last executing test programs: 4m1.717412202s ago: executing program 32 (id=308): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x20000001, 0xffffffff, 0x1, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0x7, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3m51.399574228s ago: executing program 33 (id=370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x100, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4, 0x8}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x1, 0x2, 0xf, 0x6, 0x8, 0x1, 0xa, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x0, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x2, 0x7, 0x9, 0x401, 0x2, 0xc, 0x85, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x11) execveat(r9, &(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002440)={[&(0x7f0000002240)='taprio\x00', &(0x7f0000002280)='htb\x00', &(0x7f00000022c0)='htb\x00', &(0x7f0000002300)='^\x00', &(0x7f0000002340)='\x00', &(0x7f0000002380)='#\x00', &(0x7f00000023c0)='{/\x00', &(0x7f0000002400)='%\x00']}, &(0x7f0000002500)={[&(0x7f00000024c0)='htb\x00']}, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200400, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x5, &(0x7f00000001c0)=[{0x3, 0x5, 0x1, 0x8}, {0xfeff, 0x81, 0x9, 0x8}, {0xdc00, 0x4, 0x7, 0x800}, {0x7, 0x1, 0x9, 0x7}, {0x1000, 0x2, 0x2, 0x3}]}) 3m48.33326504s ago: executing program 34 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000040)={0x0, 0x3}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x62}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a300000000009000300737959320000000028030000060a010400000000000000000100000008000b400000000000030480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000c80201800c0001006269747769736500b802028008000340000000020800014000000014080002400000001208000580040001000c000480060001008a95000088020580fd0001000856e42387aceb1f87b9e7d10dd1f649676938fc64ba8c84d22d001a3bff1f833f5084df78fb742ec16a04f01d577f2cf2ee0e229b6f5323c322398b3cd01b89e9b6dd77b6751ecf6a2a007ef659a586c15e22b571227db1e45806565735e6d55b6e4ab4f28c4919a97200fd30953a259b44745e0c5f4b93984e215ca610f1a1e259671fe8d86d91b38636730c92f6d1aee3773faf8b91991497f4c588056a6204e38ab8b2891284ea07979b4efeb37c99efcc831084e65ea7fa66d7957ebf6cdb9f8a1e40fa18f39b7c3b551195e23953f642ecb83440355c427e46a5e2ca8d9821cf8cefc72ed0f4638e6697236eb98925b421c8fc1a0e140000004c0002800900020073797a320000000008000180ffffffff0900020073797a3000000000080003400000000108000180fffffffd080003400000000308000180fffffffe08000180000000001800028008000180fffffffe0900020073797a30000000007a00010003025b92bbdb23bc4c84bd584d51a29d70b03679af56871f59f279547af3952d3be2f931b761adad4029718580c7accae30d0b1c46ad1e41d48f7ffefb633620de289c6476d549e8bb92d2f33f1544e528a0c264c090918c5da779d734b1760c677b31b1d0bc6696238e1ffe1822e8819ef1687cc0ac000020000280080001800000000008000180fffffffd0900020073797a32000000004800028008000180fffffffe080003400000000308000340000000010900020073797a320000000008000340000000040800034000000004080003400000000108000180fffffffc3c0002800900020073797a300000000008000340000000010800034000000004080003400000000346760180fffffffc0900020073797a30000000000900010073"], 0x39c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="0f01c4f2a700ef0f01c866b862abd34d0f23c80f21f86635080040000f23f80f20e06635000200000f22e0f30f44e70f01caccf20f08", 0x36}], 0x1, 0x59, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x86500, 0x0) (fail_nth: 1) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r7, 0xe) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000200)=0x9, 0x4) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000005c0)=@vmx={0x0, 0x0, 0x2080, {0xdddd0000, 0x26000, {}, 0x1, 0xc}, {"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", "192650b4208045a71444241d0169d23b90e4c05e1fd221e304d6a8792700dc4c81c9b9741628c6c0812f73baaf040fb0a0f94fefcca199a2bc8ade7d933e6419ab80b6fd0c1df253b43db84458c31596d149e10039d773f3714f0f92af66a89e5504c1bd2b48747119bf189eab32a184d56eaef2b6f247c343e0c5acb7983b7ee492d3da6dbdc94854661c9c3ca5770575218b1bac0a71ba749498316afa64e29814af632be8286db5283fa3769c794b0f307bf3291fa893ddca57c68fa7f860ff8885a06a2595e847d3074efaefbf08d88f0bcc088f6cb19168fa6b7a4b50326e098ba5010d55b5bf7cac301206c77576eeca829f856e969b77ca85ab73c61e35ad44809462b606e3966e3f66018721845439aa947348e911fd9e0b8d5ea733b704c993066e515d5743fe4b7d8f6e40cb9886e6aa0675d899e5e64be6c4cf37be9b889d930fa9609168c0fedd84a8b44dbfb2ecc1368aacf4bd23c6ca051edd61604194f938f1511801262395c3059a723e3e8ca49a30e60c93b9e3ca31e6b3b0a3f33f00dc579be3f7babe5da955bed6b4feee9a6e2c004cf91412c5c8a741d5ab8773707576a173dc4b95cbb098d28f66fd71306f8d0f0dbccaea9a2cbc518842ff12d0ccb0507f085e5cef0e39b3faaf3bdcb59aa13f179ac4edbc9e07e8947c9794c50f97cc76b78484a5432c05b948f3828781d571fafe306c4d7c4489d9839d8cf08fbe722bce8f23928a35ef72606804c41189d4cba0596010c0bc1f3db55d1c25a582e466b50a0bb8d6fd5eb2b6f46104615d4fa2bce4dd3648fbb50bd33506ed473f54824a0f9caf6065c6f6383d75adef0f7d4c2e16d9242d39c9359367c730e6548b16c7f8b3ab8a643daf8343456aa1b11951f54da7ed4e381cc238ffc0bb1755e0ea1c4459dc1920b2544a45b0cadf5aebda4810653f13a762dcc807b22c52b284c46190e55ba7c8e119489ef9c37f0825081b7ba19a8c6dc31b04d81730490e3941ae409f58491e7343d00543f2957968e9bb8642efc2e9a670c3f79043d236dee48f9f390e47bab4f306370b295e4102c7da9a1c9954a757ede2b5a8aac6244c0d734a3f9dc9706da881167a5748564d1a232e8fab172b9f150849b0d7cb5f84c38aa931ef1b8cc4afa967ee851f11fd2fb6e87814437cfe6c086cb3ddb091705669325bcc00cb9a3b7969d07db8cdebc848694549f4e0fa29ad3f200c1b2e767ed4509b2e5ed8cd3d7e7c78c5cff1e1e9bdfbb0b8741d6aac01e09b8969ed2fa9bf35193f7335e223381098a5a2623ba5ba5302f590ddf059dde7d9c0743feb539a46eeeae7c8f5228fb4c9e9b6ffa741e8285aea7a842a415adc9831b4d020262f3e1165a027e00259907db1612f1accfb910bd03efccf173710061f49315c5fa47ae3ec4580bf5a6fb292ff70d382d8f9a16501b6898f5f7b79a7819f00b4df127065cc312737beeb53e61838d53108d75de56c591bf8b0a893e7470899d65578801e9de5ca254f51e5fe4a790a771e877765d0f7042141463e2cfe1cec88b5b43b8ebb414936465f8af335b3218c6f87d57fd71089a51dd8065a603b2af9b9586bfbd07fe3535a91b1033295f0f916d834605bea7d15829a9aa21e47b35797f3c8b386b5d3d021a062e5fde6b98fec8d9d6c623b2840b5593efedfe5f7e585b55603625b56d429965395c8cff28c1a69736b1c23b1fe898a56e5af3d41156e3a9cd3e44eb734ad859f463ae2ce221674d62b609dbdea1901194c9406411a3610556e25f1f1511a5ce8dbe579340ca57009b9f793a85d886222dee4b1f597e468dffd0cca97a2d8fe743c2689c408cf5ab30bf23af4423b9602842f267117df4977b52e8acd5ec9b5eb867dc0708291dcbb70e0868b3be946e229d08057ef06bec185ac8babf7277852678b3f1fb3624fd0d4e363983718fc0834ba59ff2f00bac77349487e322734525da2b788451de8e71712fb1ef95ba34289ce9219b483c009237ce8af2cbfea891fc23044e30e806bddf702b43fd88d5440958f560ff91ee8696d2ed664b91f29bbb6add0bf2eeefaa0f743557f8169b75fb1f64670606b05a2caf4f1ee7c06021bb5a01f2bd369eb554802b963358e2028b0281277e24b8d169e957fe0222a99bfeef741e6d58a134afe02e24a2f0136a84f256587a6eb5ff4a0c089caec3d2c0b94e45937800cc2ca7791f5d9fcb497a6f1f7aaeb370d6b18ab191bf79bcc13b4e55f413d12715447f42b5ae496d9bb0bcfaf1dd0260bc0a8b56146e6aa9bd8e19aa3032fe8a723c33b351b0b72a11fd4078bf3fec6d3b59d050a9a57226ce2206d8f8b07075d9f33cc64412edbba1c9a663b8ddebd9d0784fcdd216e4a41a28c03d909383bfa25da1a8009f073fd16883cafb8fa97490e271e4038fa9f638189f3b71bc696cf9ec079f7d3f43cbf798af7e1a68a1799e9cb1fdb96b011336ceaf5a1f05c4995cc608c470a748817a8216368f8b61f9b1c720a1bd2da0398731e0f69b7fe057fb8f052c7d53439612879a4e5ddc79c2b8e76a655d60be18297fe7841b17ff11a577b1851be12544322db49d6f9c7711ce0a6192ec5a25f9cfad189bf19c05f0e39cbb5690434f8b518a8bb277a784e67df7939e57d74417eb4a18404bbc34130c4b83c5dbece49cd79bd938f3be797c8a4308dd3d8f309e7dd465ecc93c3587adea7d8fa4cd5ed25f11147dea66b507e13cebd9ac30ae3c640995bd6be1eba790ee70b88180ab52c6a720d5ac90ff6fd80d266c6783168c665a1c85b631b49681df18ab77751f6a7983be2f2e61b805d42e708f829fa298f1d24417f26c473feb1fcc73ed4f15454bd3b7c0e55731c52b848483b73ca5e12366a52a84b07368b791374be5bab6757d809ad6678b11ceee9251e282b8f54631ddf2774a50bb696cc85b9fcd5577498e248f5beb212eaf6bc217009403b18575fd87c6802cd305d7128a8d291fa317fc5aaf99b37fc0ced25d8613549275e927407a0fd0e4f0361b2dd7b1b30ac76772704c6ea8c62afa0256578c528aa0b75d80ea1ecc6bbf45a921bc282acd4a8a18dcf3d08b7cbd1c4938ac1f3f1e8a201dad771891cb9dca4c608f9187f5ae49fd2104879a7e4297b21c349516ec3a68e0e0416118ab2b61ac0bc0782d2ead3889b6c2cbc5929eeff0623fc240f9abed8c805ca6dfaee791f910f4c4a2605b545298356ce5ee4617a83aed9e8ac1f32f6e0c0158546916e422dd3c8522be7c8759a731a0aa2e35045b29853adb9fb0fe9e0ccc0c82c0f80baaf631cf11c684fcded14c0ceffbca59f62eb614face68be183d7eae61bfba7b65749697b7dc852c179c240751f22684dcf7c447bad9592a59dd414b1993c7cc4dd77a0366a8388860c18ed7dc4aa7b91d858325126112f0d769f45786a7e7d061c3db637d77cee2e5021e59bb338d7d400ab4a87250c71a372178e57c917da0a9048f3c627ea9dbbaa95feec016a20bb1effed778cc0d898415615033ce815ed335d21071fb890204ba19451f8227a5b4b4e8fe076dcd2b0cef938c07fb2a3cca7de1d48fafcc0afea0fe471d84a6d8dee4fa90f540acbf6de845a14ed195e6f628f36f2f3624c9d69ee1bde953d8fee14949a408494ad2d1662cf7d25ec4b6e363d50cbffafa2a724c3bea7e4ac6dc2a1b85b46ec45f76de82f94e79273bb569c292a3641013a481dffe64059384e60ff9f85dc45dcda892ccb6b8c7c56ade260443aa02614ed6bae4b3b8d62b52b65eafb9fccc6bee6a666348d93887a414717915507a99baa11566c5ef88a557539288d47f772f0d44d06cd8ae868e49549fda97edc82578b364d6cb2c654d604ffe3f17e3ced857d12c34a920d3b05ccd299991b1d230238009d0841a166eb893a52ab2349b22b2d692eed8d5b0dec7c0d770dd13cb41e7d607f0c02f08c5076365769d20f319dfe9a865c98002ab5ef3395e767286938aa9d0626fe01f916948033abe0a5b699f05aa280ffa5914c574faa1c176c2b571c489a431e29a614eb519133625f65bd886aadef31b9965eccfed1ed02814ba18a20f13ffef2ccf4ed3f057612d75674f81b0832842dd2c87a7c33c8f1b0c40e5175fc46d50d6fcd9b607bb4f1f49b35fece376f13679ce370dac906edbc34158bd4ba27028c4f2d1aa33379e102ee347c2de8405279f4320bcc839109c4bfc5b14d0f4642a90ad13165c541252b7115fc290b621e4c02d09ae2778328e8c0750c892ab1c757b7b797a42bcceb412e5210afa0e380ab1fe3f2a67809e3fac6a0597e8b14894194e4c17db8c194f74825c1ef770e64cb07675b067f4a2ffaf9cf58a83085489a6b4b710e33835ff3e942d1ebf41b2a3aea0f04c7dd54b3005d47b93bfc36d1f8c80ba7a29e3afc8e48fd07ea42d3049ddb4ae1922faf7c5d5c266d737a91610a0403ecba4d7bfd578c179769a54b54eb0c2a6450ce3b690539a211620a2311196a61b68f11ce087645713b68d7cbc3fbfaba3cd29dcb7ff1a33ddd2291f617f8140aa51292244dd9022b8274034f0e94000b84b7cc5eaf2303297d9a2cce81acb242920b6c086e4fa19a4edd187bd2bfffb7b492a900e24b405e80ab7446ef81012e3685dd174feea6a61c73bdb74450d1f8ffae3680d495ddd864671cfedb0b00941d1a33bf0156eb9aee5f4b15fdf1262a2dbe27379d164ed45c0f5c29d4b8a20c663ef8fe871c8076e11cf2c292849f381d0ba84ea082f622426ff436bd9025744a5773009e662b8ab0e8298a92dfe544181eaf6f76b1acc55d87f744c391ee528138fb02beadfa5ac0f3cf12928bbff43681a2b5a3679036b59e8fa34d4e01a0ab97fbafe01f9e29fdb4e20ac9a265c1b061ab283a34cd61bad6abf5f46a10e50bcd05002ae5af2ca88b12c2afad57e00977ff95a6987a8d4c73b40142db89ed4b892dde350597fb4585ccb1fb53742cbfc6d35eb9325df20f4a24ee89418c9b182f469af47d813e2db71b88ae8b647208ff8ccbd38304327bd69ac044947dec9c33271882c3ca5a064ca76f78cf3d0c61a0ac3d84c11b9ce8fea68dbf07c3578ff3004c620e2c4bfe67717a75d7893ceeddc220e647928c000bcdba19493b36dd49d79390cfd507d1e25274e1dc73181ac26156fb640684083cfdb2cb26c4a7c2d1df4466bfd76eb5d4965b10cbf84a5901832afcb77c5303f07917adfed630026a0401a98daa6222a9babadd385d066888ecafaf3e675865f9ebb40291ad0d634e9ca8b68332d54cfca9b093d0b5f2783b7c815d870b1c9f221d73ccb3b0439b57f2fdec32b012f6f1bf09ec4e06ed3d19c596e46fa8a95d4fa8deca65b42bbbd094dcd4fea4995ae716e7ea83fcc86db6fac68c98bb5f61beae3381c2960a849b23d9a4d6af86a77e26a855449f02a36991d73b86ed47f4321a291b2a12d017cda81a8c255b697a0179794dbfbf77ea38f3e397a36dacf773ad60fb7705c0c2ccf4110e8deeaeffbec3110aeb423be513caac296ea8396eeee12d80e17191324e8162ade6fff4e45452faa4f150f265e9087d5bb593337e11fe6b14b2d75e8951ff0a477c2e5d6ff6b30b9b4d37f43baab9a5849fafecd116df774b03aca75edb898b15dbc918418f837d93e8d6c62b13be12596348905c44416c418222362a733d3b2f58e2cc106e35affe8ba7e7c53d0c96647d6865b086950d57eeeeb18539c8a6b68399a55d405972803027648d67f9cf10a1605f6f06dd0a51fb68079672b625ac3bc464ea73805de0d8a39f818431ca00"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m43.748307174s ago: executing program 35 (id=389): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x20040041) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3m36.333414512s ago: executing program 36 (id=409): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x1) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) (fail_nth: 3) 3m17.027824507s ago: executing program 37 (id=497): unshare(0x68060300) r0 = syz_ublk_setup_io_uring(0x6ace, &(0x7f0000000000)={0x0, 0x539b, 0x40, 0x2, 0x58}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) syz_ublk_setup_io_uring(0x458a, &(0x7f0000000140)={0x0, 0x9fb4, 0x4000, 0x1, 0xca, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1) fsmount(r1, 0x1, 0x88) 3m14.712518222s ago: executing program 38 (id=506): unshare(0x6804021f) 3m12.857903173s ago: executing program 39 (id=515): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x1) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 3m6.033685607s ago: executing program 40 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (fail_nth: 6) 2m18.362551775s ago: executing program 9 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, 0x0, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 2m18.241167003s ago: executing program 9 (id=1077): r0 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x280, 0x78, 0x356, 0x0, 0x1, 0x0, 0x3000000, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x15, 0x4, 0x3, 0x9}) 2m18.166595235s ago: executing program 9 (id=1078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x8, "ce2ca008eb420af4a5de7d2be87731bd"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x4016, 0x4) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0xfffffffd) accept4(r9, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'ip6tnl0\x00', @broadcast}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x4}, &(0x7f00000001c0)=0x8) 2m17.952758973s ago: executing program 9 (id=1081): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') (async) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x40444c4) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/2, 0x2}], 0x1) 2m17.952457209s ago: executing program 9 (id=1082): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000dc0)='lp', 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000180)="9d3c07f834bd60dc53ba28836bda0ad86f916e4837d7d513c44d5259fda716c6f8cf2e69eb6b62d0ae843879587f73e120b9c13da0bd879aa45d319c129eb0bf5593f4f9a3caa28857e6d25c7aee061cee3b", 0x52}, {&(0x7f00000002c0)="853bc2dd9a10", 0x6}, {&(0x7f0000000300)="a6ce47aa06bd81edc3b3990a14bc05a268e1214778e0f00bf9b83fe68887ffe5a64f4ba5e226619bd95307c163da00874aaba27e032baabe99c07adb325dae59ec029bf049cc101a93661a75f4f27b57b42fae561737d5289c303d36cd0cefd2fb0b343db257cddd9e84a278223b0e2ac9ea704e698eb9cbc1a72305d7ee4c8f997c7fa014c92840a32629e300b6c457be9c1d86e287", 0x96}, {&(0x7f00000003c0)="f054692607d9b1101dc23c94db2648712a3b576f94a180387e95be7a640879bb188691a50018054d2dadeea534a6f4385572f295b88feb4c5292ca26ca30365de294d6dff0197e3ac9bf290a941a328d37881cd4d4b9938a23993576c7f8ffbf5dbc94568ff504b2bc771f172e86ca04e06d0a5e59eb1529dfb796bc86000541f13bf85c3162e5590e31e10cea18251cf860b9e119a8b1fbae78ffa08de6d386a24710ff37230eb80343fe1abbe14d04748aa61f2d2e7f1758dd54ea498a29fbd65227bfb0c587ce8577326fc1bc484ef84daf75", 0xd4}, {&(0x7f00000004c0)="fc9da9695b9773a5c04a249c6ea6c9c431ac57c4015766c1c17311df044b97c41f21fe7ea5e62f4da826444369511194dd6f693cbdd57678fd52356ddd510ee3a0bc7715e8921d907bd233c6f013c498edd44fa10ee69e292a6af048105d9d35fa1d82a31ce8026983493640f4843fc7f70401bf8177e9e7ce4fd4e80f030db80035e6d914ce254e7ce95a3211acea31e52760a02eab8458dc1318e418c169ffdd224de5684f055cdec92dbf645c0101dc22afe5ffa8f262d6ef757472b4b1d5c67ac8f21fada79fbfc0569156f4b759", 0xd0}, {&(0x7f00000005c0)="6df84358895bde88196d7a252a2ba63e72c521411d10e20f9a639fc4d54d5f02e3126b374ddc95e167e3c5522e68efcdf0135fccb5008ddfd6367516e61f47428b90", 0x42}, {&(0x7f0000000640)="f8c70c87776e2e1370d42a5bf0ab1500823c4f443cb2a584c6bb11474bb501c2b3c29c3836e5a8c5c48bc6817392fe13a93b890279cc230aefd4fa2a6cb56fbb141d4b5502fe3d8e835d23b82f", 0x4d}, {&(0x7f00000006c0)="d14d6fc7375cec36b279be976c4429a68fac2c36f6b8dbfe63158ae3469cb6bed822b8fbefe9b51ed5c2727ab43b179679b740c9c6b32d23af7ae6db053725407162a5bee530c7b72d8b10f31a0e443db150bbc378f3474e536fedd5af30de", 0x5f}, {&(0x7f00000007c0)="c555648b33eb9e86a4d2863adf35d747dd2a661087427c0b87b934f14218e71772dea8627ed8e6a2c656a04beb46fd7ded6ef44eb5edb405f5bf6a1271793e188e3d9846aaac3d99d1d9da2b85e9ad6047c0efdf2612959846e2187791b8ef3fd70bbe9b7de716b4d345", 0x6a}, {&(0x7f0000000840)="19750ce26e726a32bcdda410fb91d5dffc9806ea5be9fb6c774b3bbe354230da4d0bf6eaff33b99c1fa7983e55c2e05a300639bab9fccbc36f3adb222410968973d3e22c7313ce210c57b1f8647d9b91d1ccd4f09687084cb86ecd5247b9bd14b4100d8f964cfecd55da4dd85a0dd1cb9269ad7e31dd8b4c1af7ff1cf4c1a3604faa61aab51b8266c1d4b02e2cdb1c77c886e791af47b7ba3f52542e6e4c9918ad9f1952d55872443321855fb8a1ab885b1f3279efd750416d6addabb565b94a1f2bfffc8a9f12625cfa33882fa6a6a7c90f2b3d51caf650911063ebf5675c754768b48c00f2491b7026058bf18782cb44a904f29eb5a73898", 0xf9}], 0xa}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002ac0)="cddd5dea47bcbf1f2d932ddf86bac75bae0a6410f156813e1295", 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000003040)="72c15de0", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x14000, 0xfffffccd}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000000}, 0xc010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000a00)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000006200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000006180), &(0x7f00000061c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000006240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000062c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000b40)=@raw=[@alu={0x4, 0x1, 0xc, 0x4, 0x6, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @generic={0x4, 0xd, 0xa, 0x401, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x81, 0xb, 0x3, 0x2, 0x800}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], &(0x7f0000000bc0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000005140)=""/4096, 0x41100, 0x11, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000006140)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x6d41, r1, 0x0, &(0x7f0000006280)=[r5, r0, r6], 0x0, 0x10, 0x80}, 0x94) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2m17.664259246s ago: executing program 9 (id=1085): creat(&(0x7f0000000340)='./file0\x00', 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x7, {0x80, 0x3, 0x1}}, 0x14) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket(0x10, 0x3, 0x6) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000daffffff54427b77c9cfc8ededcc77d51026d436922e21df5a7d31996b62fbe5597ef0cdd109120d7c4475ef731134c01f3aad20a371cc8373fa6f9d182d26179bf788fa472872cde9ee625920a3a64d1a2731b8714a7a3fed872482018671528594ca5173f721e75c92cb52623e3470fd5cf72b2b0ed67100881ae1df857bbb58a0e7214758ff7dad727debd38e56f59064aa44829e3b146c01dd5edec040dd38bfbc77cd8f43ad2b5b7d4347508a31b73f193efc0a3ec27ce1345503e49b083552aa8d13054630f56c913febdb9d05278165bcc7ed427e1972d066e938134269d7b3b6131cb24ac98f9b19485f70fa2ba3ee5f97dd384378e01f7a0a090ad9b539c741190c8ab40510c62406d1399a86bfb0249db4ca5b463ac8bfc52137e1459fd5060283674428d765f4932e408d75180b", @ANYRES64=0x3], 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0xd}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r7, &(0x7f00000088c0)=""/48, 0x30) getdents(r7, 0xffffffffffffffff, 0x5a) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x80044d0d, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r3, &(0x7f0000001640)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864110086f7a938a8ec", 0x1a}], 0x1) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f00000001c0)=0x7, 0x4) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000500)={&(0x7f0000000100)=0x8a1, 0x0, &(0x7f0000000280)=[{}, {}, {}], &(0x7f00000004c0)}) 2m17.565238846s ago: executing program 41 (id=1085): creat(&(0x7f0000000340)='./file0\x00', 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x7, {0x80, 0x3, 0x1}}, 0x14) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket(0x10, 0x3, 