last executing test programs: 5m0.447549423s ago: executing program 32 (id=278): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r0, 0xc0404d1a, 0x200000000005) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r0}) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx6\x00', 0x204001, 0x0) 4m40.352487643s ago: executing program 33 (id=717): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4m33.646262307s ago: executing program 34 (id=808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x880) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4m31.435997254s ago: executing program 35 (id=841): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r0, &(0x7f0000000180)=""/174, 0xae) (async) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141410e0000001000000001000fcff0000000000000000070000004fd5907b5c2ed33d737fbd467a20222621f4ec102409638c7dd799e9608da2b08aee94490e395f7870b3e938fd"], 0x30}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x622180a068a0b776) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x0, 0x87, 0x100, 0x80}, 0x10) 4m5.502270791s ago: executing program 7 (id=1270): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 4m5.149462974s ago: executing program 7 (id=1273): socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2890000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0xffffffffffffff9b, 0x4010, 0x0, 0x0) 4m5.147765832s ago: executing program 7 (id=1275): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000100)={0x0, 0x0}) setresuid(0x0, 0xee00, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @remote, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="da", 0x1}], 0x1}}], 0x1, 0xc0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x1, 0x401, 0x1}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000980)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0xa9, 0x5, {0xffffffffffffffff}, {0xee00}, 0x0, 0x80}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000000b00)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)=[{&(0x7f0000000600)={0x378, 0x25, 0x100, 0x70bd26, 0x25dfdbfe, "", [@typed={0x12, 0xa0, 0x0, 0x0, @str='cbc-cast5-avx\x00'}, @nested={0x2ad, 0xdd, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x12e}, @typed={0x8, 0x149, 0x0, 0x0, @fd}, @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@private1}, @generic="ad8dd4c8ae1d52da703abad49991c24939f3bd849319a8df7f9ba17a275d0b97423f109ae2d0a903543483acb934c4c8366ed4500341937d982362bd0b5754e970b28858799fde473de86f0d3440db441d3ed7a28e418badbd9d0c9735add04acf547a4ef02f0a8b6c83376d818199d41cd8da9ca4554b92b1809c2b3704679f2c16003651395559ef80c1987ce9163858bbe7406ef6cf5fa0e1dde026a66b62dba6c21b89aec2de48037e75ca3f3663cf1cfe43844af040c924ef4df739d35f1ee3d73beeef2ae388f4f24ea7", @generic="60d62a1fe70c2f7572d2b3aacc26a340429197c790fffe4746f9326dff0370d858ba3ee45268b17ce48ccbef80e9fff371a834a9dd166fb0d22c31c344101b03f5f57a9b244447c04becb979720e4289c984416ac25d2e3c675de1e147e9f49c89b05c55a005108611c6a067964116fdb77a9934112441e42dffc6ffbf88e3c7b3f93f33b5e227da8f7f757dc1145e240ec923fe0fd16a0448228b3d3b1a5a917f11ace946", @generic="652f7a4b8d5318396ec1a03524d36fa918ad95017a00f094dac85eb0af8328072fd1ad05c59e73ab6211ff89fdeeed7d7f7a8092ba8ba9b2519ae22e2018bef4985c5fa032f29f4a9b43a0a9336f8dd664c1ad3d6dbde98fd745047924899931fbd5f73b2b1dd75360c9a72cc942fb21379d5eb249bb84c4ab22a3ee47d2367e70eaa0c1eb8dd8ffdecdce9b82f60c10a8e090ee08e7bfe893daf216fb72bfb745f79d18010ec7a9bd85ce126cb3efbf0c36a3dc6e586737e4543e91f58934386e8623", @nested={0x4, 0x112}, @generic="8750db11a4fb6f6b5c840bab9573e7d8cad056905487c2ed5008bc97154a530f0f845d9817cc4eb618b7b1e99fea9db39b47b19dd090ac8fb9efce12f7e9db337f521b4ea74211a4"]}, @typed={0x4, 0xeb}, @generic="dee245a0e391e93ab38eca889cab1b8c12b6408ad67806cbe9d35e2aa32b77d0c9e022ccc6bc2275df45ff7e023e5601ede541d45c15a5d87c56b379e388b2bd6e74244255300e480a162398a29b02157e8459b41e5f6a6e3d2d9d0ab17e82ef5f6b0021f0a81cdc1052e57337d635982d8728dc47decb6a15e005255648ac3846446296b4277fe7a5b51e9b296291bfe070031199aac87b1bcf90f3d17a32"]}, 0x378}, {&(0x7f0000000280)={0x24, 0x1c, 0x4, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0x105, 0x0, 0x0, @u32=0xf}, @typed={0xc, 0x143, 0x0, 0x0, @u64=0x1}]}, 0x24}, {&(0x7f0000002700)={0x3394, 0x37, 0x20, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x90, 0x0, 0x0, @uid=r3}, @nested={0xb1, 0x9a, 0x0, 0x1, [@nested={0x4, 0xe7}, @generic="357dc2ab03", @nested={0x4, 