30 [ 926.401141][ T32] [ 926.401177][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 927.042334][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 927.052999][ T32] Tainted: [L]=SOFTLOCKUP [ 927.057306][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 927.067337][ T32] Call Trace: [ 927.070595][ T32] [ 927.073501][ T32] dump_stack_lvl+0x100/0x190 [ 927.078180][ T32] vpanic+0x553/0x970 [ 927.082134][ T32] ? __pfx_vpanic+0x10/0x10 [ 927.086613][ T32] panic+0xd1/0xe0 [ 927.090322][ T32] ? __pfx_panic+0x10/0x10 [ 927.094713][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 927.099719][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 927.105852][ T32] ? watchdog.cold+0x1ec/0x234 [ 927.110594][ T32] watchdog.cold+0x1fd/0x234 [ 927.115162][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 927.120944][ T32] ? __pfx_watchdog+0x10/0x10 [ 927.125598][ T32] ? __kthread_parkme+0x18f/0x230 [ 927.130600][ T32] ? kthread+0x13a/0x450 [ 927.134819][ T32] ? __pfx_watchdog+0x10/0x10 [ 927.139470][ T32] kthread+0x373/0x450 [ 927.143522][ T32] ? __pfx_kthread+0x10/0x10 [ 927.148093][ T32] ret_from_fork+0x730/0xd60 [ 927.152661][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 927.157749][ T32] ? __switch_to+0x800/0x10f0 [ 927.162404][ T32] ? __pfx_kthread+0x10/0x10 [ 927.166974][ T32] ret_from_fork_asm+0x1a/0x30 [ 927.171723][ T32] [ 927.174776][ T32] Kernel Offset: disabled [ 927.179088][ T32] Rebooting in 86400 seconds..