0x6) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES64=0x3], 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0xd}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents64(r7, &(0x7f00000088c0)=""/48, 0x30) getdents(r7, 0xffffffffffffffff, 0x5a) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x80044d0d, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r3, &(0x7f0000001640)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864110086f7a938a8ec", 0x1a}], 0x1) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f00000001c0)=0x7, 0x4) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000500)={&(0x7f0000000100)=0x8a1, 0x0, &(0x7f0000000280)=[{}, {}, {}], &(0x7f00000004c0)}) 1m48.720520494s ago: executing program 0 (id=1460): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) pwrite64(r1, 0x0, 0x0, 0x81) 1m45.65176178s ago: executing program 0 (id=1469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}, {&(0x7f0000000280)="7750dd4707f615cbc8cf5c98377e9cb8ea96d7", 0x13}], 0x2, 0x0, 0xf00}, 0x20000885) 1m45.552133417s ago: executing program 0 (id=1470): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x58, 0x0, [{0x4b564d07}]}) r6 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000180)={0x0, 0x0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0x1000, 0x205000, 0x8}) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) r10 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xeeee8000, 0x0, r10}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r9, 0x4020aed2, &(0x7f0000000000)={0x0, 0x300000, 0x8}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="58295dea", 0x4) 1m45.24192905s ago: executing program 0 (id=1471): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x4e, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x400, &(0x7f00000003c0)=ANY=[@ANYBLOB='pids_localevents,memory_hugetlb_accounting,nsdelegate,pids_localevents,favordynmods,nsdelegate,euid=', @ANYRESDEC=0x0, @ANYBLOB='$hawh,audit,uid<', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1m44.986252821s ago: executing program 0 (id=1472): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m44.662642259s ago: executing program 0 (id=1473): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0, 0x1f}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000100)={0x0, 0x4, 0x7, 0xe000000, 0xffffffffffffffff}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x0, 0x0, 0x0}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000280)={0x0, 0x43d9102d65573c3, @start={0x8}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x20060a, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r7}}], [{@fsname={'fsname', 0x3d, '\x00\x00\x00\x16\xdd\xbe\x88\xfao\xd2{\x8a]\xc3\x9f\xd3\x8c\xfb\xbf\xb3\x05\xc4B\xf2\x86\x95\x8d\xeb\x15EIC\xfa\x19\x93\xac\xfb\x81\xc6\x04\xda3\x00'/56}}]}) 1m44.635237782s ago: executing program 42 (id=1473): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0, 0x1f}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000100)={0x0, 0x4, 0x7, 0xe000000, 0xffffffffffffffff}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="cca9efaa32a4009ea301f8c4cd3e8a2800daf9f7fcadfe677fe774109efbab5e9a00a08f6145640ff49d2c711fdf719ea8daa38a5306ddbf11a6ed1b53f931d8853c57a829aababd627e4f252059df3a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x20, 0x0, &(0x7f0000000340)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x0, 0x0, 0x0}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000280)={0x0, 0x43d9102d65573c3, @start={0x8}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x20060a, &(0x7f0000000240)={[{@uid={'uid', 0x3d, r7}}], [{@fsname={'fsname', 0x3d, '\x00\x00\x00\x16\xdd\xbe\x88\xfao\xd2{\x8a]\xc3\x9f\xd3\x8c\xfb\xbf\xb3\x05\xc4B\xf2\x86\x95\x8d\xeb\x15EIC\xfa\x19\x93\xac\xfb\x81\xc6\x04\xda3\x00'/56}}]}) 1m31.811187936s ago: executing program 4 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)}], 0x1}, 0x20000885) 1m30.411962642s ago: executing program 4 (id=1659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c3102, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd28, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000000)="27030224dc0f14000e0020000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m29.06326349s ago: executing program 4 (id=1666): sysfs$1(0x1, &(0x7f0000000200)='tmpfs\x00') setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0xd96, @rand_addr=0x64010101}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e544524014004009412080000001e1ea6324d0093fcf19b49f31d0000000000000076a8a20122e4dbbe00000000000000000000000000000100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81) r2 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r2, 0x1a, &(0x7f0000000000), 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1/file0\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4095}, 0x40004) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_follow}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x0) r4 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x14, 0x0, 0xffffffffffffff8f) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) sendmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6000801) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x24002, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000500)={0x2, 0x1, &(0x7f0000000540)=""/234, &(0x7f0000000280)=""/80, &(0x7f0000000400)=""/198}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = syz_open_dev$radio(&(0x7f00000002c0), 0x3, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f00000003c0)={0xa10000, 0xb, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x990a90, 0x4, '\x00', @p_u32=0x0}}) 1m28.839309835s ago: executing program 4 (id=1671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)={'tunl0\x00', 0x400}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="20000000f100000002"], 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 1m28.619661198s ago: executing program 4 (id=1676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1m28.370098767s ago: executing program 4 (id=1680): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x4440, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004ac0)="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", 0x2000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xb, 0x0, 0x7}}]}}]}, 0x44}}, 0x24008004) ioctl$CDROMREADTOCENTRY(r2, 0x5306, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, @msf={0x4, 0x2, 0x7}, 0x2}) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r1) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000200)) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r12 = dup3(r11, r10, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r13, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0xffffff21, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000000002002000000000000d000000080002"], 0x44}}, 0x20000040) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r8, 0x1, 0x2, 0x25dfdbfc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040d1}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x700, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 1m28.251215113s ago: executing program 43 (id=1680): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x4440, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004ac0)="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", 0x2000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xb, 0x0, 0x7}}]}}]}, 0x44}}, 0x24008004) ioctl$CDROMREADTOCENTRY(r2, 0x5306, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, @msf={0x4, 0x2, 0x7}, 0x2}) syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r1) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000200)) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r12 = dup3(r11, r10, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r13, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0xffffff21, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000021000100000000000000000002002000000000000d000000080002"], 0x44}}, 0x20000040) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r8, 0x1, 0x2, 0x25dfdbfc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20040d1}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x700, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 1m2.04149634s ago: executing program 2 (id=1956): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x638) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='westwood', 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000170081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1m1.99178914s ago: executing program 2 (id=1958): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$phonet(0x23, 0x2, 0x1) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7) 1m1.98938941s ago: executing program 2 (id=1960): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d130f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac3(0x6, 0xf9, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x17a0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x3, 0x10, 0x7, {0x8, 0xb, 0x0, 0x1, 0x1, 0x21, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x48, 0x9}, [@source_unit={0xc, 0x24, 0xb, 0x80, 0x2, 0x3, 0x4}, @mixer_unit={0xa, 0x24, 0x5, 0x4, 0x30, "6aaefcdc16"}, @selector_unit={0x9, 0x24, 0xc, 0x4c, 0x4, "b8c7d0be"}, @source_unit={0xc, 0x24, 0xb, 0x0, 0x2, 0x3, 0x7, 0xd93}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x304, 0x2, 0x5, 0x7, 0xe1d, 0xcb2c, 0x1e0c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xf, 0x8, 0x9, 0x1, 0x4, 0x4, 0xa, 0xd0}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x6, 0xf, "a00b196e0040da"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x8001, 0x9, 0x7f}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x40, 0xfc, "fbfe"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x4, 0x7, {0xa, 0x25, 0x25, 0x299f, 0x8, 0x59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd1, 0x2, 0x80, {0xa, 0x25, 0x25, 0x2a1c, 0x10, 0x7}}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x0, 0x4, 0xbb, 0x8, 0x1}, 0x9b, &(0x7f0000000200)={0x5, 0xf, 0x9b, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "f7b52bc50e10dcb0dd5a24ef9d37f08b"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2c, 0x5b, 0x16, 0x200, 0x3}, @generic={0x59, 0x10, 0xb, "660058325f22698d4cca02f2696179099f4a3e8d62b11490a80bbe38633d2783435cf0c7b4a8e7e2c3d4811c6c2795bd4ba4cc29ae659f1ef5fa67ac9d6762ada8f7845edf950bfbef2b3f323d5e5bdbad1810bf241a"}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0xd7, 0x0, 0x1, [0x180, 0x3f37, 0x30]}]}, 0x3, [{0x6a, &(0x7f00000002c0)=@string={0x6a, 0x3, "7a80ca4e87dd0650aee424f0854996d6f4d4a499db4a70f608fd6d034f1237b045b0697bf16355c2e6f6abacd281441def1d48ecf30a333979ce337acaa1af0442cb8f65a73ba1b89db51f2f2af2a9e784c782d0f211c4093479e52f0cfc3ccf050062c2519c04a5"}}, {0x7f, &(0x7f0000000340)=@string={0x7f, 0x3, "2d064a9b80a432b2aec283423f7c9caa713523784a174945cf2f9feec983ac29e2a7872e7a3680c7f4e2dcd84fd87753e19de0f5c9b760ccebcf81e7062d39c98f7d253bc729a901160d2605ef14dd0fe7e2546d1279126cc85cf57f6089bd247776b4e594d95d2ed733194a259e9283ff006740424851041313d484c5"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_disconnect(r0) syz_usb_connect$midi(0x94f854aae72e7ed8, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000440)={{0x4, 0x80}, {0x5, 0xa}, 0x7ff, 0x7, 0x12}) 58.151198573s ago: executing program 7 (id=2014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x3f, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 58.034612922s ago: executing program 7 (id=2015): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 57.898191667s ago: executing program 7 (id=2018): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xad}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7f}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f00000002c0)={0x7, 'hsr0\x00', {0x2}, 0xa8b}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x3f, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 57.781405483s ago: executing program 7 (id=2019): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000019100)=ANY=[@ANYBLOB='\\\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x5c}, 0xff00) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x34}, 0x3d}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000400) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, 0x0, 0x4000004) 57.708366609s ago: executing program 2 (id=2021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2, 0xffffffffffffffff}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800c959fd3400000000000000010000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000009cfed56000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\"\xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x5) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x14}}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 56.917760956s ago: executing program 7 (id=2034): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 56.896589869s ago: executing program 7 (id=2035): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000240)=""/246, 0x52, 0xf6, 0x1}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000580)="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") (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0, 0xff09}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=0x0, @ANYBLOB='\x00\x00$\x00\x00E\x00\x00'], 0x20}}, 0x40000c0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) (async) unshare(0x26020480) (async) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0x12) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x48102, 0x0) write$FUSE_GETXATTR(r7, &(0x7f0000002300)={0x18}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r7, 0x4000, r3}, 0x18) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x2b, 0xff, 0xff, 0x1}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f00000002c0)="66baf80cb8228b6887ef66bafc0cec0f01cfa766400f388134df0f005100430f22c765450f216448b800900000000000000f23d80f21f835800000f00f23f8c4a2ed90846acc5030b8c44231abb20069171e", 0x52}], 0x1, 0x19, &(0x7f0000000680)=[@dstype0={0x6, 0xa}], 0x1) 56.771410884s ago: executing program 2 (id=2036): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (fail_nth: 1) 56.624812085s ago: executing program 2 (id=2037): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setgid(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000000)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 47.299762365s ago: executing program 3 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x60, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5b684a70c7e942fb00e7144fd8fd940039a11583fa331b3e"}]]}, 0x60}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1f}, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r7, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xcaed}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2a78ee4223"}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "49d7d1140ac69bf67b75bce169"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9100) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r9, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0315000000000000240012075ab9028008000200ffffffff050003000900bdbebcf48bd18a62db0e8a60598a09ad610902d76d57bcedfe46514cb7437436076f7679c3560ff51d6ca3cb8155ec9f5663397f192ff2ed90343ac5a722f34690e7d8a26b59158e3ee5eeb153d1452ae31506ad354c4ef27c5c26b6949e9bc51c6569dfe3a9e0d30b08d18147d3252b43c6551c851e0709b6970ff13999accf36db523116b01f4a64edfea68119c98735c34bae788e36a765ae89edb2112d29be75b0ccf4913632f5a4e8490300000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000801) 47.231275346s ago: executing program 3 (id=2092): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x70a0af8c93042c75}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x1, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0x1, 0x4, 0x6, 0x4, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x5, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xa, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 47.121681436s ago: executing program 3 (id=2093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="81012dbd7000d90200000100000008"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04141a0c"], 0x7) 47.031768645s ago: executing program 3 (id=2094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, 0x0, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) 46.922053324s ago: executing program 3 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 46.908098836s ago: executing program 3 (id=2096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0xe}, {0xc, 0xfff2}, {0xa, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) socket$unix(0x1, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) 41.67425499s ago: executing program 44 (id=2037): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setgid(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000000)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 41.631180658s ago: executing program 45 (id=2035): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000240)=""/246, 0x52, 0xf6, 0x1}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000580)="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") (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0, 0xff09}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=0x0, @ANYBLOB='\x00\x00$\x00\x00E\x00\x00'], 0x20}}, 0x40000c0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) (async) unshare(0x26020480) (async) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0x12) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x48102, 0x0) write$FUSE_GETXATTR(r7, &(0x7f0000002300)={0x18}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r7, 0x4000, r3}, 0x18) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x2b, 0xff, 0xff, 0x1}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f00000002c0)="66baf80cb8228b6887ef66bafc0cec0f01cfa766400f388134df0f005100430f22c765450f216448b800900000000000000f23d80f21f835800000f00f23f8c4a2ed90846acc5030b8c44231abb20069171e", 0x52}], 0x1, 0x19, &(0x7f0000000680)=[@dstype0={0x6, 0xa}], 0x1) 31.555442348s ago: executing program 46 (id=2096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff2, 0xe}, {0xc, 0xfff2}, {0xa, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) socket$unix(0x1, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) 5.134299305s ago: executing program 1 (id=2439): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 5.051047819s ago: executing program 1 (id=2440): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r8, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)}], 0x1}, 0x4) 5.050391894s ago: executing program 1 (id=2441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="7750dd4707f6", 0x6}], 0x1, 0x0, 0x0, 0x300}, 0x20000885) 5.000318939s ago: executing program 1 (id=2443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e005", 0x26}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b", 0x5a}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x140) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/kernel/cpu_byteorder', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) read$nci(r3, &(0x7f0000000680)=""/88, 0x58) ioctl$KVM_CREATE_VM(r2, 0xae03, 0xa3) 4.999693427s ago: executing program 1 (id=2444): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582"], 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0xf303, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0xffe0}], 0xe0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x41, 0xffffff7f}}, @sndrcv={0x30, 0x84, 0x1, {0x101, 0x2, 0x8, 0x8, 0x0, 0x1e5, 0x820, 0x2}}], 0x50, 0x4048008}, 0x0) 2.939120593s ago: executing program 8 (id=2448): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 2.871166265s ago: executing program 8 (id=2450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c3102, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd28, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000000)="27030200dc0f14000e0020000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f4000b000000000000", 0x2e}], 0x1}, 0x4005) 2.731001057s ago: executing program 8 (id=2452): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000000000900000000000000000000000000000000000000000000000000000000e1cac78e000000000000dbf837cdadf63dc3dd9342fa0fa6a0a32a52b3d6bc11954f3b920eaf2d332c6f74548d23d4d1918ef8fd8e74f9e2060d259281022cd9"]) (async) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.730418523s ago: executing program 8 (id=2453): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) 1.937488594s ago: executing program 1 (id=2454): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582"], 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bind$802154_raw(r2, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0xffe0}], 0xe0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x41, 0xffffff7f}}, @sndrcv={0x30, 0x84, 0x1, {0x101, 0x2, 0x8, 0x8, 0x0, 0x1e5, 0x820, 0x2}}], 0x50, 0x4048008}, 0x0) syz_usb_ep_write(r0, 0xc7, 0x35, &(0x7f00000000c0)="b65a06678ec585a2cced5d9ffb527489cf88d48750288378ed95f9a71c8415739d7515a49cb098e1d351c1116bae24fc9230303579") 818.864368ms ago: executing program 8 (id=2455): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, &(0x7f0000000140)=0x8006, 0x4, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) 600.498248ms ago: executing program 5 (id=2463): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x638) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='westwood', 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7014000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 540.649799ms ago: executing program 5 (id=2465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x1408}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000000c0)={0x8, r1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e1050000008847000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 480.434086ms ago: executing program 5 (id=2467): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x310, 0x168, 0x0, 0x310, 0x98, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) (async, rerun: 64) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, r4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async, rerun: 64) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @multicast1}, 0x306, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0xfffffffffffffffd, 0x7}) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x80) 400.882971ms ago: executing program 5 (id=2470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000003f00", @ANYRES32=0x0, @ANYBLOB="000000ffe40000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x20000000) 299.123786ms ago: executing program 5 (id=2473): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000b040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f00000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64360f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f1b3fa4526650ea6cef13d000000225d85ae49cee383f936ad657b303ab841dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c1070bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c22ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fd03000000022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000004000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99705cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0706a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922923806ca84d69ea370db27a5ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c829aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f4441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbf34c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d9436220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd9000000000000f05fe239d3d6dafc367f12689b6700000000bd4990d9dc174a69aadffdea5445fd3c13350af85d308caee689736c06417b52541eb5871d820b850dcb00877bbe2ed19d911564f11adeb52ec3047cfdcac8a8bab6ee365941cf792155f589226758e9c8bec8289b3012ca74bfe210e0315b384ce982e16f93f3e0b1385cfaab63bd36b141dfbc7f96ee549b8b52c311e5c657943f2a5d177f03e10b3595ed13458472a2eab1ea987a0668e52fff5c716fb5950852186649ce7362b45225f050c1c37327b6833025cc1dff2d57df674be03bab30901188386d248370"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 298.355432ms ago: executing program 6 (id=2474): setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f40)=0x1, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB="00000000280000000000000011"], 0x50}}], 0x1, 0x0) 298.156426ms ago: executing program 5 (id=2475): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) (async) mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000340)={0x3, 0x0, [{0x40000081, 0x0, 0x100}, {0xb7b, 0x0, 0x2}, {0x37d, 0x0, 0x3}]}) (async) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}, {&(0x7f00000004c0)="9ec2fac086b46ea75227701aa4233597d8f5829cf3b7347f318edeece819b98e0dfc0ce47063b8f43f765ab2f7ffd018c2005e9f3f8c8c274bacde84922bfc0c6295a0a3d3f7c26773699d40b16775d8a6301526dcaebb7817fda3d495b115a5b9a13ff72966bc42a8aab4a4d3fe6164", 0x70}], 0x3, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) (async) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@void, {0x8100, 0x1, 0x1}}, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}, {0x3}, {0x61d1}, {0x80}], @ipv4=@igmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x64, 0x0, 0x81, 0x2, 0x0, @loopback, @local}, {0x22, 0x7, 0x0, @multicast2}}}}}}, 0x0) 250.660023ms ago: executing program 6 (id=2476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x80}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="7750dd4707f6", 0x6}], 0x1}, 0x20000885) listen(r3, 0x1) 190.584392ms ago: executing program 6 (id=2477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01720000000000001800128008000100677470000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 110.968249ms ago: executing program 6 (id=2478): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x3}, &(0x7f00000001c0)=0x28) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) (async) write$cgroup_pressure(r2, &(0x7f0000000140)={'some', 0x20, 0x8, 0x20, 0xc}, 0x2f) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x20c41a, 0x0) 110.809907ms ago: executing program 6 (id=2479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c3102, 0x0) close(r4) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd28, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000000000)="27030200dc0f14000e0020000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40024000000000000", 0x2e}], 0x1}, 0x4005) 257.046µs ago: executing program 6 (id=2480): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582"], 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0xf403, &(0x7f0000000400)=[{&(0x7f00000003c0)='\x00', 0xffe0}], 0xe0, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x41, 0xffffff7f}}, @sndrcv={0x30, 0x84, 0x1, {0x101, 0x2, 0x8, 0x8, 0x0, 0x1e5, 0x820, 0x2}}], 0x50, 0x4048008}, 0x0) 0s ago: executing program 8 (id=2481): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250e0000003400028008000800060000000800030900000000000000000001e700060009000000080008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r1, &(0x7f0000002b00)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000002780), 0xa00}], 0x2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000014c0)={0x1, 0x1, &(0x7f0000000040)=""/9, &(0x7f0000000180)=""/192, &(0x7f00000004c0)=""/4096, 0x3000}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0x89, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000040000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffe, 0x5, 0x7, 0x7, 0x3, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 782344695.142:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12973 comm="syz.3.1945" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc66d99ce59 code=0x0 [ 289.538053][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1947'. [ 289.725674][T11584] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 289.779792][T12991] gtp1: entered allmulticast mode [ 289.871255][T11584] usb 12-1: device descriptor read/64, error -71 [ 289.917544][T12997] fuse: Unknown parameter 'fd0x0000000000000004' [ 289.960622][T13001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=13001 comm=syz.2.1956 [ 289.985942][T11584] usb usb12-port1: attempt power cycle [ 289.988400][ T42] audit: type=1400 audit(1782344695.602:1052): avc: denied { setattr } for pid=13002 comm="syz.1.1957" name="/" dev="9p" ino=72879103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.012110][ T5091] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 290.161185][T13009] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 290.285656][ T8375] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 290.327398][T11584] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 290.346141][T11584] usb 12-1: device descriptor read/8, error -71 [ 290.387858][T13017] fuse: Unknown parameter 'fd0x0000000000000004' [ 290.422233][T13019] FAULT_INJECTION: forcing a failure. [ 290.422233][T13019] name failslab, interval 1, probability 0, space 0, times 0 [ 290.427948][T13019] CPU: 0 UID: 0 PID: 13019 Comm: syz.3.1964 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.427968][T13019] Tainted: [L]=SOFTLOCKUP [ 290.427972][T13019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 290.427978][T13019] Call Trace: [ 290.427982][T13019] [ 290.427990][T13019] dump_stack_lvl+0x100/0x190 [ 290.428008][T13019] should_fail_ex.cold+0x5/0xa [ 290.428023][T13019] should_failslab+0xc2/0x120 [ 290.428038][T13019] kmem_cache_alloc_noprof+0x91/0x6a0 [ 290.428051][T13019] ? copy_pid_ns+0x32b/0x10a0 [ 290.428068][T13019] copy_pid_ns+0x32b/0x10a0 [ 290.428082][T13019] ? lock_acquire+0x1b9/0x370 [ 290.428096][T13019] ? __pfx_copy_pid_ns+0x10/0x10 [ 290.428110][T13019] ? find_held_lock+0x2b/0x80 [ 290.428120][T13019] ? find_held_lock+0x2b/0x80 [ 290.428133][T13019] ? copy_ipcs+0x5d7/0x7e0 [ 290.428150][T13019] ? copy_ipcs+0x5d7/0x7e0 [ 290.428172][T13019] ? do_raw_spin_unlock+0x145/0x1e0 [ 290.428194][T13019] ? _raw_spin_unlock+0x28/0x50 [ 290.428212][T13019] create_new_namespaces+0x2aa/0xac0 [ 290.428231][T13019] unshare_nsproxy_namespaces+0xf2/0x220 [ 290.428247][T13019] ksys_unshare+0x438/0xab0 [ 290.428264][T13019] ? __pfx_ksys_unshare+0x10/0x10 [ 290.428280][T13019] ? ksys_write+0x1ac/0x250 [ 290.428300][T13019] __x64_sys_unshare+0x31/0x40 [ 290.428315][T13019] do_syscall_64+0x115/0x870 [ 290.428326][T13019] ? clear_bhb_loop+0x40/0x90 [ 290.428339][T13019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.428350][T13019] RIP: 0033:0x7fc66d99ce59 [ 290.428360][T13019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.428371][T13019] RSP: 002b:00007fc66e84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 290.428383][T13019] RAX: ffffffffffffffda RBX: 00007fc66dc15fa0 RCX: 00007fc66d99ce59 [ 290.428389][T13019] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 290.428396][T13019] RBP: 00007fc66e84c090 R08: 0000000000000000 R09: 0000000000000000 [ 290.428402][T13019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.428409][T13019] R13: 00007fc66dc16038 R14: 00007fc66dc15fa0 R15: 00007ffd710403d8 [ 290.428424][T13019] [ 290.507786][ T8375] usb 7-1: Using ep0 maxpacket: 8 [ 290.510878][ T8375] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.514388][ T8375] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 290.518404][ T8375] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 290.521802][ T8375] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 290.525121][ T8375] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 290.528518][ T8375] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.544710][ T8375] hub 7-1:1.0: bad descriptor, ignoring hub [ 290.547139][ T8375] hub 7-1:1.0: probe with driver hub failed with error -5 [ 290.549591][ T8375] cdc_wdm 7-1:1.0: skipping garbage [ 290.553570][ T8375] cdc_wdm 7-1:1.0: skipping garbage [ 290.554249][T13027] tc action pedit 'at' offset 9 out of bounds [ 290.555183][ T8375] cdc_wdm 7-1:1.0: skipping garbage [ 290.557799][ T8375] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 290.561372][ T8375] cdc_wdm 7-1:1.0: Unknown control protocol [ 290.585907][T11584] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 290.607602][T11584] usb 12-1: device descriptor read/8, error -71 [ 290.715966][T11584] usb usb12-port1: unable to enumerate USB device [ 290.741202][ T42] audit: type=1400 audit(1782344696.352:1053): avc: denied { read write } for pid=13006 comm="syz.2.1960" name="cdc-wdm0" dev="devtmpfs" ino=3124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 290.749910][ T42] audit: type=1400 audit(1782344696.352:1054): avc: denied { open } for pid=13006 comm="syz.2.1960" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 291.105577][T13040] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 291.109828][T13040] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 291.137183][T13043] netlink: 'syz.1.1973': attribute type 2 has an invalid length. [ 291.139711][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 291.225755][T13047] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 291.229262][T13047] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 291.237775][T13047] tcf_pedit_act: 8 callbacks suppressed [ 291.237791][T13047] tc action pedit offset must be on 32 bit boundaries [ 291.301773][T13049] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 291.304890][T13049] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 291.436390][T13054] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 291.439373][T13054] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 291.716023][ T5732] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 291.790183][ T42] audit: type=1400 audit(1782344697.402:1055): avc: denied { append } for pid=13059 comm="syz.3.1981" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 291.886526][ T5732] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 291.899806][ T5732] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 291.905024][ T5732] usb 6-1: Product: syz [ 291.908163][ T5732] usb 6-1: Manufacturer: syz [ 291.910449][ T5732] usb 6-1: SerialNumber: syz [ 291.917684][ T5732] usb 6-1: config 0 descriptor?? [ 291.971524][ T42] audit: type=1400 audit(1782344697.572:1056): avc: denied { recv } for pid=13066 comm="syz.3.1984" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 292.043358][ T42] audit: type=1400 audit(1782344697.652:1057): avc: denied { write } for pid=13067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.123740][T13072] syz_tun: entered allmulticast mode [ 292.130769][T13071] syz_tun: left allmulticast mode [ 292.135903][ T8375] usb 6-1: USB disconnect, device number 22 [ 292.220194][T13068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=13068 comm=syz.3.1984 [ 292.227778][ T42] audit: type=1400 audit(1782344697.842:1058): avc: denied { write } for pid=13073 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.247581][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1986'. [ 292.271414][ T42] audit: type=1400 audit(1782344697.882:1059): avc: denied { map } for pid=13075 comm="syz.7.1986" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 292.288822][ T42] audit: type=1400 audit(1782344697.882:1060): avc: denied { execute } for pid=13075 comm="syz.7.1986" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 292.463853][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1990'. [ 292.480515][T13099] IPVS: Unknown mcast interface: vcan0 [ 292.603204][T13107] ipvlan2: entered allmulticast mode [ 292.605385][T13107] veth0_to_bridge: entered allmulticast mode [ 292.612274][T13107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1995'. [ 292.616401][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 292.619994][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1995'. [ 292.636293][T13109] tc action pedit offset must be on 32 bit boundaries [ 292.638833][T13109] tc action pedit offset must be on 32 bit boundaries [ 292.642223][T13109] tc action pedit offset must be on 32 bit boundaries [ 292.644300][T13109] tc action pedit offset must be on 32 bit boundaries [ 292.646467][T13109] tc action pedit offset must be on 32 bit boundaries [ 292.648781][T13109] tc action pedit offset must be on 32 bit boundaries [ 292.650844][T13109] tc action pedit offset must be on 32 bit boundaries [ 292.652991][T13109] tc action pedit offset must be on 32 bit boundaries [ 292.655107][T13109] tc action pedit offset must be on 32 bit boundaries [ 292.657322][T13109] TC_ACT_REPEAT abuse ? [ 292.833406][T13118] netlink: 'syz.7.1999': attribute type 1 has an invalid length. [ 292.846780][T13118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.878134][T13118] bond1: (slave geneve2): making interface the new active one [ 292.883394][T13118] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 292.925587][ T8180] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 293.085588][ T8180] usb 6-1: Using ep0 maxpacket: 32 [ 293.088571][ T8180] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 293.091305][ T8180] usb 6-1: config 0 has no interface number 0 [ 293.093370][ T8180] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 293.098610][ T8180] usb 6-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 293.101457][T13131] FAULT_INJECTION: forcing a failure. [ 293.101457][T13131] name failslab, interval 1, probability 0, space 0, times 0 [ 293.102074][ T8180] usb 6-1: config 0 interface 196 has no altsetting 0 [ 293.110319][T13131] CPU: 0 UID: 0 PID: 13131 Comm: syz.7.2002 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.110338][T13131] Tainted: [L]=SOFTLOCKUP [ 293.110342][T13131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 293.110349][T13131] Call Trace: [ 293.110354][T13131] [ 293.110359][T13131] dump_stack_lvl+0x100/0x190 [ 293.110377][T13131] should_fail_ex.cold+0x5/0xa [ 293.110393][T13131] should_failslab+0xc2/0x120 [ 293.110407][T13131] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 293.110422][T13131] ? register_pidns_sysctls+0x48/0x1c0 [ 293.110437][T13131] kmemdup_noprof+0x29/0x60 [ 293.110449][T13131] register_pidns_sysctls+0x48/0x1c0 [ 293.110465][T13131] ? __ns_common_init+0x299/0x4b0 [ 293.110488][T13131] copy_pid_ns+0x680/0x10a0 [ 293.110509][T13131] ? __pfx_copy_pid_ns+0x10/0x10 [ 293.110527][T13131] ? find_held_lock+0x2b/0x80 [ 293.110539][T13131] ? find_held_lock+0x2b/0x80 [ 293.110548][T13131] ? copy_ipcs+0x5d7/0x7e0 [ 293.110559][T13131] ? copy_ipcs+0x5d7/0x7e0 [ 293.110572][T13131] ? _raw_spin_unlock+0x28/0x50 [ 293.110590][T13131] create_new_namespaces+0x2aa/0xac0 [ 293.110622][T13131] unshare_nsproxy_namespaces+0xf2/0x220 [ 293.110639][T13131] ksys_unshare+0x438/0xab0 [ 293.110655][T13131] ? __pfx_ksys_unshare+0x10/0x10 [ 293.110671][T13131] ? ksys_write+0x1ac/0x250 [ 293.110691][T13131] __x64_sys_unshare+0x31/0x40 [ 293.110706][T13131] do_syscall_64+0x115/0x870 [ 293.110717][T13131] ? clear_bhb_loop+0x40/0x90 [ 293.110730][T13131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.110742][T13131] RIP: 0033:0x7fd825d9ce59 [ 293.110752][T13131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.110763][T13131] RSP: 002b:00007fd826c06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 293.110774][T13131] RAX: ffffffffffffffda RBX: 00007fd826015fa0 RCX: 00007fd825d9ce59 [ 293.110781][T13131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 293.110788][T13131] RBP: 00007fd826c06090 R08: 0000000000000000 R09: 0000000000000000 [ 293.110794][T13131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 293.110800][T13131] R13: 00007fd826016038 R14: 00007fd826015fa0 R15: 00007fff02c83348 [ 293.110818][T13131] [ 293.115280][ T8180] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 293.190912][ T8180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.193464][ T8180] usb 6-1: Product: syz [ 293.194748][ T8180] usb 6-1: Manufacturer: syz [ 293.196394][ T8180] usb 6-1: SerialNumber: syz [ 293.199414][ T8180] usb 6-1: config 0 descriptor?? [ 293.201587][T13114] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 293.421659][ T8180] ipheth 6-1:0.196: Unable to find endpoints [ 293.424895][T13139] tc action pedit 'at' offset 9 out of bounds [ 293.444613][ T8180] usb 6-1: USB disconnect, device number 23 [ 293.839581][T13166] syzkaller0: entered promiscuous mode [ 293.841805][T13166] syzkaller0: entered allmulticast mode [ 