0x24}, @generic="2bdadb8112595fc2341298edb8410ed107051016221583a7391002666ffa4d9c5e465cff4adbe190925da06c8bebbd8643c273499b97e2d59a45116b1e24d0e43a699f57521ea473716139e915f126146ef819bd6100ef722a2b87d644cc6c6a63a1c7724164d262e0b0ce18296319ee7ff4560a6a54261d26f4f270d727abefa0c0418379d574df", @typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@empty}, @typed={0x4, 0x41}]}, @typed={0x8, 0x11d, 0x0, 0x0, @uid=r4}, @nested={0x1066, 0x137, 0x0, 0x1, [@nested={0x4, 0xa2}, @generic="9aaa4f89ac778e6722bb6976f496568c5a36ce93af9900dbd8b9a54170b2374108d5f529d6f3", @generic="90a1bc31ae283ae7c4e67a6c3be320fb88ea87761aa5c2b35e245c8e01cb0285c2c4b19f9c85c7176fa12710f6a02797b44c270a0f8d1898b3b769f75dfc3c37079bb5c0767e74cbde4ae741b3099a076e5346f531c43e6302a0763506746cd4f22c2d3f0281ae45023bd13b423d8cf5c5178a30b21bb941ceefd80f79760b002ac484e8951f98af43b82f516c962a7c206ac2b103948d6a8da36f6a4b4ff65929529769072c72135f089e60cd73872e9fdbb33cf9291a552ccfcb53bb4702a57ea87e924d68ff917f317b5936f5b9d8986d2a65ae9b50f8f578be861acc82d639944c087d44a99b30fa2253edeeb12fdb57e87e881181b696cd6bed352fd8954f210026d5d0d738ad9ae884e32cb7fdd11d858ad978760b82e03c041ff012be1776f3e26935fdf6ee6459da51adcf1bf4eadf9d8b9eecad49d8d806147ecc0172355f8069d1c12b30a16fab062e0341481dbdcb441eb884cd45b9e18e4f68e0636d9d21d7c1569b046e2c62f28cb72f473cc7c422d71cf3576d5af50c2678f6941d69a9d4258d1b7bb804ca368de4031ae82584d80749c3361afdfbbed6facc4392ac278466743e38a6ccd28439ceebb034bdeb8f24526706cfdfc60cbd134770235588b1d8625506bc609ba89dd69dc7d67ebcbaf99a1d160822f6b52222522018cfcad0220fa7d21570117f2afb14fa0c6e5a6e5e1d6dedd7eff08c99c259043f89db6df4567b3563b88f0aa816b80b5da0a55f49fdfb8cea77a62da77e300fef4a55f534de0b8ebacd223a625f312b465ce7188fd0a7467811d168b8d08a846ade75f417f9237cdc887207f05685a7b3a512b8abda96205978639fa3ca94e2044f6cf37e067c6a48b2f5c5ae4bf0caebe4b7c79974b4c061fd2d2df4127af3f9dc6449eaee8b957e7e509633be2c42bc277836ecbe41d2e4af61c673c4eb9fd0a89c034cd3270d1d5bb00558de681f8987ddebc2ca76deaedbd246f10dc117dd74bf6c3e6a55a3d70b210498b3d95efa5307a46a1a3145dfcbda12b39e00614bbe13db52a8ddd6455a8f8ce09f42bce3cad35e5e8c9d4a4180bb617583256791757586e1727d758b38bd6314c76234b77c8304884a834b01b674d70d4e956189f0ed0d5eda7c2d0843ae9ce680179d3a55f9f0452cd3834c41e8efbd3998c6774fd92cc22b00a268cbfec01ae8ace26de9668675ce90f1e7cabda1df85a6a7a7da7be290e4873008de5c8f56a09bb1688e28e5698a885da74dd2e6d76d6267becd4dedc5906318193b4edbfc0f0664d2976703369837636d8593cf62353161a23c914af717eee2428fb68fcab50c095d9becbbbbd1a06dc7fee9006d3842d6bdab5e9f415ecfe50a10cd5ffe2055fddea296968831c1c2fecd18487c8e48f6c8a4272d328695e949a90267f6b7b8e987cf961b2416def7d341186687ace2d4690a4f39d39cc544171405f530613459247c059ad849784d5452447b775b37858a402d5c67de503fab9c5e11adaa156bdf46aae6a77cf0854ffef9d1be38a02f6d04251c00edfee9f45ec012ebd133a535d1be38492f18d8925958978273edeb6c48575bddf104f3aa77d566b8989003474d39c4e08b7171a8af0b040d87af8bfcbe835cc37518432ac98734450999a9c4a5e6dcbd6dd7db29eba407ab87947143488b7ffc5a1414ebe08c8326e8dce407b5f43d258d38485aa52f595a5e981058c98f6bc1383ce91fbcc4984b5e032dba7473f814f61f31e2383ec27279144ed943ec818513c640414f634b06a9d1041e40da14eb73597a99aa6f752ce256889123d2e3ee4c24fb5284467144f0cc6c5c47f512034a7b741fea5af602f17811cde3e843052ded4f587656dd2e50ba32d992e4977698232f0b86af12afad0c602af321fd8e855235dfdf8bd97001f584f9406384a89e384069afbf36961038c41aaa579faac6a4a3114fbd6c5fe5a8a468ef4de0a5603c05a91e4ee2b44ef91af4345a979e5cb879b5564cf1842425eae1f6afc98897f9658413b9456dded011f89ed1a807be0f3fa628abbef0576a015baacf014d8d4bfcdfa9826b09cd9084bf82988421acbe4126b73586f9f510009f81aef8f54995e336f1a39b06aec6c1fb08623889770e386d30133bd278dde7e541462219bd7734c5d51fc681370b7440af8bd12bda569c0a4f3a392a39ecb3247ede8db48fb9ecfa3c84b4aa86c68917bbe63770d32f8685ed49591758ef57b464797175c6f0eb1c71bfd26b764782d600c0161e0c816dd90deda5c96897932fc10e46146c7d2676f845128552d55e8e487a37206ee24f546fa4f097ca695c41204530e92213f9f555ca34c8976b32e5954bb4bff6a0e8a2082ffb8dc9bad9609f1b02138ee20877ae270b2a255492ef0712afb78780edc34525a417a18405e2b6d61ad82097a299ffc02e32dd43d649b305acf35181f573b4103a039ad0d7d1f8477810921e66f131bb430da9810cbf23de726d0d8dc0adbe25e8a59f578a66e1e420a5605238231138bec366ea202f71c0437d2ed16315525845ae5e1c122935ecb05f6422b1413aa89597c24a457db3e99fc5f078d9a9bed5d013adb481fe8ab4fa2d900411bec3b0bcd22ba6c99aa0e6ff853c07323a80bdc57c3c7b65c3b114ab8a77871b1848821a8820f128b701a4fd923868d0aabd69890352bf32a5845b7e819be2023aaf65a7e110dc373f2a644a5ed6716c6f4c32f98582ca44c4ca2cc24de326ab6e511adfa99929e4cc829ca98865c4c1e70388980c20a94ed3528bbb4eefc7ea9d837bbcb54f659fb03a5680e17cc3a8f1566c1f