293.972781][T13171] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 293.975547][T13171] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 293.981794][T13171] FAULT_INJECTION: forcing a failure. [ 293.981794][T13171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.986417][T13171] CPU: 0 UID: 0 PID: 13171 Comm: syz.1.2016 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.986434][T13171] Tainted: [L]=SOFTLOCKUP [ 293.986438][T13171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 293.986445][T13171] Call Trace: [ 293.986449][T13171] [ 293.986454][T13171] dump_stack_lvl+0x100/0x190 [ 293.986472][T13171] should_fail_ex.cold+0x5/0xa [ 293.986487][T13171] _copy_from_user+0x2e/0xd0 [ 293.986499][T13171] copy_msghdr_from_user+0x9f/0x4c0 [ 293.986511][T13171] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 293.986529][T13171] ___sys_sendmsg+0x106/0x1e0 [ 293.986541][T13171] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.986551][T13171] ? __lock_acquire+0x49f/0x1a40 [ 293.986565][T13171] ? get_pid_task+0x106/0x250 [ 293.986589][T13171] __sys_sendmsg+0x160/0x210 [ 293.986604][T13171] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.986625][T13171] do_syscall_64+0x115/0x870 [ 293.986641][T13171] ? clear_bhb_loop+0x40/0x90 [ 293.986660][T13171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.986676][T13171] RIP: 0033:0x7f510959ce59 [ 293.986691][T13171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.986708][T13171] RSP: 002b:00007f51077f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.986726][T13171] RAX: ffffffffffffffda RBX: 00007f5109815fa0 RCX: 00007f510959ce59 [ 293.986739][T13171] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 293.986748][T13171] RBP: 00007f51077f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.986759][T13171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.986768][T13171] R13: 00007f5109816038 R14: 00007f5109815fa0 R15: 00007ffc91a39848 [ 293.986790][T13171] [ 294.086901][T13174] syzkaller0: entered promiscuous mode [ 294.088667][T13174] syzkaller0: entered allmulticast mode [ 294.279419][T13181] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 294.281941][T13007] cdc_wdm 7-1:1.0: Error autopm - -16 [ 294.282126][T13181] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 294.287962][ T5880] usb 7-1: USB disconnect, device number 11 [ 294.396172][T13187] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 294.399318][T13187] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 294.583902][T13196] syzkaller0: entered promiscuous mode [ 294.583927][T13196] syzkaller0: entered allmulticast mode [ 294.628901][T13194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2024'. [ 294.997288][ T8375] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 295.156038][ T8375] usb 6-1: Using ep0 maxpacket: 32 [ 295.159377][ T8375] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 295.162227][ T8375] usb 6-1: config 0 has no interface number 0 [ 295.164099][ T8375] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 295.167458][ T8375] usb 6-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 295.171418][ T8375] usb 6-1: config 0 interface 196 has no altsetting 0 [ 295.176407][ T8375] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 295.180317][ T8375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.183695][ T8375] usb 6-1: Product: syz [ 295.186030][T13222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.188437][ T8375] usb 6-1: Manufacturer: syz [ 295.190356][ T8375] usb 6-1: SerialNumber: syz [ 295.192004][T13222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.194027][T13222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.205934][T13222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.208337][ T8375] usb 6-1: config 0 descriptor?? [ 295.211511][T13201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.213923][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'. [ 295.218599][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'. [ 295.221370][T13227] FAULT_INJECTION: forcing a failure. [ 295.221370][T13227] name failslab, interval 1, probability 0, space 0, times 0 [ 295.229583][T13227] CPU: 2 UID: 0 PID: 13227 Comm: syz.2.2036 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.229609][T13227] Tainted: [L]=SOFTLOCKUP [ 295.229615][T13227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.229625][T13227] Call Trace: [ 295.229631][T13227] [ 295.229638][T13227] dump_stack_lvl+0x100/0x190 [ 295.229668][T13227] should_fail_ex.cold+0x5/0xa [ 295.229695][T13227] should_failslab+0xc2/0x120 [ 295.229717][T13227] __kmalloc_noprof+0xfc/0x820 [ 295.229737][T13227] ? rcu_is_watching+0x12/0xc0 [ 295.229762][T13227] ? tomoyo_realpath_from_path+0xb6/0x690 [ 295.229791][T13227] tomoyo_realpath_from_path+0xb6/0x690 [ 295.229820][T13227] tomoyo_path_number_perm+0x23c/0x580 [ 295.229841][T13227] ? tomoyo_path_number_perm+0x22e/0x580 [ 295.229860][T13227] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 295.229900][T13227] ? find_held_lock+0x2b/0x80 [ 295.229914][T13227] ? __fget_files+0x215/0x3d0 [ 295.229930][T13227] ? hook_file_ioctl_common+0x140/0x440 [ 295.229952][T13227] ? __fget_files+0x215/0x3d0 [ 295.229990][T13227] ? __fget_files+0x21f/0x3d0 [ 295.230012][T13227] security_file_ioctl+0xd3/0x230 [ 295.230033][T13227] __x64_sys_ioctl+0xb7/0x210 [ 295.230057][T13227] do_syscall_64+0x115/0x870 [ 295.230074][T13227] ? clear_bhb_loop+0x40/0x90 [ 295.230093][T13227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.230109][T13227] RIP: 0033:0x7ff76779ce59 [ 295.230126][T13227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.230144][T13227] RSP: 002b:00007ff768714028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.230162][T13227] RAX: ffffffffffffffda RBX: 00007ff767a15fa0 RCX: 00007ff76779ce59 [ 295.230173][T13227] RDX: 0000000000000000 RSI: 0000000040049366 RDI: 0000000000000003 [ 295.230182][T13227] RBP: 00007ff768714090 R08: 0000000000000000 R09: 0000000000000000 [ 295.230192][T13227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.230201][T13227] R13: 00007ff767a16038 R14: 00007ff767a15fa0 R15: 00007ffca11c8588 [ 295.230223][T13227] [ 295.230342][T13227] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.532065][T13235] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2038'. [ 296.644726][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 296.644742][ T42] audit: type=1400 audit(1782344702.252:1062): avc: denied { listen } for pid=13252 comm="syz.3.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 296.711644][T13257] syz_tun: entered allmulticast mode [ 296.714649][T13256] syz_tun: left allmulticast mode [ 296.876198][T13261] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 297.265813][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.275553][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 297.275617][ T5091] Bluetooth: hci2: command 0x0c1a tx timeout [ 297.278091][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 297.767358][ T8375] ipheth 6-1:0.196: Unable to find endpoints [ 297.776859][ T8375] usb 6-1: USB disconnect, device number 24 [ 297.801982][T13265] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 297.805134][T13265] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 297.848167][T13273] input: syz1 as /devices/virtual/input/input16 [ 297.873339][T13276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30970 sclass=netlink_route_socket pid=13276 comm=syz.1.2052 [ 298.492913][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 298.809537][T13316] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 298.812745][T13316] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 299.403387][T13325] FAULT_INJECTION: forcing a failure. [ 299.403387][T13325] name failslab, interval 1, probability 0, space 0, times 0 [ 299.409183][T13325] CPU: 0 UID: 0 PID: 13325 Comm: syz.3.2067 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.409213][T13325] Tainted: [L]=SOFTLOCKUP [ 299.409221][T13325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.409232][T13325] Call Trace: [ 299.409239][T13325] [ 299.409246][T13325] dump_stack_lvl+0x100/0x190 [ 299.409278][T13325] should_fail_ex.cold+0x5/0xa [ 299.409304][T13325] should_failslab+0xc2/0x120 [ 299.409327][T13325] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 299.409350][T13325] ? __alloc_skb+0x140/0x710 [ 299.409377][T13325] __alloc_skb+0x140/0x710 [ 299.409397][T13325] ? __alloc_skb+0x5b7/0x710 [ 299.409418][T13325] ? __pfx___alloc_skb+0x10/0x10 [ 299.409448][T13325] hci_sock_sendmsg+0x1b01/0x2620 [ 299.409475][T13325] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 299.409494][T13325] ? __file_has_perm+0x336/0x460 [ 299.409521][T13325] sock_write_iter+0x53a/0x5b0 [ 299.409538][T13325] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 299.409559][T13325] ? __pfx_sock_write_iter+0x10/0x10 [ 299.409583][T13325] ? bpf_lsm_file_permission+0x9/0x10 [ 299.409609][T13325] ? security_file_permission+0x76/0x210 [ 299.409639][T13325] ? rw_verify_area+0xce/0x6d0 [ 299.409667][T13325] vfs_write+0x6ac/0x1050 [ 299.409698][T13325] ? __pfx_sock_write_iter+0x10/0x10 [ 299.409718][T13325] ? __pfx_vfs_write+0x10/0x10 [ 299.409742][T13325] ? find_held_lock+0x2b/0x80 [ 299.409776][T13325] ksys_write+0x1f8/0x250 [ 299.409803][T13325] ? __pfx_ksys_write+0x10/0x10 [ 299.409836][T13325] do_syscall_64+0x115/0x870 [ 299.409856][T13325] ? clear_bhb_loop+0x40/0x90 [ 299.409879][T13325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.409897][T13325] RIP: 0033:0x7fc66d99ce59 [ 299.409915][T13325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.409933][T13325] RSP: 002b:00007fc66e84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.409950][T13325] RAX: ffffffffffffffda RBX: 00007fc66dc15fa0 RCX: 00007fc66d99ce59 [ 299.409962][T13325] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 299.409973][T13325] RBP: 00007fc66e84c090 R08: 0000000000000000 R09: 0000000000000000 [ 299.409983][T13325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.409995][T13325] R13: 00007fc66dc16038 R14: 00007fc66dc15fa0 R15: 00007ffd710403d8 [ 299.410021][T13325] [ 299.797949][T13322] overlayfs: statfs failed on './file0' [ 301.192481][T13332] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 301.195274][T13332] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 301.308215][T13341] tcf_pedit_act: 23 callbacks suppressed [ 301.308227][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.314973][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.317538][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.320314][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.323185][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.326040][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.328806][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.331184][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.333946][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.336799][T13341] tc action pedit offset must be on 32 bit boundaries [ 301.339568][T13341] 0: reclassify loop, rule prio 0, protocol 800 [ 301.577642][ T42] audit: type=1400 audit(1782344707.192:1063): avc: denied { write } for pid=13346 comm="syz.3.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 301.583703][ T42] audit: type=1400 audit(1782344707.192:1064): avc: denied { ioctl } for pid=13346 comm="syz.3.2076" path="socket:[53651]" dev="sockfs" ino=53651 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 301.640961][T13352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2078'. [ 301.840494][T13362] FAULT_INJECTION: forcing a failure. [ 301.840494][T13362] name failslab, interval 1, probability 0, space 0, times 0 [ 301.844327][T13362] CPU: 3 UID: 0 PID: 13362 Comm: syz.3.2080 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.844345][T13362] Tainted: [L]=SOFTLOCKUP [ 301.844349][T13362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 301.844355][T13362] Call Trace: [ 301.844360][T13362] [ 301.844365][T13362] dump_stack_lvl+0x100/0x190 [ 301.844383][T13362] should_fail_ex.cold+0x5/0xa [ 301.844399][T13362] should_failslab+0xc2/0x120 [ 301.844413][T13362] __kmalloc_noprof+0xfc/0x820 [ 301.844425][T13362] ? __register_sysctl_table+0xbc8/0x1650 [ 301.844438][T13362] ? __register_sysctl_table+0xbc8/0x1650 [ 301.844450][T13362] ? __register_sysctl_table+0xbe4/0x1650 [ 301.844464][T13362] __register_sysctl_table+0xbe4/0x1650 [ 301.844479][T13362] ? __pfx___register_sysctl_table+0x10/0x10 [ 301.844491][T13362] ? register_pidns_sysctls+0x48/0x1c0 [ 301.844504][T13362] ? __asan_memcpy+0x3c/0x60 [ 301.844516][T13362] register_pidns_sysctls+0x11d/0x1c0 [ 301.844527][T13362] ? __ns_common_init+0x299/0x4b0 [ 301.844544][T13362] copy_pid_ns+0x680/0x10a0 [ 301.844560][T13362] ? __pfx_copy_pid_ns+0x10/0x10 [ 301.844573][T13362] ? find_held_lock+0x2b/0x80 [ 301.844583][T13362] ? find_held_lock+0x2b/0x80 [ 301.844592][T13362] ? copy_ipcs+0x5d7/0x7e0 [ 301.844621][T13362] ? copy_ipcs+0x5d7/0x7e0 [ 301.844635][T13362] ? _raw_spin_unlock+0x28/0x50 [ 301.844653][T13362] create_new_namespaces+0x2aa/0xac0 [ 301.844672][T13362] unshare_nsproxy_namespaces+0xf2/0x220 [ 301.844688][T13362] ksys_unshare+0x438/0xab0 [ 301.844705][T13362] ? __pfx_ksys_unshare+0x10/0x10 [ 301.844720][T13362] ? ksys_write+0x1ac/0x250 [ 301.844741][T13362] __x64_sys_unshare+0x31/0x40 [ 301.844757][T13362] do_syscall_64+0x115/0x870 [ 301.844767][T13362] ? clear_bhb_loop+0x40/0x90 [ 301.844781][T13362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.844792][T13362] RIP: 0033:0x7fc66d99ce59 [ 301.844801][T13362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.844812][T13362] RSP: 002b:00007fc66e84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 301.844823][T13362] RAX: ffffffffffffffda RBX: 00007fc66dc15fa0 RCX: 00007fc66d99ce59 [ 301.844830][T13362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 301.844837][T13362] RBP: 00007fc66e84c090 R08: 0000000000000000 R09: 0000000000000000 [ 301.844843][T13362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.844849][T13362] R13: 00007fc66dc16038 R14: 00007fc66dc15fa0 R15: 00007ffd710403d8 [ 301.844863][T13362] [ 301.844868][T13362] sysctl could not get directory: /kernel -12 [ 304.025591][ T8180] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 304.175622][ T8180] usb 6-1: Using ep0 maxpacket: 32 [ 304.179341][ T8180] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 304.182774][ T8180] usb 6-1: config 0 has no interface number 0 [ 304.185589][ T8180] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 304.189473][ T8180] usb 6-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 304.193281][ T8180] usb 6-1: config 0 interface 196 has no altsetting 0 [ 304.197651][ T8180] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 304.201012][ T8180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.203407][ T8180] usb 6-1: Product: syz [ 304.204643][ T8180] usb 6-1: Manufacturer: syz [ 304.206267][ T8180] usb 6-1: SerialNumber: syz [ 304.209541][ T8180] usb 6-1: config 0 descriptor?? [ 304.211629][T13380] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.752657][T13389] syzkaller0: entered promiscuous mode [ 304.754977][T13389] syzkaller0: entered allmulticast mode [ 306.782767][ T8180] ipheth 6-1:0.196: Unable to find endpoints [ 306.791288][ T8180] usb 6-1: USB disconnect, device number 25 [ 308.687778][T13410] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 308.690268][T13410] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 308.800647][T13416] NILFS (loop1): device size too small [ 308.860075][T13423] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 309.205758][ T42] audit: type=1400 audit(1782344714.812:1065): avc: denied { accept } for pid=13429 comm="syz.1.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 309.545650][ T5880] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 309.695622][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 309.698719][ T5880] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 309.701524][ T5880] usb 6-1: config 0 has no interface number 0 [ 309.703861][ T5880] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 309.707311][ T5880] usb 6-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 309.711102][ T5880] usb 6-1: config 0 interface 196 has no altsetting 0 [ 309.714965][ T5880] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 309.718869][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.721933][ T5880] usb 6-1: Product: syz [ 309.723243][ T5880] usb 6-1: Manufacturer: syz [ 309.724691][ T5880] usb 6-1: SerialNumber: syz [ 309.730251][ T5880] usb 6-1: config 0 descriptor?? [ 309.733733][T13434] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.828528][ T2233] block nbd5: Possible stuck request ffff88802924e000: control (read@0,1024B). Runtime 180 seconds [ 309.832913][ T2233] block nbd5: Possible stuck request ffff88802924e1c0: control (read@1024,1024B). Runtime 180 seconds [ 309.837751][ T2233] block nbd5: Possible stuck request ffff88802924e380: control (read@2048,1024B). Runtime 180 seconds [ 309.842230][ T2233] block nbd5: Possible stuck request ffff88802924e540: control (read@3072,1024B). Runtime 180 seconds [ 310.432977][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.449719][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.462310][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.463960][ T5739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.466626][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.472959][ T64] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.477464][ T64] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.485451][ T5739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.492468][ T5739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.496863][ T5744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.785432][ T5808] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.911834][ T5808] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.010576][ T5808] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.108769][ T5808] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.183309][T13438] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.185834][T13438] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.188141][T13438] bridge_slave_0: entered allmulticast mode [ 311.191246][T13438] bridge_slave_0: entered promiscuous mode [ 311.195090][T13438] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.198099][T13438] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.200372][T13438] bridge_slave_1: entered allmulticast mode [ 311.203122][T13438] bridge_slave_1: entered promiscuous mode [ 311.214559][T13440] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.217034][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.219315][T13440] bridge_slave_0: entered allmulticast mode [ 311.221994][T13440] bridge_slave_0: entered promiscuous mode [ 311.237951][T13440] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.240250][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.243022][T13440] bridge_slave_1: entered allmulticast mode [ 311.245735][T13440] bridge_slave_1: entered promiscuous mode [ 311.256203][T13438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.282082][T13438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.292053][T13440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.311225][T13440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.325593][T13438] team0: Port device team_slave_0 added [ 311.345276][T13438] team0: Port device team_slave_1 added [ 311.362459][T13440] team0: Port device team_slave_0 added [ 311.378170][T13438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.381079][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.391130][T13438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.397861][T13440] team0: Port device team_slave_1 added [ 311.400742][ T5808] bridge_slave_1: left allmulticast mode [ 311.402822][ T5808] bridge_slave_1: left promiscuous mode [ 311.404966][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.411112][ T5808] bridge_slave_0: left allmulticast mode [ 311.413217][ T5808] bridge_slave_0: left promiscuous mode [ 