13da82abc59793ab0d30562a13c297c489fdb4c50c2c8fe5d5c90cd4bd3d233f68329362026eed6709667211d3660393c776b05029378aecdfb4a0f960cfd028162d6846caff730dd0c82ab10d97be62123ee2db95c1ba0e5d1ea5486877c0a28aa7c3e9c62cacdfe95bd3afca4c5adb7ed96eaf8961c33d723cc87142d2ff8235b0138b0ae0c300bcfc71cd0759463efd87b1bc144e834086e013926a5382ad5374d415a6958f588d4c24630c2f721410cadcd6ee8cbccc51b02167ef84087dffd167909bb99bda114fc28edd2e1f9e70cc05a14484e14bcfcf50ffb85cf7e447402c59a6dbc9b016058c3bba2d160eeae27f38974d89ab29303f1b59427313861eaca7bff66b3fa3f475b9febc8b34b77e0c6740114b52a2ad19f83343be248e43d61564282fa274b7d28483e5484e64bcc58269151ea4ee89543657f90b1a344b7c9306ff52620c765739f821fd02055903b2f9d0ab665f51be9e651dd2c2fce316b4d4dc39cba17c84967a23bacd4c0cb4820ca49e19ed761b806df035007ad564d5906e81689dc475ec827a91c2e81fd043fcca23402e8d60861f609ff59c199adaf101ffe3a4a89155cc13e8196f9db952c8903555490625ce22e10085c1c44bdb61a287e95c55c1e02a9f40daa9a69a023181b920161881fc0f9af49bdbeb31c85259306bc257ea68483a777f043869e35b4ad95ce97ed537f824b61960aa1425bcf2cb0b470b3379cabfea55246356ecd12441c9151561e50531b510b781c2d1316dd49835c85888494d2268bdb828a39800d1b7083878ba870b7d556e0e0b99d5f5d06c94b674f1b9d3b5c06a9aeb2dce5d8033ded01f4890644010dd8804c9498c7cb897b57cd260fce25bbfb0a923e163c20f94ad5141d49d632300df6fb7f1f90ca7806088efe77183fc772b268d0d1b5b601d3ebed6bb53a2a7ef50659b426fd8f408583e6d1dddc2b2347ff5309cac0f5d014af0facd8cb572c13386807e746f1fb11cb5f01a7cbd7e5e3073d53c24dff92624c603b22922758abc31a4e2f481751d87e5895655d8f1228ca74517d599b64cd6e955bbcae8caf4d94e1079eaa366a80ee2e2676a38c6e43d8003b279be1dbb687222fdd33cea268bf4f1a66cfe5219d7a43e1425cf26dcbc22075613b8a46786c810e540326aa9e911ce7e61b1e8bc947332e79e1a6837ee46a2e75fa1f99dd4d2cd332de63cdf1641aa23399c2428548a1d051b99f78fe9f045db94df1e66b0aeaf151f20709e96c60d4b100636c66732d4271debc8e0c662d9cc0f9efa31d496dfe9f28bb848f3bf2c8d5f7d68d77477b6f7b856a801f2025e6cedd63746c7f7a48aef9fbe964b33c90dd677b0da85e16a1e885a017f76b693251c8e5c96cd9d22e04f7d3854c3050444be8d7dbe9b11497d43eb0a955bff2e6f0635af037d0e05e9f64b750bbc67994717b93e5ede2bb568a3e45767ae2b17a1af40ec6ccedc04c467eff98b2f18e2a539621a727c489dc23eaee690c18d25725f8d146b9ad4b3d909c0aa110d857560877e7bfb52ee104b5cc036a312cd6c1858bd9b6792cc6b579eb87a124c130394b26ae804d04d9c8d1d830aa0350212ce6403b2398a3a904ebb2b507952bb22b2b02d15e7be38f8fd3887dd29c6395f0e1dc70e6e3e21b9e0a4725ad6eb6038ce9d7c32b0a5c650b29fb2f55233208d890e935c38f6bd071b37c9333106bb4bebe8a66decc29957a16d4b5f6f3f6e142dcfe50c5e2bc7b50881ab5be1ee2ea78c31c30fbc1ebc8493644cf4637a51121f9f1faabb7c71cc9c20ebdb5bfbf7419e47fa3d0842ea2be2aca97ff401ed03465674ba884fd8f8411d16a68bee2ea98c10cef10921bef68181e64e2aff0555078533883f397ffbc7e5b338a2c165701af4d4aa9c50232b08b2fbe336b9539c4afa3dcb51e4a7aadb3326b410f1234657bcbe66a9497433d68f649cb8934fc57c52d0255077f34b70ca08a9969426a97fccb71c8addc84fb51ee1070d9b5a11356b54959bafcf1e392fa330c73a94b8c0bf0584a3e2710958fa0ca9481c8d47986f9619068273fa7d99db910c94de44c62632bcb1c314c223b52f591d214b97e0cb070c1e9b72af76c2dee9f5364dba253305ab749000eed2f3498b2244c7fbb72a2cf5e453fea5761f1c95e822a7de719d07f61e33336885f3c9eccd5e5a632f757e4004ffe6751b826a40ca28cafadabd064e3f69baf6809c1f951d418153c51a6d64bea7449e46feb93a112f0349149402f1245082fd3eb3ef4894a1f0d4764fa3d728aa550d225427069f9d529ab404389ca97c9a0f4dbf8b8e623b08c4f698a92a34864d389ac689f0ccd175f5ffdf6d42a29914b6891eb0986a24ba99080de122b75f90a25975c8f2149210bb98b4e650e78ac01a7af966464394a7ad107e5a6c166f4ec9a710751ef65b1f22fa02579bea541f011800a47cc60fa6ada9cad96b46ec53637e4e05a8acd843fe470ee0efcb57936fe7fea007b02f955bd7ec4274ea964ae093444d1f77827d9598335ddd9aaba3b14428156fc909b031ec05f940eddc3b4fa04f26faf289aa454cd5e36b039e5788e366e2da80393cf7c9bfca657a071ec2772cf701844be90e85892a2a837b2bd80292f31db5634123e8333fbe6e951d1f1e298e4b438ce38e1b718dac1913d638b9ccd31c078da198f028bec1ec8275dc2d6465167c91e594d4c58ab34cf27dcfb98014b3efd1267d7a3268ac7b2294db9b3d57535ad094d58ddcb87d73db8b99545458ffac682f5bb5d67f37358e349b4ea0ae763766dbfe6acfe404b58aa324580cac2db145219b74ca28a812dd9f8fcb20aa3b11edb8267a60e763490f3b08815f55134406ea78699ca37c9e9a75cc9f8b2f674144e8551bdc71e6565c9fa2db9fee963b04c915052f4d635f0ea5214b20ba2103a84e77581fc1aa03019e5e04cfa9441b3d21", @nested={0x4, 0xbe}, @typed={0x8, 0x138, 0x0, 0x0, @uid}, @nested={0x4, 0x68}, @generic="dc405d41b3c0f0295df1a1fea312e7165baa9ef012039ab292ac0089f1bb240c9e44d2877b56f777"]}, @nested={0x150, 0x140, 0x0, 