311.415510][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.541049][ T5808] bond1 (unregistering): (slave geneve2): Releasing active interface [ 311.567197][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.572576][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.576748][ T5808] bond0 (unregistering): Released all slaves [ 311.591935][ T5808] bond1 (unregistering): Released all slaves [ 311.602703][T13438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.605106][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.613322][T13438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.642635][T13440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.645719][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.653543][T13440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.659667][T13440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.661875][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.669731][T13440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.706427][T13438] hsr_slave_0: entered promiscuous mode [ 311.710155][T13438] hsr_slave_1: entered promiscuous mode [ 311.713150][T13438] debugfs: 'hsr0' already exists in 'hsr' [ 311.715620][T13438] Cannot create hsr debugfs directory [ 311.756890][T13440] hsr_slave_0: entered promiscuous mode [ 311.759559][T13440] hsr_slave_1: entered promiscuous mode [ 311.761819][T13440] debugfs: 'hsr0' already exists in 'hsr' [ 311.763879][T13440] Cannot create hsr debugfs directory [ 311.943721][ T42] audit: type=1400 audit(1782344717.552:1066): avc: denied { write } for pid=13473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.973927][ T5808] hsr_slave_0: left promiscuous mode [ 311.976856][ T5808] hsr_slave_1: left promiscuous mode [ 311.979043][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.981456][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.984368][ T5808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.987141][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.992530][ T42] audit: type=1400 audit(1782344717.602:1067): avc: denied { write } for pid=13476 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.000342][ T5808] veth1_macvtap: left promiscuous mode [ 312.002799][ T5808] veth0_macvtap: left promiscuous mode [ 312.005241][ T5808] veth1_vlan: left promiscuous mode [ 312.007647][ T5808] veth0_vlan: left promiscuous mode [ 312.181167][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 312.189592][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 312.319020][ T5880] ipheth 6-1:0.196: Unable to find endpoints [ 312.330268][ T5880] usb 6-1: USB disconnect, device number 26 [ 312.334841][ T5442] 8021q: adding VLAN 0 to HW filter on device eth14 [ 312.340390][T13479] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 312.342915][T13479] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 312.376583][T13479] tcf_pedit_act: 7 callbacks suppressed [ 312.376601][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.382875][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.385942][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.389201][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.391881][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.394602][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.397320][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.400087][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.403433][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.406138][T13479] tc action pedit unable to extract header offset for header type (0x5) [ 312.408669][T13479] 0: reclassify loop, rule prio 0, protocol 800 [ 312.488755][T13438] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.501322][ T42] audit: type=1400 audit(1782344718.112:1068): avc: denied { write } for pid=13481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.550758][ T5091] Bluetooth: hci4: command tx timeout [ 312.554367][ T5739] Bluetooth: hci5: command tx timeout [ 312.591989][ T42] audit: type=1400 audit(1782344718.202:1069): avc: denied { write } for pid=13491 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.609367][T13438] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.650524][ T5442] 8021q: adding VLAN 0 to HW filter on device eth15 [ 312.687801][T13438] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.746866][ T42] audit: type=1400 audit(1782344718.352:1070): avc: denied { write } for pid=13499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.798669][ T42] audit: type=1400 audit(1782344718.412:1071): avc: denied { write } for pid=13504 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.809628][T13438] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.822819][T13506] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 312.825325][T13506] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 312.844529][ T5442] 8021q: adding VLAN 0 to HW filter on device eth16 [ 312.859528][T13509] bond1: entered allmulticast mode [ 312.861667][T13509] vti0: entered allmulticast mode [ 312.869424][T13508] bond1: left allmulticast mode [ 312.871088][T13508] vti0: left allmulticast mode [ 312.901660][T13513] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 312.903949][T13513] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 312.924568][ T42] audit: type=1400 audit(1782344718.532:1072): avc: denied { write } for pid=13511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.935427][ T42] audit: type=1326 audit(1782344718.542:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.2122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510959ce59 code=0x7ffc0000 [ 312.944398][ T42] audit: type=1326 audit(1782344718.552:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.1.2122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510959ce59 code=0x7ffc0000 [ 313.062317][ T5442] 8021q: adding VLAN 0 to HW filter on device eth17 [ 313.170863][ T5808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.281536][ T5808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.392564][ T5808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.528919][T13438] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 313.540729][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.545166][T13438] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 313.551918][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.557066][T13438] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 313.566813][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.571216][T13438] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 313.577940][T13438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.708889][T13440] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.713826][T13440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 313.717355][T13440] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 313.721435][T13440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.724965][ T5808] bridge_slave_1: left allmulticast mode [ 313.727560][ T5808] bridge_slave_1: left promiscuous mode [ 313.730115][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.734971][ T5808] bridge_slave_0: left allmulticast mode [ 313.737590][ T5808] bridge_slave_0: left promiscuous mode [ 313.740016][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.746569][ T5808] dvmrp0: left allmulticast mode [ 313.844320][ T5808] gretap0 (unregistering): left promiscuous mode [ 313.873591][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.878936][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.882684][ T5808] bond0 (unregistering): Released all slaves [ 313.889853][ T5808] bond1 (unregistering): Released all slaves [ 313.899716][ T5808] bond2 (unregistering): Released all slaves [ 313.911487][T13440] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 313.916051][T13440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.918940][T13440] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 313.922956][T13440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.975327][T13438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.005217][T13438] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.012247][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.014500][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.022098][T13440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.034053][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.036353][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.072261][T13440] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.104709][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.107499][ T6173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.111572][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.114305][ T6173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.244711][ T5808] veth0_to_team: left promiscuous mode [ 314.251941][ T5808] hsr_slave_0: left promiscuous mode [ 314.254304][ T5808] hsr_slave_1: left promiscuous mode [ 314.256712][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.259623][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.262399][ T5808] batman_adv: batadv0: Interface deactivated: dummy0 [ 314.264878][ T5808] batman_adv: batadv0: Removing interface: dummy0 [ 314.279084][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 314.279095][ T42] audit: type=1400 audit(1782344719.892:1093): avc: denied { write } for pid=13595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.324924][ T42] audit: type=1400 audit(1782344719.932:1094): avc: denied { write } for pid=13598 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.381643][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 314.388905][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 314.408172][ T42] audit: type=1400 audit(1782344720.022:1095): avc: denied { write } for pid=13600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.461394][ T42] audit: type=1400 audit(1782344720.072:1096): avc: denied { write } for pid=13603 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.554218][T13438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.616309][ T42] audit: type=1400 audit(1782344720.232:1097): avc: denied { write } for pid=13616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.627652][ T5739] Bluetooth: hci5: command tx timeout [ 314.630078][ T5091] Bluetooth: hci4: command tx timeout [ 314.646099][T13440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.683534][ T42] audit: type=1400 audit(1782344720.292:1098): avc: denied { write } for pid=13622 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.756620][ T42] audit: type=1400 audit(1782344720.372:1099): avc: denied { write } for pid=13629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.779338][T13438] veth0_vlan: entered promiscuous mode [ 314.791336][ T5808] IPVS: stop unused estimator thread 0... [ 314.792201][T13438] veth1_vlan: entered promiscuous mode [ 314.821861][ T42] audit: type=1400 audit(1782344720.432:1100): avc: denied { write } for pid=13635 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.831129][T13438] veth0_macvtap: entered promiscuous mode [ 314.838002][T13438] veth1_macvtap: entered promiscuous mode [ 314.849875][T13438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.860038][T13438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.881191][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.884767][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.903618][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.908153][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.924601][ T42] audit: type=1400 audit(1782344720.532:1101): avc: denied { write } for pid=13638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.970881][T13440] veth0_vlan: entered promiscuous mode [ 314.981597][ T42] audit: type=1400 audit(1782344720.592:1102): avc: denied { write } for pid=13643 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.007014][T13440] veth1_vlan: entered promiscuous mode [ 315.010709][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.013283][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.040755][T13440] veth0_macvtap: entered promiscuous mode [ 315.050409][ T6167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.050631][T13440] veth1_macvtap: entered promiscuous mode [ 315.053720][ T6167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.079526][T13440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.087152][T13440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.094533][ T5808] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.102688][ T5808] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.113844][ T5808] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.123348][ T5808] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.171618][T13656] IPVS: Error connecting to the multicast addr [ 315.229796][ T6173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.232293][ T6173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.279944][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.283455][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.287613][T13664] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 315.290291][T13664] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 315.312109][ T5442] 8021q: adding VLAN 0 to HW filter on device eth18 [ 315.350284][T13669] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 315.352687][T13669] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 315.481788][T13687] x_tables: duplicate underflow at hook 1 [ 315.488270][ T8060] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 315.520914][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2139'. [ 315.541023][ T5442] 8021q: adding VLAN 0 to HW filter on device eth19 [ 315.571698][T13697] tipc: Enabling of bearer rejected, media not registered [ 315.649381][ T8060] usb 10-1: Using ep0 maxpacket: 32 [ 315.655875][ T8060] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 315.662151][ T8060] usb 10-1: config 0 has no interface number 0 [ 315.667268][ T8060] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 315.677986][ T8060] usb 10-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 315.687617][ T8060] usb 10-1: config 0 interface 196 has no altsetting 0 [ 315.694773][ T8060] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 315.699963][ T8060] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.703709][ T8060] usb 10-1: Product: syz [ 315.706025][ T8060] usb 10-1: Manufacturer: syz [ 315.707981][ T8060] usb 10-1: SerialNumber: syz [ 315.715062][ T8060] usb 10-1: config 0 descriptor?? [ 315.722116][T13661] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 315.735121][T13715] bond1: entered allmulticast mode [ 315.737383][T13715] vti0: entered allmulticast mode [ 315.746896][T13714] bond1: left allmulticast mode [ 315.749510][T13714] vti0: left allmulticast mode [ 315.792232][ T5442] 8021q: adding VLAN 0 to HW filter on device eth20 [ 315.961711][T13744] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 315.964867][T13744] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 315.970513][ T8060] ipheth 10-1:0.196: Unable to find endpoints [ 315.982348][ T8060] usb 10-1: USB disconnect, device number 6 [ 316.036171][T13750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2152'. [ 316.040695][ T5442] 8021q: adding VLAN 0 to HW filter on device eth21 [ 316.148797][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2155'. [ 316.152005][T13765] netlink: 'syz.6.2155': attribute type 30 has an invalid length. [ 316.154894][T13765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2155'. [ 316.257205][T13779] gtp1: entered allmulticast mode [ 316.624041][T13792] syzkaller0: entered promiscuous mode [ 316.627424][ T7133] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 316.630547][T13792] syzkaller0: entered allmulticast mode [ 316.741423][T13794] overlayfs: failed to resolve './file2': -2 [ 316.746754][T13794] qnx4: unable to read the superblock [ 316.777725][ T7133] usb 6-1: unable to get BOS descriptor or descriptor too short [ 316.780720][ T7133] usb 6-1: not running at top speed; connect to a high speed hub [ 316.784317][ T7133] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 316.788090][ T7133] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 316.791521][ T7133] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 316.795048][ T7133] usb 6-1: config 14 has no interface number 0 [ 316.797465][ T7133] usb 6-1: config 14 has no interface number 1 [ 316.799353][ T7133] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 316.802782][ T7133] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 316.807630][ T7133] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 316.811125][ T7133] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 316.814688][ T7133] usb 6-1: config 14 interface 57 has no altsetting 0 [ 316.817287][ T7133] usb 6-1: config 14 interface 228 has no altsetting 0 [ 316.822100][ T7133] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 316.826397][ T7133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.829661][ T7133] usb 6-1: Product: syz [ 316.831404][ T7133] usb 6-1: Manufacturer: syz [ 316.833229][ T7133] usb 6-1: SerialNumber: syz [ 317.185781][ T5739] Bluetooth: hci4: command tx timeout [ 317.247710][ T7133] legousbtower 6-1:14.57: interrupt endpoints not found [ 317.505690][ T5739] Bluetooth: hci5: command tx timeout [ 317.609786][ T5808] nci: nci_rx_work: unknown MT 0x5 [ 317.653639][ T7133] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 317.662389][ T7133] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 317.684615][T13809] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 317.935536][ T5839] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 318.106968][ T5839] usb 10-1: not running at top speed; connect to a high speed hub [ 318.110492][ T5839] usb 10-1: config 1 interface 0 altsetting 19 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 318.113871][ T5839] usb 10-1: config 1 interface 0 has no altsetting 0 [ 318.117950][ T5839] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.120793][ T5839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.123208][ T5839] usb 10-1: Product: syz [ 318.124477][ T5839] usb 10-1: Manufacturer: syz [ 318.126319][ T5839] usb 10-1: SerialNumber: syz [ 318.132227][T13809] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 318.214297][ T5810] usb 6-1: USB disconnect, device number 27 [ 318.221473][ T5810] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 318.449176][ T5839] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 318.454595][ T5839] usb 10-1: USB disconnect, device number 7 [ 320.539415][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.547923][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.549307][T13801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.552365][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.559347][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.572851][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.648387][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2178'. [ 320.752505][T13862] veth0_to_team: entered promiscuous mode [ 320.756486][T13862] gretap0: entered promiscuous mode [ 320.760230][T13862] debugfs: 'hsr1' already exists in 'hsr' [ 320.762652][T13862] Cannot create hsr debugfs directory [ 320.869256][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 320.869272][ T42] audit: type=1400 audit(1782344726.482:1111): avc: denied { mounton } for pid=13864 comm="syz.5.2183" path="/proc/39/task" dev="proc" ino=56602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 321.070723][ T42] audit: type=1400 audit(1782344726.682:1112): avc: denied { map } for pid=13892 comm="syz.6.2188" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 321.088473][ T42] audit: type=1400 audit(1782344726.682:1113): avc: denied { execute } for pid=13892 comm="syz.6.2188" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 321.133424][T13899] Cannot find del_set index 14804 as target [ 321.179031][T13842] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.181619][T13842] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.184153][T13842] bridge_slave_0: entered allmulticast mode [ 321.187751][T13842] bridge_slave_0: entered promiscuous mode [ 321.191752][T13842] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.194338][T13842] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.197164][T13842] bridge_slave_1: entered allmulticast mode [ 321.200312][T13842] bridge_slave_1: entered promiscuous mode [ 321.221222][T13842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.226776][T13842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.266058][T13842] team0: Port device team_slave_0 added [ 321.271401][T13842] team0: Port device team_slave_1 added [ 321.325034][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.343414][T13842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.350026][T13842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.361837][T13842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.366499][T13842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.369319][T13842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.379634][T13842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.435915][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.449197][T13842] hsr_slave_0: entered promiscuous mode [ 321.451748][T13842] hsr_slave_1: entered promiscuous mode [ 321.505015][T13916] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 321.582923][ T42] audit: type=1400 audit(1782344727.192:1114): avc: denied { write } for pid=13917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.627122][T13924] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2196'. [ 321.628604][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.638702][T13928] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2196'. [ 321.668608][ T42] audit: type=1400 audit(1782344727.282:1115): avc: denied { write } for pid=13926 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.713623][T13932] IPVS: Unknown mcast interface: vcan0 [ 321.738482][ T12] netdevsim netdevsim3 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.819886][ T5565] nci: nci_rx_work: unknown MT 0x5 [ 321.861113][ T42] audit: type=1400 audit(1782344727.472:1116): avc: denied { write } for pid=13942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.927613][ T42] audit: type=1400 audit(1782344727.532:1117): avc: denied { write } for pid=13948 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.987464][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.009892][T13947] syzkaller0: entered promiscuous mode [ 322.012259][T13947] syzkaller0: entered allmulticast mode [ 322.019370][ T42] audit: type=1400 audit(1782344727.632:1118): avc: denied { write } for pid=13956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.080174][ T42] audit: type=1400 audit(1782344727.692:1119): avc: denied { write } for pid=13960 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.111891][ T12] bridge_slave_1: left allmulticast mode [ 322.113734][ T12] bridge_slave_1: left promiscuous mode [ 322.115889][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.120882][ T12] ¾x9ÿ: left allmulticast mode [ 322.123300][ T12] ¾x9ÿ: left promiscuous mode [ 322.126041][ T12] bridge0: port 1(1¾x9ÿ) entered disabled state [ 322.178608][ T42] audit: type=1400 audit(1782344727.792:1120): avc: denied { write } for pid=13966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.193880][ T5880] SELinux: failure in sel_netif_sid_slow(), invalid network interface (149) [ 322.284953][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.291152][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.296155][ T12] bond0 (unregistering): Released all slaves [ 322.302968][ T12] bond1 (unregistering): Released all slaves [ 322.319879][T13976] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 322.336691][ T12] bond2 (unregistering): (slave veth3): Releasing active interface [ 322.341787][ T12] bond2 (unregistering): Released all slaves [ 322.625863][ T5091] Bluetooth: hci1: command tx timeout [ 324.705898][ T5091] Bluetooth: hci1: command tx timeout [ 324.744518][T13937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.794177][ T12] hsr_slave_0: left promiscuous mode [ 324.798640][ T12] hsr_slave_1: left promiscuous mode [ 324.800638][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.803002][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.806182][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.809018][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.826740][ T12] veth1_macvtap: left promiscuous mode [ 324.828553][ T12] veth0_macvtap: left promiscuous mode [ 324.830293][ T12] veth1_vlan: left promiscuous mode [ 324.832109][ T12] veth0_vlan: left promiscuous mode [ 324.862705][T14042] CIFS: VFS: UNC: missing share name [ 324.865153][T14042] CIFS: VFS: Malformed UNC in devname [ 324.922859][T14049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2214'. [ 325.029198][ T12] team0 (unregistering): Port device team_slave_1 removed [ 325.053977][ T12] team0 (unregistering): Port device team_slave_0 removed [ 325.119217][T13842] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 325.132319][T13842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.138262][T13842] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 325.145027][T13842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.225419][T13842] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 325.235202][T13842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.240654][T13842] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 325.245533][T13842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.786046][ T5091] Bluetooth: hci1: command tx timeout [ 327.093461][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 327.160799][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 327.160817][ T42] audit: type=1400 audit(1782344732.772:1137): avc: denied { write } for pid=14101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.177602][T13842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.190797][T13842] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.196557][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.198855][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.205512][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.207784][ T5959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.210019][T14110] ip6t_srh: unknown srh invflags 4000 [ 327.236701][ T42] audit: type=1400 audit(1782344732.852:1138): avc: denied { write } for pid=14108 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.265373][ T42] audit: type=1400 audit(1782344732.872:1139): avc: denied { lock } for pid=14112 comm="syz.6.2225" path="socket:[58448]" dev="sockfs" ino=58448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 327.294795][ T12] IPVS: stop unused estimator thread 0... [ 327.419938][T14134] bond1: entered allmulticast mode [ 327.422055][T14134] vti0: entered allmulticast mode [ 327.430063][T14132] bond1: left allmulticast mode [ 327.432072][T14132] vti0: left allmulticast mode [ 327.432711][ T42] audit: type=1400 audit(1782344733.042:1140): avc: denied { write } for pid=14129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.487717][T14146] openvswitch: netlink: Flow key attr not present in new flow. [ 327.491145][ T42] audit: type=1400 audit(1782344733.102:1141): avc: denied { getopt } for pid=14144 comm="syz.5.2232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 327.523353][T14155] FAULT_INJECTION: forcing a failure. [ 327.523353][T14155] name failslab, interval 1, probability 0, space 0, times 0 [ 327.530047][T14155] CPU: 2 UID: 0 PID: 14155 Comm: syz.1.2234 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.530074][T14155] Tainted: [L]=SOFTLOCKUP [ 327.530081][T14155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 327.530092][T14155] Call Trace: [ 327.530098][T14155] [ 327.530106][T14155] dump_stack_lvl+0x100/0x190 [ 327.530134][T14155] should_fail_ex.cold+0x5/0xa [ 327.530160][T14155] should_failslab+0xc2/0x120 [ 327.530186][T14155] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 327.530208][T14155] ? __d_alloc+0x35/0xa50 [ 327.530231][T14155] __d_alloc+0x35/0xa50 [ 327.530253][T14155] d_alloc+0x4a/0x1e0 [ 327.530278][T14155] lookup_one_qstr_excl+0x171/0x250 [ 327.530301][T14155] start_dirop+0x59/0xb0 [ 327.530325][T14155] simple_start_creating+0xf9/0x110 [ 327.530344][T14155] ? __pfx_simple_start_creating+0x10/0x10 [ 327.530366][T14155] ? mntput+0x70/0xa0 [ 327.530384][T14155] ? simple_pin_fs+0xa3/0x190 [ 327.530412][T14155] debugfs_start_creating.part.0+0x82/0x170 [ 327.530439][T14155] __debugfs_create_file+0xb3/0x4f0 [ 327.530465][T14155] debugfs_create_file_full+0x41/0x60 [ 327.530489][T14155] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 327.530502][T14155] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 327.530523][T14155] ? kasan_save_track+0x14/0x30 [ 327.530535][T14155] ? __kasan_kmalloc+0xaa/0xb0 [ 327.530548][T14155] ? lockdep_init_map_type+0x5c/0x250 [ 327.530564][T14155] preinit_net.part.0+0x43b/0x920 [ 327.530581][T14155] copy_net_ns+0x339/0x7c0 [ 327.530599][T14155] create_new_namespaces+0x3ea/0xac0 [ 327.530622][T14155] unshare_nsproxy_namespaces+0xf2/0x220 [ 327.530646][T14155] ksys_unshare+0x438/0xab0 [ 327.530676][T14155] ? __pfx_ksys_unshare+0x10/0x10 [ 327.530701][T14155] ? ksys_write+0x1ac/0x250 [ 327.530732][T14155] __x64_sys_unshare+0x31/0x40 [ 327.530756][T14155] do_syscall_64+0x115/0x870 [ 327.530771][T14155] ? clear_bhb_loop+0x40/0x90 [ 327.530791][T14155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.530807][T14155] RIP: 0033:0x7f510959ce59 [ 327.530821][T14155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.530838][T14155] RSP: 002b:00007f51077f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 327.530857][T14155] RAX: ffffffffffffffda RBX: 00007f5109815fa0 RCX: 00007f510959ce59 [ 327.530870][T14155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 327.530881][T14155] RBP: 00007f51077f6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.530891][T14155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.530900][T14155] R13: 00007f5109816038 R14: 00007f5109815fa0 R15: 00007ffc91a39848 [ 327.530925][T14155] [ 327.532025][ T42] audit: type=1400 audit(1782344733.142:1142): avc: denied { write } for pid=14149 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.875554][ T5091] Bluetooth: hci1: command tx timeout [ 329.357076][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 329.369064][T13842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.386105][T14161] gtp0: entered allmulticast mode [ 329.412742][ T42] audit: type=1400 audit(1782344735.022:1143): avc: denied { write } for pid=14159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.451797][ T42] audit: type=1400 audit(1782344735.062:1144): avc: denied { write } for pid=14166 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.534031][T14178] IPVS: Unknown mcast interface: vcan0 [ 329.560091][T13842] veth0_vlan: entered promiscuous mode [ 329.567909][ T42] audit: type=1400 audit(1782344735.172:1145): avc: denied { write } for pid=14179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.571492][T13842] veth1_vlan: entered promiscuous mode [ 329.595404][T13842] veth0_macvtap: entered promiscuous mode [ 329.603655][T13842] veth1_macvtap: entered promiscuous mode [ 329.634750][ T42] audit: type=1400 audit(1782344735.242:1146): avc: denied { write } for pid=14189 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.644520][T13842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.662853][T13842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.678316][ T5808] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.689907][ T5808] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.700188][ T5808] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.703660][ T5808] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.765610][T14198] syz_tun: entered allmulticast mode [ 329.768867][T14199] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 329.775387][T14199] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 329.793711][T14198] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 329.796939][T14198] mroute: pending queue full, dropping entries [ 329.813308][T14197] syz_tun: left allmulticast mode [ 329.841963][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.849678][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.885238][ T6173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.885848][T14208] nft_compat: unsupported protocol 0 [ 329.888952][ T6173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.898372][T14208] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2247'. [ 329.901833][T14212] ptrace attach of "/syz-executor exec"[13440] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸ [ 330.055101][T14232] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 330.096581][T14232] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 330.101021][T14232] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2252'. [ 330.129647][T14236] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 330.132115][T14236] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 330.156843][ T8374] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 330.260552][T14256] tcf_pedit_act: 7 callbacks suppressed [ 330.260568][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.268272][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.271073][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.273270][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.275636][ T7200] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 330.278047][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.281706][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.284461][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.286944][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.289266][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.291539][T14256] tc action pedit offset must be on 32 bit boundaries [ 330.293702][T14256] 0: reclassify loop, rule prio 0, protocol 800 [ 330.319204][ T8374] usb 10-1: Using ep0 maxpacket: 32 [ 330.322158][ T8374] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 330.326937][ T8374] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 330.335097][ T8374] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 330.341205][ T8374] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 330.356289][ T8374] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 330.359209][ T8374] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.361655][ T8374] usb 10-1: Product: syz [ 330.362995][ T8374] usb 10-1: Manufacturer: syz [ 330.368287][ T8374] usb 10-1: SerialNumber: syz [ 330.373342][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 330.390050][ T8374] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input17 [ 330.425733][ T7200] usb 13-1: device descriptor read/64, error -71 [ 330.437010][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 330.516046][T14277] bond1: entered allmulticast mode [ 330.525212][T14277] vti0: entered allmulticast mode [ 330.541534][T14278] bond1 (unregistering): Released all slaves [ 330.554441][T14276] bond1: left allmulticast mode [ 330.556548][T14276] vti0: left allmulticast mode [ 330.595703][ T8374] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 330.600426][ T8374] (id 0x00) [ 330.604354][T14285] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 330.606883][T14285] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 330.621081][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 330.656538][ T8374] rc_core: IR keymap rc-imon-pad not found [ 330.658474][ T8374] Registered IR keymap rc-empty [ 330.660096][ T8374] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 330.663391][ T8374] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 330.675659][ T7200] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 330.752648][T14296] gtp1: entered allmulticast mode [ 330.795400][ T8374] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 330.802858][ T8374] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input18 [ 330.815051][ T8374] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:8> initialized [ 330.826916][ T7200] usb 13-1: device descriptor read/64, error -71 [ 330.875414][T14299] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 330.877867][T14299] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 330.949241][ T7200] usb usb13-port1: attempt power cycle [ 330.972834][T14302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2272'. [ 330.979040][T14302] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14302 comm=syz.1.2272 [ 330.981545][ T5838] usb 10-1: USB disconnect, device number 8 [ 331.285734][ T7200] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 331.307330][ T7200] usb 13-1: device descriptor read/8, error -71 [ 331.473686][T14324] IPVS: Error connecting to the multicast addr [ 331.526813][T14330] loop4: detected capacity change from 0 to 2640 [ 331.534242][ T7438] buffer_io_error: 8 callbacks suppressed [ 331.534256][ T7438] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.548469][T14330] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.552119][ T7438] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.556360][ T7438] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.559026][T14330] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.563854][T14330] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.567300][ T7438] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.570779][ T7438] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.574023][T14330] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.575669][ T7200] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 331.578115][T14330] Buffer I/O error on dev loop4, logical block 0, async page read [ 331.582820][T14330] ldm_validate_partition_table(): Disk read failed. [ 331.587580][T14330] Dev loop4: unable to read RDB block 0 [ 331.590369][T14330] loop4: unable to read partition table [ 331.597805][T14330] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 331.599440][ T7200] usb 13-1: device descriptor read/8, error -71 [ 331.673621][T14343] syzkaller0: entered promiscuous mode [ 331.675921][T14343] syzkaller0: entered allmulticast mode [ 331.716632][ T7200] usb usb13-port1: unable to enumerate USB device [ 332.135244][T14395] syz_tun: entered allmulticast mode [ 332.137162][T14395] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 332.137184][T14395] mroute: pending queue full, dropping entries [ 332.139037][T14394] syz_tun: left allmulticast mode [ 332.175716][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 332.175736][ T42] audit: type=1400 audit(1782344737.782:1174): avc: denied { write } for pid=14397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.214296][T14406] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 332.224962][T14406] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 332.255545][ T42] audit: type=1400 audit(1782344737.852:1175): avc: denied { write } for pid=14403 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.406577][T14429] gtp1: entered allmulticast mode [ 332.410385][ T42] audit: type=1400 audit(1782344738.022:1176): avc: denied { write } for pid=14426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.460193][ T42] audit: type=1400 audit(1782344738.072:1177): avc: denied { write } for pid=14433 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.543115][ T42] audit: type=1400 audit(1782344738.152:1178): avc: denied { write } for pid=14435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.562182][T14441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2300'. [ 332.593280][ T42] audit: type=1400 audit(1782344738.202:1179): avc: denied { write } for pid=14442 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.601905][T14444] tipc: Started in network mode [ 332.601932][T14444] tipc: Node identity 9a880caf7ed1, cluster identity 4711 [ 332.602337][T14444] tipc: Enabled bearer , priority 10 [ 332.615555][ T7200] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 332.685574][ T5732] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 332.739010][T14454] IPVS: Unknown mcast interface: vcan0 [ 332.776030][ T7200] usb 11-1: Using ep0 maxpacket: 32 [ 332.779589][ T7200] usb 11-1: config 0 has an invalid interface number: 196 but max is 0 [ 332.783078][ T7200] usb 11-1: config 0 has no interface number 0 [ 332.784565][T14456] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 332.785436][ T7200] usb 11-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 332.788595][T14456] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 332.795863][ T7200] usb 11-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 332.799588][ T7200] usb 11-1: config 0 interface 196 has no altsetting 0 [ 332.804300][ T7200] usb 11-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 332.807899][ T7200] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.811021][ T7200] usb 11-1: Product: syz [ 332.812771][ T7200] usb 11-1: Manufacturer: syz [ 332.814816][ T7200] usb 11-1: SerialNumber: syz [ 332.819315][ T7200] usb 11-1: config 0 descriptor?? [ 332.826740][T14425] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 332.845754][ T5732] usb 10-1: Using ep0 maxpacket: 8 [ 332.849301][ T42] audit: type=1400 audit(1782344738.462:1180): avc: denied { ioctl } for pid=14457 comm="syz.1.2307" path="socket:[57784]" dev="sockfs" ino=57784 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 332.852549][T14458] input: syz0 as /devices/virtual/input/input19 [ 332.859633][ T5732] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.859659][ T5732] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.871805][ T42] audit: type=1400 audit(1782344738.482:1181): avc: denied { bind } for pid=14457 comm="syz.1.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.879891][ T5732] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 332.884513][ T42] audit: type=1400 audit(1782344738.482:1182): avc: denied { write } for pid=14457 comm="syz.1.2307" path="socket:[58890]" dev="sockfs" ino=58890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.894485][ T5732] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 332.899223][ T5732] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 332.903210][ T5732] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.913250][ T5732] hub 10-1:1.0: bad descriptor, ignoring hub [ 332.916331][ T5732] hub 10-1:1.0: probe with driver hub failed with error -5 [ 332.919674][ T5732] cdc_wdm 10-1:1.0: skipping garbage [ 332.921858][ T5732] cdc_wdm 10-1:1.0: skipping garbage [ 332.924009][ T5732] cdc_wdm 10-1:1.0: skipping garbage [ 332.927670][ T5732] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 332.934127][ T5732] cdc_wdm 10-1:1.0: Unknown control protocol [ 332.948823][T14460] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 332.951393][T14460] syzkaller1: Linktype set failed because interface is up [ 332.976769][ T5732] syzkaller1: tun_net_xmit 90 [ 333.075258][ T7200] ipheth 11-1:0.196: Unable to find endpoints [ 333.088280][ T7200] usb 11-1: USB disconnect, device number 4 [ 333.130259][T14466] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 333.133268][T14466] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 333.324443][ T42] audit: type=1400 audit(1782344738.932:1183): avc: denied { write } for pid=14473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.520955][T14487] netlink: 'syz.1.2314': attribute type 11 has an invalid length. [ 333.552674][T14432] usb 10-1: reset high-speed USB device number 9 using dummy_hcd [ 333.567914][T14493] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 333.570348][T14493] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 333.595676][ T7133] tipc: Node number set to 3831041199 [ 333.699345][T14503] syzkaller0: entered promiscuous mode [ 333.701607][T14503] syzkaller0: entered allmulticast mode [ 333.719847][T14432] usb 10-1: device firmware changed [ 333.723718][T14432] cdc_wdm 10-1:1.0: Error autopm - -16 [ 333.726507][ T5810] usb 10-1: USB disconnect, device number 9 [ 333.876432][ T5810] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 333.891266][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2321'. [ 333.926952][T14508] gtp0: entered allmulticast mode [ 333.995771][T14506] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2321'. [ 333.998718][T14506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2321'. [ 334.002519][T14506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=14506 comm=syz.6.2321 [ 334.025543][ T5810] usb 10-1: Using ep0 maxpacket: 8 [ 334.028676][ T5810] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.031816][ T5810] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 334.034885][ T5810] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 334.038843][ T5810] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 334.041631][ T5810] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.047236][ T5810] hub 10-1:1.0: bad descriptor, ignoring hub [ 334.049185][ T5810] hub 10-1:1.0: probe with driver hub failed with error -5 [ 334.051822][ T5810] cdc_wdm 10-1:1.0: skipping garbage [ 334.053547][ T5810] cdc_wdm 10-1:1.0: skipping garbage [ 334.055372][ T5810] cdc_wdm 10-1:1.0: skipping garbage [ 334.058045][ T5810] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 334.113254][T14515] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2325'. [ 334.356648][ T5810] usb 10-1: USB disconnect, device number 10 [ 334.447693][T14536] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 336.796127][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 336.807533][T14572] tcf_pedit_act: 7 callbacks suppressed [ 336.807543][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.814108][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.816885][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.819428][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.822268][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.824989][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.827954][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.830502][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.832946][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.835098][T14572] tc action pedit offset must be on 32 bit boundaries [ 336.837447][T14572] 0: reclassify loop, rule prio 0, protocol 800 [ 336.878020][T14575] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 336.993493][T14592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=14592 comm=syz.6.2343 [ 337.009831][T14589] syzkaller0: entered promiscuous mode [ 337.011951][T14589] syzkaller0: entered allmulticast mode [ 339.886357][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 339.886374][ T42] audit: type=1400 audit(1782344745.502:1191): avc: denied { name_bind } for pid=14644 comm="syz.8.2356" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 339.907143][ T42] audit: type=1400 audit(1782344745.502:1192): avc: denied { node_bind } for pid=14644 comm="syz.8.2356" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 339.921268][T14648] syzkaller0: entered promiscuous mode [ 339.923558][T14648] syzkaller0: entered allmulticast mode [ 339.927217][ T2233] block nbd5: Possible stuck request ffff88802924e000: control (read@0,1024B). Runtime 210 seconds [ 339.931570][ T2233] block nbd5: Possible stuck request ffff88802924e1c0: control (read@1024,1024B). Runtime 210 seconds [ 339.936961][ T2233] block nbd5: Possible stuck request ffff88802924e380: control (read@2048,1024B). Runtime 210 seconds [ 339.941049][ T2233] block nbd5: Possible stuck request ffff88802924e540: control (read@3072,1024B). Runtime 210 seconds [ 339.945283][T14651] syzkaller1: entered promiscuous mode [ 339.948636][T14651] syzkaller1: entered allmulticast mode [ 339.954867][T14653] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2359'. [ 340.041560][T14659] gtp0: entered allmulticast mode [ 340.268145][T14669] syz_tun: entered allmulticast mode [ 340.271606][T14669] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 340.274981][T14669] mroute: pending queue full, dropping entries [ 340.279132][T14668] syz_tun: left allmulticast mode [ 340.820622][T14684] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 340.822736][T14684] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 340.833749][T14684] vhci_hcd vhci_hcd.0: Device attached [ 340.837604][T14685] usbip_core: unknown command [ 340.839588][T14685] vhci_hcd: unknown pdu 4093706240 [ 340.841689][T14685] usbip_core: unknown command [ 340.858930][ T5808] vhci_hcd vhci_hcd.5: stop threads [ 340.860970][ T5808] vhci_hcd vhci_hcd.5: release socket [ 340.863071][ T5808] vhci_hcd vhci_hcd.5: disconnect device [ 341.055447][T14688] FAULT_INJECTION: forcing a failure. [ 341.055447][T14688] name failslab, interval 1, probability 0, space 0, times 0 [ 341.059608][T14688] CPU: 1 UID: 0 PID: 14688 Comm: syz.6.2369 Tainted: G L syzkaller #0 PREEMPT(full) [ 341.059627][T14688] Tainted: [L]=SOFTLOCKUP [ 341.059631][T14688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 341.059638][T14688] Call Trace: [ 341.059644][T14688] [ 341.059649][T14688] dump_stack_lvl+0x100/0x190 [ 341.059668][T14688] should_fail_ex.cold+0x5/0xa [ 341.059684][T14688] should_failslab+0xc2/0x120 [ 341.059699][T14688] __kmalloc_cache_noprof+0x91/0x6c0 [ 341.059716][T14688] ? sctp_has_association+0xdd/0x270 [ 341.059730][T14688] ? sctp_association_new+0xbb/0x2990 [ 341.059748][T14688] sctp_association_new+0xbb/0x2990 [ 341.059767][T14688] sctp_connect_new_asoc+0x1a8/0x770 [ 341.059785][T14688] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 341.059802][T14688] ? selinux_sctp_bind_connect+0x112/0x2a0 [ 341.059820][T14688] sctp_sendmsg+0x1743/0x22e0 [ 341.059840][T14688] ? __pfx_sctp_sendmsg+0x10/0x10 [ 341.059858][T14688] ? __pfx_sock_has_perm+0x10/0x10 [ 341.059875][T14688] ? __pfx_sctp_sendmsg+0x10/0x10 [ 341.059892][T14688] inet_sendmsg+0x11c/0x140 [ 341.059907][T14688] __sys_sendto+0x453/0x4e0 [ 341.059919][T14688] ? __pfx_inet_sendmsg+0x10/0x10 [ 341.059933][T14688] ? __pfx___sys_sendto+0x10/0x10 [ 341.059950][T14688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 341.059968][T14688] ? ksys_write+0x1ac/0x250 [ 341.059986][T14688] ? __pfx_ksys_write+0x10/0x10 [ 341.060009][T14688] __x64_sys_sendto+0xe0/0x1c0 [ 341.060022][T14688] ? do_syscall_64+0x90/0x870 [ 341.060033][T14688] ? lockdep_hardirqs_on+0x78/0x100 [ 341.060065][T14688] do_syscall_64+0x115/0x870 [ 341.060080][T14688] ? clear_bhb_loop+0x40/0x90 [ 341.060094][T14688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.060105][T14688] RIP: 0033:0x7f4ba459ce59 [ 341.060116][T14688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.060127][T14688] RSP: 002b:00007f4ba5399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 341.060137][T14688] RAX: ffffffffffffffda RBX: 00007f4ba4815fa0 RCX: 00007f4ba459ce59 [ 341.060144][T14688] RDX: 0000000000034000 RSI: 0000200000000140 RDI: 0000000000000003 [ 341.060151][T14688] RBP: 00007f4ba5399090 R08: 0000200000000040 R09: 000000000000001c [ 341.060157][T14688] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 341.060163][T14688] R13: 00007f4ba4816038 R14: 00007f4ba4815fa0 R15: 00007fff4c780be8 [ 341.060182][T14688] [ 342.610377][T14703] syzkaller0: left promiscuous mode [ 342.612150][T14703] syzkaller0: left allmulticast mode [ 342.614568][ T42] audit: type=1400 audit(1782344748.222:1193): avc: denied { write } for pid=14699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.684011][ T42] audit: type=1400 audit(1782344748.292:1194): avc: denied { write } for pid=14708 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.775601][ T42] audit: type=1400 audit(1782344748.392:1195): avc: denied { write } for pid=14721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.825217][ T42] audit: type=1400 audit(1782344748.432:1196): avc: denied { write } for pid=14729 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.919366][ T42] audit: type=1400 audit(1782344748.532:1197): avc: denied { write } for pid=14740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.958032][T14749] bond1: entered allmulticast mode [ 342.960345][T14749] vti0: entered allmulticast mode [ 342.963905][T14748] bond1: left allmulticast mode [ 342.982715][T14748] vti0: left allmulticast mode [ 343.011282][ T42] audit: type=1400 audit(1782344748.622:1198): avc: denied { write } for pid=14750 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.035006][T14758] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2389'. [ 343.112566][ T42] audit: type=1400 audit(1782344748.722:1199): avc: denied { write } for pid=14763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.192275][ T42] audit: type=1400 audit(1782344748.802:1200): avc: denied { write } for pid=14776 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.618562][ T42] audit: type=1400 audit(1782344751.232:1201): avc: denied { write } for pid=14861 comm="syz.1.2417" path="socket:[59228]" dev="sockfs" ino=59228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 346.400623][T14803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.483124][T14893] Context (ID=0x0) not attached to queue pair (handle=0x1:0x9) [ 346.781214][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2436'. [ 346.796181][T14922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.810040][T14922] macvlan2: entered promiscuous mode [ 346.811745][T14922] macvlan2: entered allmulticast mode [ 346.814033][T14922] bond1: entered promiscuous mode [ 346.816354][T14922] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 346.819773][T14922] bond1: left promiscuous mode [ 347.245548][ T7200] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 347.405726][ T7200] usb 6-1: Using ep0 maxpacket: 32 [ 347.412448][ T7200] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 347.415694][ T7200] usb 6-1: config 0 has no interface number 0 [ 347.417629][ T7200] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 347.420856][ T7200] usb 6-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 347.424152][ T7200] usb 6-1: config 0 interface 196 has no altsetting 0 [ 347.431272][ T7200] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 347.434176][ T7200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.436831][ T7200] usb 6-1: Product: syz [ 347.438198][ T7200] usb 6-1: Manufacturer: syz [ 347.439736][ T7200] usb 6-1: SerialNumber: syz [ 347.443092][ T7200] usb 6-1: config 0 descriptor?? [ 347.445806][T14944] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 348.974815][T14950] syzkaller1: entered promiscuous mode [ 348.976661][T14950] syzkaller1: entered allmulticast mode [ 349.053414][T14957] gtp0: entered allmulticast mode [ 350.034740][ T7200] ipheth 6-1:0.196: Unable to find endpoints [ 350.047045][ T7200] usb 6-1: USB disconnect, device number 28 [ 350.415641][ T7200] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 350.566744][ T7200] usb 6-1: Using ep0 maxpacket: 32 [ 350.570028][ T7200] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 350.572663][ T7200] usb 6-1: config 0 has no interface number 0 [ 350.574613][ T7200] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 350.577968][ T7200] usb 6-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 350.581353][ T7200] usb 6-1: config 0 interface 196 has no altsetting 0 [ 350.585104][ T7200] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 350.588084][ T7200] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.590599][ T7200] usb 6-1: Product: syz [ 350.591949][ T7200] usb 6-1: Manufacturer: syz [ 350.593433][ T7200] usb 6-1: SerialNumber: syz [ 350.597011][ T7200] usb 6-1: config 0 descriptor?? [ 350.599259][T14982] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 351.168573][ T42] audit: type=1400 audit(1782344756.782:1202): avc: denied { read } for pid=14985 comm="syz.8.2455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 351.174958][ T42] audit: type=1400 audit(1782344756.782:1203): avc: denied { mounton } for pid=14988 comm="syz.6.2456" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 351.222920][T14991] new mount options do not match the existing superblock, will be ignored [ 351.232494][T14991] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 351.302778][T14999] program syz.5.2460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.308736][T14999] netlink: 'syz.5.2460': attribute type 1 has an invalid length. [ 351.328722][T14999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.334310][T14991] syzkaller0: entered promiscuous mode [ 351.336796][T14991] syzkaller0: entered allmulticast mode [ 351.449060][T15010] syzkaller0: left promiscuous mode [ 351.450851][T15010] syzkaller0: left allmulticast mode [ 351.493888][T15014] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2466'. [ 351.513978][T15016] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 351.524539][T15016] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 351.527727][T15016] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 351.584543][T15022] EXT4-fs (nbd6): unable to read superblock [ 351.798289][T15044] gtp0: entered allmulticast mode [ 352.040686][ T42] audit: type=1404 audit(1782344757.652:1204): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 352.086960][T15053] bond2: invalid ARP target 0.0.0.0 specified for addition [ 352.089913][T15053] bond2: option arp_ip_target: invalid value (0) [ 352.094049][T15053] bond2 (unregistering): Released all slaves [ 352.116551][ T42] audit: type=1400 audit(2000000000.040:1205): avc: denied { ioctl } for pid=15050 comm="syz.6.2480" path="/dev/raw-gadget" dev="devtmpfs" ino=850 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 352.125245][ T42] audit: type=1400 audit(2000000000.040:1206): avc: denied { create } for pid=15050 comm="syz.6.