0x1, [@generic="422a485a9191c3cd73bb26e2f21b3b127c238cfcfe1fd38e8b85ebf44aa50b2431b4e028c9e9aeee7b5af89dfe02e35fee7328b4d09e825ada2e11b23f2ad19613f9188a03c33deae1fc78ff273a207ae20cca42269329ae7cb8155fcc87c0335b839ec2dab1947e4a526aa554c1832c4fed8a075fb5efc606d172fce8f2f9d475488856a42546b251bee4f15b26c4175cca37b77f0fbd22f09d8131aa55f741318b089657641dac0a78551c5f3b68", @nested={0x4, 0x6b}, @generic="a528ca4e6d4455", @nested={0x4, 0xe7}, @generic="19ba213365cb0d8ef1e5f08e2eb8b93116392cf09ef239e108e554e33ce8e605b53003886c589dfe8dd880ca513b215cf2054969f022704e7ece410c6a34d96dadc485699456c19171892416046e513b9121191d3efd1dd6c977d8d9c17cb2ddcef3fe02a27ac29862853f97f30c1daf5faa29accbe7c0f0aba297d4ff9620c6460b08d27cbeff95eb4a25a5b452"]}, @nested={0x2108, 0x42, 0x0, 0x1, [@generic="d9f67a4e7406e8d649fed2d4b0775aab8622193cfa0490757d09d9d8e75cc8b87afe13f9c97e525f7f702a13f69b8e3f05dc15570fdbdecc2bae6fe9d1d0582994d417d25fe57d021dbc5b07d7a4053c6ee248ce6784c0fc520a45f0fb43a7c0549bb274e13729249a1c3366d8e60f22f9ee2860437f86852f92993368e64d7a643418d88bf46e9b7dfd4506e0f491cae80c2b7dd1d22da8750e5acbe2f520a660526cfc3b20b1da8a94c915e2451bb3e9eb2fe52861b37e9dd1cecbd7d6f498af2c331fbd30251378816767eadd5b2f4489ce7cefbdc78760dc350cbaedeb841bda0623202519e14348a988", @nested={0x4, 0x134}, @typed={0x4, 0x74}, @nested={0x4, 0x26}, @typed={0x8, 0x35, 0x0, 0x0, @uid=r5}, @generic="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", @generic="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", @typed={0x4, 0x112}]}]}, 0x3394}], 0x3, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4004000}, 0x84) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = io_uring_setup(0xaae, &(0x7f0000000580)={0x0, 0xffffeff9, 0x800, 0x7, 0x6}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe8) syz_emit_ethernet(0x74, &(0x7f0000000b40)=ANY=[@ANYBLOB="0180c20000f4000000000000080045000024000000000073907800000300ac1414aa00000000fe9a907802000000000000004270716755e401ab74a68acbc9df51"], 0x0) fchownat(r7, &(0x7f0000000080)='./file0\x00', r8, 0xffffffffffffffff, 0x1000) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m5.020501069s ago: executing program 7 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109881, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r1) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) (rerun: 64) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000280)=0x13000, 0x4) (async, rerun: 32) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r5, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='mode=00000000000000000000010,uid=', @ANYRESHEX=r3, @ANYBLOB=',grpquota_bjock_hardlimit=4k,mpol=default,huge=advise,inode32,mode=00000000000000000000007,uid<', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=r5, @ANYBLOB=',measure,fscontext=staff_u,appraise,\x00']) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ipvlan1\x00', 0x10}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010325bd7000fbdbdf251c0000000c00018008000100", @ANYRES32=r11, @ANYBLOB="9d2e4cf777d24a6dc61b60e82f2b338dbceb20802b797abbf4996774f480ddef948fb8a4500f1c63920f0388e6c3"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40006) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) (async) r13 = socket$unix(0x1, 0x2, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r12, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m4.841524193s ago: executing program 7 (id=1280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, 0x0, 0x8000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002bc0)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d40), r3) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000580)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000240)="b700000b11", 0x5}, {&(0x7f0000000480)="e82c4adb60346417f0e338a05f8d408402ac57ec028018688493ed81b0490cfc0166cbd825d1f3b419", 0x29}], 0x3) (async, rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x50, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) (rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x48804) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x1) (async) listen(0xffffffffffffffff, 0x3) (async, rerun: 32) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) (rerun: 32) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r9], 0x50}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r11 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 4m4.231897463s ago: executing program 7 (id=1291): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x200) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x339, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x75, 0xc5, 0x14, 0x8, 0x408, 0x4035, 0xda56, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x327, 0x2, 0x45, 0x4, 0x90, 0x6, [{{0x9, 0x4, 0x4d, 0xbc, 0x2, 0xe, 0x1, 0x1, 0x4c, [], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0xe, 0x10, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xf, 0x9, 0x6, [@generic={0x7b, 0x5, "d635ff88864245adbc0140828260a405bf0b4320cdbd8532fe90260f271d058cf6c668226ded767250187cb136894c7170652835ea41910c3d6c7db6150d0bcd05a35d7992405c8297493950095c5c5874a7e4025eda09eb2c7ffebc7462c44f81bb72f7cf84cd3de8ca7782acc4ac8d5201dbd95e1025c617"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4}]}}]}}, {{0x9, 0x4, 0xa0, 0x2, 0x8, 0x38, 0x29, 0x62, 0x3, [], [{{0x9, 0x5, 0x80, 0x2, 0x20, 0x3, 0x79, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xbf}, @generic={0x23, 0x5, "af6dcb09dedc4a96062b08965c49a78cf3b8a753f62fc515c482dcae518b2c1979"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x9, 0x6, 0x6e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}, @generic={0x9f, 0x11, "05cc89945823dcfe32673c7d54408629fe98182fba3d316d70ed3cb6359014107b08e1a881ec532d74a47ab8bb5d39de1cb83c9c67e894a330cf44490e90af556554e8ced8eeb0f17694acba76294488a74272e897f03b8b5e8063ea71e0db31b9c2bc3933b939057f2d83ec7ce2c39780c19cd2ddc3061264a2191fb64a27735bdd4b489525ca26de2778faef0905231299b345c9f72e979b5e548522"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x6, 0xeb, 0xf2}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0xb2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xb}, @generic={0x63, 0x21, "f7e9071eeb7bf310657434a92afd1e0d54aa67049c6d0169e29e96ffafafae2db0f2b458494597003497a1b5fd82de29712dbe3896341ad0874c01753f72862c04ca89dfd963c5d4e2205e09555e06f4484bf67f97dd20c6cb7c1db91a80bd2ee3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0xe3, 0xfe, 0x6}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0xd, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xa6, 0xce}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xec, 0xba}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x3, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x2}, @generic={0xe1, 0x28, "b0ba6dcbaf786dfc78f76ae6da8b22d3296899e61f6f733609f1706ee88eade21fd2f0bf0bca72356aae1600dc5b22d0df8b04a068c843b50a74bbc0541558e2ed5060d5409519b3246b6066a357ad33aaa67a5b29ab45bcab5f5ff04408deb83c860929abeb3b37c9adb7e79d9abdc3cb54d79b7c3605c1133f77282c7cd05d08ae2b92135797c125ea8fffd9de1ef4161cdb9ca1700fafc53b4dc1cfd62546db9e42f3a6319f9cf6fecca0777513c3e116faa5411444f91f60777e6468388e9ab7561047c2d6d91cf9f9b76c791e9475e8457b054448857ade51d53a0765"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x0, 0x5}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0x8e, 0x7f, 0x7, 0x10, 0x8}, 0x45, &(0x7f0000000980)={0x5, 0xf, 0x45, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x3, 0x0, 0xedf3, 0x21}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xd1, 0x1, 0x1000, 0x40}, @ptm_cap={0x3}, @generic={0x27, 0x10, 0xa, "a5ecb3e1f1da3df9095f35f7bf099c962885cbe4ac9415c6a5374e60830ef0ac3fb60856"}]}, 0x5, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x42a}}, {0x81, &(0x7f0000000b00)=@string={0x81, 0x3, "56d19b213d2d801e892cfe15aa9d07d2583f2739fd44f85b1cfdea53dcfdb6935314ada5a9934eb94cc88779997aff55891fe8cacd4cc9c7204760748bebbc0a6f3a2ce55880f39037dcc827212a4f55a589828be31e3af8d1b964082c339f331fe49f2d6240f054ec062d6f8a817179dbba079d8c7f486cff2d26f95328a3"}}, {0xbf, &(0x7f0000000c80)=@string={0xbf, 0x3, "ca1397ee77dfcc4fbc2f575d205da90288545a02dbd99fe570814bae0c58548d2459887d0bc77d325796d7f2edbc3dcefefa45d2bc18160128679ecbe293609e480626335b428030479449db53dc16529412f3e3d13f1eaa8c1ca9348f486ec5208a0c18ec89e6885b0c7ac5473a31059ef2b731419a52b9113201b9abda91b770334a6cc54651b1ac08c63ca11f7e5308dbc73de15580d6b026d30c946c7e9e612ac0c9b925ab16e6f0554e5578ff3ca582716cae62e562163beb0e05"}}, {0xdc, &(0x7f0000000d40)=@string={0xdc, 0x3, "22ee0efce6a368321d5ba76538f885cff6075319f2c3cd623e934fc5e9fa09478672876b71ba1974f5760c3bde99e4ceb90ee962ee72ea8fc5b9fe56985973c687adc4b3cc191c41ce63a14e872616172bf98ed683e96d7d579988e32686774e68a75868e4d9d4a8abad4e70562182f76a5aabc944e8f3e756082dd69eeae6ae929a8ea459ecb48f7ba929dc6cccb09d22b04f62643f7c1f4559f98131cc87806a42160793de585783908599fd4b857d4b23dbb015cde7e0fcbe0cab5150bf4edba6dfaadc9be869de8c28d9b3af4ff6ac6d1b04cfd930152637"}}]}) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x14, 0x0, &(0x7f0000000440)="f6f4e9a100000000002a8ba478bbb7dbfc007024", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x400, 