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 352.177925][ T42] audit: type=1400 audit(2000000000.100:1207): avc: denied { recv } for pid=5655 comm="syz-executor" saddr=127.0.0.1 src=39484 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 352.189170][ T42] audit: type=1400 audit(2000000000.100:1208): avc: denied { read write } for pid=13842 comm="syz-executor" name="loop8" dev="devtmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 352.204663][ T42] audit: type=1400 audit(2000000000.120:1209): avc: denied { read } for pid=15055 comm="syz.8.2482" dev="nsfs" ino=4026532875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 352.218884][ T42] audit: type=1400 audit(2000000000.130:1210): avc: denied { name_bind } for pid=15055 comm="syz.8.2482" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 352.235866][ T42] audit: type=1400 audit(2000000000.150:1211): avc: denied { recv } for pid=15055 comm="syz.8.2482" saddr=::1 daddr=::1 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 352.697894][T15064] syzkaller0: entered promiscuous mode [ 352.700150][T15064] syzkaller0: entered allmulticast mode [ 352.745434][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2487'. [ 353.082698][ T7200] ipheth 6-1:0.196: Unable to find endpoints [ 353.087599][ T7200] usb 6-1: USB disconnect, device number 29 [ 356.109190][ T5140] udevd[5140]: worker [5743] /devices/virtual/block/nbd5 timeout; kill it [ 356.112414][ T5140] udevd[5140]: seq 13329 '/devices/virtual/block/nbd5' killed [ 359.107050][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 359.107071][ T42] audit: type=1400 audit(2000000007.029:1241): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 359.746373][ T42] audit: type=1400 audit(2000000007.669:1242): avc: denied { recv } for pid=5970 comm="kworker/u33:25" saddr=127.0.0.1 src=39484 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 363.586434][ T42] audit: type=1400 audit(2000000011.509:1243): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 367.435977][ T42] audit: type=1400 audit(2000000015.359:1244): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=39484 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 369.346193][ T42] audit: type=1400 audit(2000000017.269:1245): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 369.986126][ T1305] block nbd5: Possible stuck request ffff88802924e000: control (read@0,1024B). Runtime 240 seconds [ 369.989569][ T1305] block nbd5: Possible stuck request ffff88802924e1c0: control (read@1024,1024B). Runtime 240 seconds [ 369.992966][ T1305] block nbd5: Possible stuck request ffff88802924e380: control (read@2048,1024B). Runtime 240 seconds [ 369.996574][ T1305] block nbd5: Possible stuck request ffff88802924e540: control (read@3072,1024B). Runtime 240 seconds [ 371.266396][ T42] audit: type=1400 audit(2000000019.189:1246): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 371.906585][ T42] audit: type=1400 audit(2000000019.829:1247): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 373.187650][ T42] audit: type=1400 audit(2000000021.109:1248): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 373.491080][ T42] audit: type=1400 audit(2000000021.409:1249): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 374.892877][ T42] audit: type=1400 audit(2000000022.809:1250): avc: denied { recv } for pid=6165 comm="kworker/u33:46" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 377.666751][ T42] audit: type=1400 audit(2000000025.589:1251): avc: denied { egress } for pid=0 comm="swapper/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 377.890820][ T42] audit: type=1400 audit(2000000025.809:1252): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 382.786230][ T42] audit: type=1400 audit(2000000030.709:1253): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=39484 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 383.437383][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.890729][ T42] audit: type=1400 audit(2000000031.809:1254): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 384.002695][ T42] audit: type=1400 audit(2000000031.919:1255): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 391.747670][ T42] audit: type=1400 audit(2000000039.669:1256): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 393.668352][ T42] audit: type=1400 audit(2000000041.589:1257): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 395.890231][ T42] audit: type=1400 audit(2000000043.809:1258): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 397.014897][ T42] audit: type=1400 audit(2000000044.929:1259): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 400.068237][ T1305] block nbd5: Possible stuck request ffff88802924e000: control (read@0,1024B). Runtime 270 seconds [ 400.071768][ T1305] block nbd5: Possible stuck request ffff88802924e1c0: control (read@1024,1024B). Runtime 270 seconds [ 400.075158][ T1305] block nbd5: Possible stuck request ffff88802924e380: control (read@2048,1024B). Runtime 270 seconds [ 400.078677][ T1305] block nbd5: Possible stuck request ffff88802924e540: control (read@3072,1024B). Runtime 270 seconds [ 402.627356][ T42] audit: type=1400 audit(2000000050.549:1260): avc: denied { egress } for pid=0 comm="swapper/3" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 403.907649][ T42] audit: type=1400 audit(2000000051.829:1261): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 405.024678][ T42] audit: type=1400 audit(2000000052.939:1262): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 406.525963][ T42] audit: type=1400 audit(2000000054.449:1263): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 407.889932][ T42] audit: type=1400 audit(2000000055.809:1264): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 409.027674][ T42] audit: type=1400 audit(2000000056.949:1265): avc: denied { egress } for pid=23 comm="ksoftirqd/2" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 412.866022][ T42] audit: type=1400 audit(2000000060.789:1266): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=39484 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 419.889911][ T42] audit: type=1400 audit(2000000067.809:1267): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 422.539859][ T42] audit: type=1400 audit(2000000070.459:1268): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 424.541231][ T42] audit: type=1400 audit(2000000072.459:1269): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 427.544287][ T42] audit: type=1400 audit(2000000075.459:1270): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 429.508368][ T42] audit: type=1400 audit(2000000077.429:1271): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 429.518079][ T42] audit: type=1400 audit(2000000077.429:1272): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 430.146364][ T1305] block nbd5: Possible stuck request ffff88802924e000: control (read@0,1024B). Runtime 300 seconds [ 430.150070][ T1305] block nbd5: Possible stuck request ffff88802924e1c0: control (read@1024,1024B). Runtime 300 seconds [ 430.153638][ T1305] block nbd5: Possible stuck request ffff88802924e380: control (read@2048,1024B). Runtime 300 seconds [ 430.157931][ T1305] block nbd5: Possible stuck request ffff88802924e540: control (read@3072,1024B). Runtime 300 seconds [ 431.899712][ T42] audit: type=1400 audit(2000000079.819:1273): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 434.629199][ T42] audit: type=1400 audit(2000000082.549:1274): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 436.705704][ T64] Bluetooth: hci5: command 0x0406 tx timeout [ 436.705731][T15080] Bluetooth: hci4: command 0x0406 tx timeout [ 437.054463][ T42] audit: type=1400 audit(2000000084.969:1275): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 440.061012][ T42] audit: type=1400 audit(2000000087.979:1276): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 443.899431][ T42] audit: type=1400 audit(2000000091.819:1277): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 444.868027][ T42] audit: type=1400 audit(2000000092.789:1278): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 444.868188][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.946085][ T5744] Bluetooth: hci1: command 0x0406 tx timeout [ 447.570014][ T42] audit: type=1400 audit(2000000095.489:1279): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 449.071697][ T42] audit: type=1400 audit(2000000096.989:1280): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 455.899215][ T42] audit: type=1400 audit(2000000103.819:1281): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 460.227757][ T42] audit: type=1400 audit(2000000108.149:1282): avc: denied { egress } for pid=33 comm="ksoftirqd/3" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 460.227812][ T1305] block nbd5: Possible stuck request ffff88802924e000: control (read@0,1024B). Runtime 330 seconds [ 460.242535][ T1305] block nbd5: Possible stuck request ffff88802924e1c0: control (read@1024,1024B). Runtime 330 seconds [ 460.247331][ T1305] block nbd5: Possible stuck request ffff88802924e380: control (read@2048,1024B). Runtime 330 seconds [ 460.252221][ T1305] block nbd5: Possible stuck request ffff88802924e540: control (read@3072,1024B). Runtime 330 seconds [ 467.899495][ T42] audit: type=1400 audit(2000000115.819:1283): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 475.586449][ T42] audit: type=1400 audit(2000000123.509:1284): avc: denied { recv } for pid=33 comm="ksoftirqd/3" saddr=127.0.0.1 src=39484 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 479.899220][ T42] audit: type=1400 audit(2000000127.819:1285): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 480.706759][ T42] audit: type=1400 audit(2000000128.629:1286): avc: denied { egress } for pid=11584 comm="kworker/2:8" saddr=fe80::1c daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 490.317226][ T1305] block nbd5: Possible stuck request ffff88802924e000: control (read@0,1024B). Runtime 360 seconds [ 490.321547][ T1305] block nbd5: Possible stuck request ffff88802924e1c0: control (read@1024,1024B). Runtime 360 seconds [ 490.325440][ T1305] block nbd5: Possible stuck request ffff88802924e380: control (read@2048,1024B). Runtime 360 seconds [ 490.328832][ T1305] block nbd5: Possible stuck request ffff88802924e540: control (read@3072,1024B). Runtime 360 seconds [ 491.898752][ T42] audit: type=1400 audit(2000000139.819:1287): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 503.898590][ T42] audit: type=1400 audit(2000000151.819:1288): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 506.308033][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 515.898359][ T42] audit: type=1400 audit(2000000163.819:1289): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=47820 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 519.746127][ T43] INFO: task udevd:5743 blocked in I/O wait for more than 143 seconds. [ 519.749668][ T43] Tainted: G L syzkaller #0 [ 519.752236][ T43] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.755733][ T43] task:udevd state:D stack:23464 pid:5743 tgid:5743 ppid:5140 task_flags:0x400140 flags:0x00080002 [ 519.760200][ T43] Call Trace: [ 519.761410][ T43] [ 519.762660][ T43] __schedule+0x125c/0x6730 [ 519.764509][ T43] ? __pfx___schedule+0x10/0x10 [ 519.766629][ T43] ? find_held_lock+0x2b/0x80 [ 519.768343][ T43] ? schedule+0x2bf/0x390 [ 519.769756][ T43] schedule+0xdd/0x390 [ 519.771068][ T43] io_schedule+0x8a/0xf0 [ 519.772712][ T43] folio_wait_bit_common+0x414/0xa70 [ 519.774949][ T43] ? folio_wait_bit_common+0x2a0/0xa70 [ 519.777129][ T43] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 519.779149][ T43] ? __pfx_wake_page_function+0x10/0x10 [ 519.781069][ T43] ? __filemap_get_folio_mpol+0x369/0x1320 [ 519.783051][ T43] do_read_cache_folio+0x3bc/0x6b0 [ 519.785077][ T43] ? __pfx_blkdev_read_folio+0x10/0x10 [ 519.787140][ T43] read_part_sector+0xd1/0x370 [ 519.788920][ T43] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 519.790750][ T43] adfspart_check_POWERTEC+0x8a/0x630 [ 519.792529][ T43] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 519.794783][ T43] ? bdev_disk_changed+0x52e/0x1260 [ 519.796925][ T43] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 519.799050][ T43] bdev_disk_changed+0x7b1/0x1260 [ 519.800646][ T43] ? nbd_open+0x320/0x700 [ 519.802019][ T43] ? __pfx_bdev_disk_changed+0x10/0x10 [ 519.804059][ T43] blkdev_get_whole+0x187/0x290 [ 519.806106][ T43] bdev_open+0x2c7/0xe40 [ 519.807741][ T43] blkdev_open+0x34e/0x4f0 [ 519.809253][ T43] do_dentry_open+0x6ab/0x14d0 [ 519.810804][ T43] ? __pfx_blkdev_open+0x10/0x10 [ 519.812368][ T43] vfs_open+0x82/0x3f0 [ 519.813698][ T43] path_openat+0x2873/0x4280 [ 519.815397][ T43] ? __pfx_path_openat+0x10/0x10 [ 519.817552][ T43] do_file_open+0x20e/0x430 [ 519.819440][ T43] ? __pfx_do_file_open+0x10/0x10 [ 519.821394][ T43] ? alloc_fd+0x471/0x7a0 [ 519.823051][ T43] ? do_getname+0x191/0x390 [ 519.824786][ T43] do_sys_openat2+0x10f/0x1e0 [ 519.826698][ T43] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.828647][ T43] ? __x64_sys_recvmsg+0x1b9/0x260 [ 519.830717][ T43] __x64_sys_openat+0x12d/0x210 [ 519.832651][ T43] ? __pfx___x64_sys_openat+0x10/0x10 [ 519.834888][ T43] do_syscall_64+0x115/0x870 [ 519.836408][ T43] ? clear_bhb_loop+0x40/0x90 [ 519.838204][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.840486][ T43] RIP: 0033:0x7f7ed0ca7407 [ 519.842261][ T43] RSP: 002b:00007fff8965eb60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 519.845652][ T43] RAX: ffffffffffffffda RBX: 00007f7ed1473880 RCX: 00007f7ed0ca7407 [ 519.848352][ T43] RDX: 00000000000a0800 RSI: 000055c243f45f80 RDI: ffffffffffffff9c [ 519.851484][ T43] RBP: 000055c243d052c0 R08: 0000000000000000 R09: 0000000000000000 [ 519.854374][ T43] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c243f470c0 [ 519.857740][ T43] R13: 000055c243f408d0 R14: 0000000000000000 R15: 000055c243f470c0 [ 519.860747][ T43] [ 519.862160][ T43] [ 519.862160][ T43] Showing all locks held in the system: [ 519.865158][ T43] 1 lock held by khungtaskd/43: [ 519.867317][ T43] #0: ffffffff8e7e60c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 519.871164][ T43] 2 locks held by getty/5534: [ 519.872682][ T43] #0: ffff88802bbda0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 519.876440][ T43] #1: ffffc900000eb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 519.880046][ T43] 1 lock held by udevd/5743: [ 519.881662][ T43] #0: ffff8880291ab350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 519.885414][ T43] [ 519.886335][ T43] ============================================= [ 519.886335][ T43] [ 519.889467][ T43] NMI backtrace for cpu 2 [ 519.889485][ T43] CPU: 2 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 519.889533][ T43] Tainted: [L]=SOFTLOCKUP [ 519.889539][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.889547][ T43] Call Trace: [ 519.889553][ T43] [ 519.889562][ T43] dump_stack_lvl+0x100/0x190 [ 519.889586][ T43] nmi_cpu_backtrace.cold+0x12d/0x151 [ 519.889617][ T43] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.889646][ T43] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 519.889676][ T43] sys_info+0x141/0x190 [ 519.889698][ T43] watchdog+0xcb1/0x1030 [ 519.889721][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 519.889749][ T43] ? __pfx_watchdog+0x10/0x10 [ 519.889771][ T43] ? __kthread_parkme+0x18c/0x230 [ 519.889799][ T43] ? kthread+0x13a/0x450 [ 519.889815][ T43] ? __pfx_watchdog+0x10/0x10 [ 519.889832][ T43] kthread+0x370/0x450 [ 519.889849][ T43] ? __pfx_kthread+0x10/0x10 [ 519.889869][ T43] ret_from_fork+0x72b/0xd50 [ 519.889896][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 519.889919][ T43] ? __switch_to+0x800/0x10f0 [ 519.889934][ T43] ? __pfx_kthread+0x10/0x10 [ 519.889945][ T43] ret_from_fork_asm+0x1a/0x30 [ 519.889961][ T43] [ 519.889965][ T43] Sending NMI from CPU 2 to CPUs 0-1,3: [ 519.939174][ C3] NMI backtrace for cpu 3 [ 519.939193][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.939214][ C3] Tainted: [L]=SOFTLOCKUP [ 519.939219][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.939227][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 519.939248][ C3] Code: d6 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 48 10 00 fb f4 fc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 519.939262][ C3] RSP: 0018:ffffc90000197e00 EFLAGS: 00000202 [ 519.939275][ C3] RAX: 0000000000394b79 RBX: ffff88801eaba540 RCX: ffffffff8b9b52d5 [ 519.939286][ C3] RDX: 0000000000000000 RSI: ffffffff8df577bd RDI: ffffffff8c1e7180 [ 519.939295][ C3] RBP: ffffed1003d574a8 R08: 0000000000000001 R09: ffffed100d4e678d [ 519.939303][ C3] R10: ffff88806a733c6b R11: 0000000000000000 R12: 0000000000000000 [ 519.939309][ C3] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 519.939315][ C3] FS: 0000000000000000(0000) GS:ffff8880d65ec000(0000) knlGS:0000000000000000 [ 519.939338][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.939347][ C3] CR2: 0000562c3e8e0168 CR3: 000000002df85000 CR4: 0000000000352ef0 [ 519.939353][ C3] Call Trace: [ 519.939357][ C3] [ 519.939361][ C3] default_idle+0x9/0x10 [ 519.939372][ C3] default_idle_call+0x6c/0xb0 [ 519.939383][ C3] do_idle+0x3a7/0x5b0 [ 519.939399][ C3] ? __pfx_do_idle+0x10/0x10 [ 519.939412][ C3] ? finish_task_switch.isra.0+0x14c/0x1010 [ 519.939428][ C3] cpu_startup_entry+0x4f/0x60 [ 519.939443][ C3] start_secondary+0x21d/0x2d0 [ 519.939456][ C3] ? __pfx_start_secondary+0x10/0x10 [ 519.939470][ C3] common_startup_64+0x13e/0x158 [ 519.939482][ C3] [ 519.939488][ C1] NMI backtrace for cpu 1 [ 519.939506][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.939527][ C1] Tainted: [L]=SOFTLOCKUP [ 519.939532][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.939541][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 519.939561][ C1] Code: d6 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 48 10 00 fb f4 fc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 519.939576][ C1] RSP: 0018:ffffc90000177e00 EFLAGS: 00000206 [ 519.939590][ C1] RAX: 0000000000442139 RBX: ffff88801e6d2540 RCX: ffffffff8b9b52d5 [ 519.939601][ C1] RDX: 0000000000000000 RSI: ffffffff8df577bd RDI: ffffffff8c1e7180 [ 519.939611][ C1] RBP: ffffed1003cda4a8 R08: 0000000000000001 R09: ffffed100d4a678d [ 519.939621][ C1] R10: ffff88806a533c6b R11: 0000000000000000 R12: 0000000000000000 [ 519.939631][ C1] R13: 0000000000000000 R14: 1ffff9200002efc4 R15: dffffc0000000000 [ 519.939642][ C1] FS: 0000000000000000(0000) GS:ffff8880d63ec000(0000) knlGS:0000000000000000 [ 519.939672][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.939684][ C1] CR2: 0000562c07a83660 CR3: 000000011ed4c000 CR4: 0000000000352ef0 [ 519.939695][ C1] Call Trace: [ 519.939701][ C1] [ 519.939707][ C1] default_idle+0x9/0x10 [ 519.939725][ C1] default_idle_call+0x6c/0xb0 [ 519.939742][ C1] do_idle+0x3a7/0x5b0 [ 519.939764][ C1] ? __pfx_do_idle+0x10/0x10 [ 519.939783][ C1] ? finish_task_switch.isra.0+0x14c/0x1010 [ 519.939806][ C1] cpu_startup_entry+0x4f/0x60 [ 519.939828][ C1] start_secondary+0x21d/0x2d0 [ 519.939848][ C1] ? __pfx_start_secondary+0x10/0x10 [ 519.939870][ C1] common_startup_64+0x13e/0x158 [ 519.939891][ C1] [ 519.939899][ C0] NMI backtrace for cpu 0 [ 519.939910][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.939924][ C0] Tainted: [L]=SOFTLOCKUP [ 519.939927][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.939933][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 519.939945][ C0] Code: d6 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 23 48 10 00 fb f4 fc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 519.939955][ C0] RSP: 0018:ffffffff8e407e10 EFLAGS: 00000206 [ 519.939963][ C0] RAX: 00000000004778f3 RBX: ffffffff8e491480 RCX: ffffffff8b9b52d5 [ 519.939974][ C0] RDX: 0000000000000000 RSI: ffffffff8df577bd RDI: ffffffff8c1e7180 [ 519.939981][ C0] RBP: fffffbfff1c92290 R08: 0000000000000001 R09: ffffed100d48678d [ 519.939986][ C0] R10: ffff88806a433c6b R11: 0000000000000000 R12: 0000000000000000 [ 519.939992][ C0] R13: 0000000000000000 R14: 1ffffffff1c80fc6 R15: dffffc0000000000 [ 519.939998][ C0] FS: 0000000000000000(0000) GS:ffff8880d62ec000(0000) knlGS:0000000000000000 [ 519.940019][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.940028][ C0] CR2: 0000562c3e8e0168 CR3: 000000002ddd9000 CR4: 0000000000352ef0 [ 519.940034][ C0] Call Trace: [ 519.940037][ C0] [ 519.940041][ C0] default_idle+0x9/0x10 [ 519.940052][ C0] default_idle_call+0x6c/0xb0 [ 519.940063][ C0] do_idle+0x3a7/0x5b0 [ 519.940076][ C0] ? __pfx_do_idle+0x10/0x10 [ 519.940089][ C0] ? finish_task_switch.isra.0+0x14c/0x1010 [ 519.940105][ C0] cpu_startup_entry+0x4f/0x60 [ 519.940119][ C0] rest_init+0x251/0x260 [ 519.940130][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 519.940141][ C0] start_kernel+0x48e/0x490 [ 519.940156][ C0] x86_64_start_reservations+0x24/0x30 [ 519.940172][ C0] x86_64_start_kernel+0x12b/0x130 [ 519.940181][ C0] common_startup_64+0x13e/0x158 [ 519.940193][ C0] [ 520.155010][ T43] Kernel panic - not syncing: hung_task: blocked tasks [ 520.157222][ T43] CPU: 3 UID: 0 PID: 43 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 520.160600][ T43] Tainted: [L]=SOFTLOCKUP [ 520.162040][ T43] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.165896][ T43] Call Trace: [ 520.167231][ T43] [ 520.168473][ T43] dump_stack_lvl+0x100/0x190 [ 520.170415][ T43] vpanic+0x552/0x970 [ 520.172056][ T43] ? __pfx_vpanic+0x10/0x10 [ 520.173935][ T43] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 520.176415][ T43] panic+0xd1/0xe0 [ 520.177927][ T43] ? __pfx_panic+0x10/0x10 [ 520.179760][ T43] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 520.182260][ T43] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 520.184733][ T43] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 520.187222][ T43] ? watchdog.cold+0x1ec/0x234 [ 520.189172][ T43] ? watchdog+0xcc1/0x1030 [ 520.191001][ T43] watchdog.cold+0x1fd/0x234 [ 520.192876][ T43] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 520.195113][ T43] ? __pfx_watchdog+0x10/0x10 [ 520.196977][ T43] ? __kthread_parkme+0x18c/0x230 [ 520.199029][ T43] ? kthread+0x13a/0x450 [ 520.200779][ T43] ? __pfx_watchdog+0x10/0x10 [ 520.202695][ T43] kthread+0x370/0x450 [ 520.204355][ T43] ? __pfx_kthread+0x10/0x10 [ 520.206257][ T43] ret_from_fork+0x72b/0xd50 [ 520.208169][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 520.210158][ T43] ? __switch_to+0x800/0x10f0 [ 520.211846][ T43] ? __pfx_kthread+0x10/0x10 [ 520.213625][ T43] ret_from_fork_asm+0x1a/0x30 [ 520.215533][ T43] [ 520.217558][ T43] Kernel Offset: disabled [ 520.219056][ T43] Rebooting in 86400 seconds..