0x56, 0x2, 0x0, 0x2}, {0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x5, 0x104, 0x800000000000000}, 0x0, 0x800000, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3506, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1ff}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b40000000000000061114800000000004600feff000000009598077a23859fb5009abbb9e5325b98f300000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x54, r8, 0x200, 0xffffffff, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x1ff}}]}, 0x54}}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r9, 0x4b45, &(0x7f0000000040)=0x2) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x88, r10, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b183810f43542b688ec05b17e7"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ac5f37b85b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "6dfc400bb41eaf6d009de9f4526ab84e"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40810) 3m57.211941846s ago: executing program 6 (id=1427): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r2, 0xfffeffff, 0x30}, &(0x7f0000000400)=0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000140)={0xb6, 0x0, 0xf}) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={0x10000000, 0x4, 0x10008, 0x0, 0xf, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe3, 0x9}) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r8 = socket$igmp(0x2, 0x3, 0x2) (async) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r10, @multicast1}, 0x10) (async) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r12) sendmsg$NL80211_CMD_RELOAD_REGDB(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r13, 0x421, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r12, {0x6}}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x404c004}, 0x0) 3m56.891199434s ago: executing program 6 (id=1431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x28, 0x0, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) 3m56.802261531s ago: executing program 6 (id=1432): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000150000032dbd7000fbdbdf25027f1500", @ANYRES32=0x0, @ANYBLOB="08000a000200000008efc0"], 0x28}, 0x1, 0x0, 0x0, 0x2004588d}, 0x10) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) r2 = dup(r1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x7000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000002000000014001a80100005800c000780"], 0x34}}, 0x0) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x9000, 0x1000, &(0x7f0000008000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b8009000000f23c00f21f86635020006000f23f8670f01c5b8af000f00d00ffac0f30fc7751dba4100b096eee10466b9e20a000066b80f80000066ba000000000f300f01c30f4d830040", 0x4b}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m56.572752103s ago: executing program 6 (id=1435): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x22b40bf, &(0x7f0000000200)={[{@noswap}]}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x11) r0 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x8) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000980)=ANY=[@ANYBLOB="7472170b733d76697274696f2c6163636573733d636c69656e742c76657273696f6e3d3970323030302e752c00105400913089725ab1189d121da4ee20393cce86"]) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) recvmmsg$unix(r0, &(0x7f00000068c0)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f0000000400)=""/135, 0x87}, {&(0x7f0000000600)=""/107, 0x6b}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f0000000380)=""/56, 0x38}], 0x8}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/154, 0x9a}, {&(0x7f0000000940)=""/20, 0x14}], 0x2, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c80)=""/217, 0xd9}, {&(0x7f0000000d80)=""/6, 0x6}], 0x2, &(0x7f0000000e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000e80)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000000f00)=""/167, 0xa7}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000002080)=""/233, 0xe9}, {&(0x7f0000002240)=""/202, 0xca}, {&(0x7f0000002340)=""/227, 0xe3}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/184, 0xb8}, {&(0x7f0000001fc0)=""/46, 0x2e}, {&(0x7f0000002000)=""/31, 0x1f}], 0x9, &(0x7f00000035c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003640), 0x6e, &(0x7f0000004a80)=[{&(0x7f00000036c0)=""/182, 0xb6}, {&(0x7f0000003780)=""/164, 0xa4}, {&(0x7f0000003840)=""/80, 0x50}, {&(0x7f00000038c0)=""/232, 0xe8}, {&(0x7f00000039c0)=""/190, 0xbe}, {&(0x7f0000002180)=""/63, 0x3f}, {&(0x7f0000003a80)=""/4096, 0x1000}], 0x7, &(0x7f0000004b00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000004c40)=@abs, 0x6e, &(0x7f00000052c0)=[{&(0x7f0000004cc0)=""/236, 0xec}, {&(0x7f0000004dc0)=""/19, 0x13}, {&(0x7f0000004e00)=""/242, 0xf2}, {&(0x7f0000004f00)=""/159, 0x9f}, {&(0x7f0000004fc0)=""/76, 0x4c}, {&(0x7f0000005040)=""/159, 0x9f}, {&(0x7f0000005100)=""/188, 0xbc}, {&(0x7f00000051c0)}, {&(0x7f0000005200)=""/138, 0x8a}], 0x9, &(0x7f0000005380)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x170}}, {{&(0x7f0000005500)=@abs, 0x6e, &(0x7f0000006800)=[{&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/9, 0x9}, {&(0x7f00000065c0)=""/201, 0xc9}, {&(0x7f00000066c0)=""/89, 0x59}, {&(0x7f0000006740)=""/157, 0x9d}], 0x5, &(0x7f0000006880)}}], 0x7, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) symlink(&(0x7f00000051c0)='./file1\x00', &(0x7f0000006880)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2040, 0x30) 3m56.572421205s ago: executing program 6 (id=1436): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "f1"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8001, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb28}}]}, 0x80}, 0x1, 0x7}, 0x0) 3m56.111121367s ago: executing program 6 (id=1438): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') pread64(r1, &(0x7f0000001780)=""/4096, 0x1000, 0x582d) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) (async) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 3m56.054326104s ago: executing program 36 (id=1438): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') pread64(r1, &(0x7f0000001780)=""/4096, 0x1000, 0x582d) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) (async) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 3m49.191279957s ago: executing program 37 (id=1291): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x200) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x339, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x75, 0xc5, 0x14, 0x8, 0x408, 0x4035, 0xda56, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x327, 0x2, 0x45, 0x4, 0x90, 0x6, [{{0x9, 0x4, 0x4d, 0xbc, 0x2, 0xe, 0x1, 0x1, 0x4c, [], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0xe, 0x10, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xf, 0x9, 0x6, [@generic={0x7b, 0x5, "d635ff88864245adbc0140828260a405bf0b4320cdbd8532fe90260f271d058cf6c668226ded767250187cb136894c7170652835ea41910c3d6c7db6150d0bcd05a35d7992405c8297493950095c5c5874a7e4025eda09eb2c7ffebc7462c44f81bb72f7cf84cd3de8ca7782acc4ac8d5201dbd95e1025c617"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x4}]}}]}}, {{0x9, 0x4, 0xa0, 0x2, 0x8, 0x38, 0x29, 0x62, 0x3, [], [{{0x9, 0x5, 0x80, 0x2, 0x20, 0x3, 0x79, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0xbf}, @generic={0x23, 0x5, "af6dcb09dedc4a96062b08965c49a78cf3b8a753f62fc515c482dcae518b2c1979"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x9, 0x6, 0x6e, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9}, @generic={0x9f, 0x11, "05cc89945823dcfe32673c7d54408629fe98182fba3d316d70ed3cb6359014107b08e1a881ec532d74a47ab8bb5d39de1cb83c9c67e894a330cf44490e90af556554e8ced8eeb0f17694acba76294488a74272e897f03b8b5e8063ea71e0db31b9c2bc3933b939057f2d83ec7ce2c39780c19cd2ddc3061264a2191fb64a27735bdd4b489525ca26de2778faef0905231299b345c9f72e979b5e548522"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x40, 0x6, 0xeb, 0xf2}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0xb2, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xb}, @generic={0x63, 0x21, "f7e9071eeb7bf310657434a92afd1e0d54aa67049c6d0169e29e96ffafafae2db0f2b458494597003497a1b5fd82de29712dbe3896341ad0874c01753f72862c04ca89dfd963c5d4e2205e09555e06f4484bf67f97dd20c6cb7c1db91a80bd2ee3"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0xe3, 0xfe, 0x6}}, {{0x9, 0x5, 0x4, 0x1, 0x0, 0xd, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xa6, 0xce}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xec, 0xba}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x3, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x2}, @generic={0xe1, 0x28, "b0ba6dcbaf786dfc78f76ae6da8b22d3296899e61f6f733609f1706ee88eade21fd2f0bf0bca72356aae1600dc5b22d0df8b04a068c843b50a74bbc0541558e2ed5060d5409519b3246b6066a357ad33aaa67a5b29ab45bcab5f5ff04408deb83c860929abeb3b37c9adb7e79d9abdc3cb54d79b7c3605c1133f77282c7cd05d08ae2b92135797c125ea8fffd9de1ef4161cdb9ca1700fafc53b4dc1cfd62546db9e42f3a6319f9cf6fecca0777513c3e116faa5411444f91f60777e6468388e9ab7561047c2d6d91cf9f9b76c791e9475e8457b054448857ade51d53a0765"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x0, 0x5}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x110, 0x8e, 0x7f, 0x7, 0x10, 0x8}, 0x45, &(0x7f0000000980)={0x5, 0xf, 0x45, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x3, 0x0, 0xedf3, 0x21}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xd1, 0x1, 0x1000, 0x40}, @ptm_cap={0x3}, @generic={0x27, 0x10, 0xa, "a5ecb3e1f1da3df9095f35f7bf099c962885cbe4ac9415c6a5374e60830ef0ac3fb60856"}]}, 0x5, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x42a}}, {0x81, &(0x7f0000000b00)=@string={0x81, 0x3, "56d19b213d2d801e892cfe15aa9d07d2583f2739fd44f85b1cfdea53dcfdb6935314ada5a9934eb94cc88779997aff55891fe8cacd4cc9c7204760748bebbc0a6f3a2ce55880f39037dcc827212a4f55a589828be31e3af8d1b964082c339f331fe49f2d6240f054ec062d6f8a817179dbba079d8c7f486cff2d26f95328a3"}}, {0xbf, &(0x7f0000000c80)=@string={0xbf, 0x3, "ca1397ee77dfcc4fbc2f575d205da90288545a02dbd99fe570814bae0c58548d2459887d0bc77d325796d7f2edbc3dcefefa45d2bc18160128679ecbe293609e480626335b428030479449db53dc16529412f3e3d13f1eaa8c1ca9348f486ec5208a0c18ec89e6885b0c7ac5473a31059ef2b731419a52b9113201b9abda91b770334a6cc54651b1ac08c63ca11f7e5308dbc73de15580d6b026d30c946c7e9e612ac0c9b925ab16e6f0554e5578ff3ca582716cae62e562163beb0e05"}}, {0xdc, &(0x7f0000000d40)=@string={0xdc, 0x3, "22ee0efce6a368321d5ba76538f885cff6075319f2c3cd623e934fc5e9fa09478672876b71ba1974f5760c3bde99e4ceb90ee962ee72ea8fc5b9fe56985973c687adc4b3cc191c41ce63a14e872616172bf98ed683e96d7d579988e32686774e68a75868e4d9d4a8abad4e70562182f76a5aabc944e8f3e756082dd69eeae6ae929a8ea459ecb48f7ba929dc6cccb09d22b04f62643f7c1f4559f98131cc87806a42160793de585783908599fd4b857d4b23dbb015cde7e0fcbe0cab5150bf4edba6dfaadc9be869de8c28d9b3af4ff6ac6d1b04cfd930152637"}}]}) r2 = syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x16, 0x1, 0x0, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x14, 0x0, &(0x7f0000000440)="f6f4e9a100000000002a8ba478bbb7dbfc007024", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x400, 0x56, 0x2, 0x0, 0x2}, {0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x5, 0x104, 0x800000000000000}, 0x0, 0x800000, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0xa, @in=@rand_addr=0x64010101, 0x3506, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1ff}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b40000000000000061114800000000004600feff000000009598077a23859fb5009abbb9e5325b98f300000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x54, r8, 0x200, 0xffffffff, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x1ff}}]}, 0x54}}, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r9, 0x4b45, &(0x7f0000000040)=0x2) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x88, r10, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b183810f43542b688ec05b17e7"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ac5f37b85b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "6dfc400bb41eaf6d009de9f4526ab84e"}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40810) 1m55.790551954s ago: executing program 9 (id=3039): socket$igmp6(0xa, 0x3, 0x2) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c) io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) (async) r1 = io_uring_setup(0x2f82, &(0x7f0000000200)={0x0, 0x446c5, 0x0, 0xfffffffc}) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x808, 0x2}, 0x18, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x8) landlock_restrict_self(r2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close(r1) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @local}) 1m55.721994503s ago: executing program 9 (id=3041): msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/100) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f3b8c606", @ANYRES16=r0, @ANYBLOB="0d0726bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/100) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f3b8c606", @ANYRES16=r0, @ANYBLOB="0d0726bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0xc000) (async) 1m55.716313404s ago: executing program 9 (id=3045): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @bcast, 0x0, [@bcast, @rose, @remote, @remote, @remote, @default]}, &(0x7f0000000080)=0x40, 0x80800) r2 = socket(0x15, 0x5, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe000000, 0x4e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0xffffffffffffff6d, &(0x7f0000000bc0)={&(0x7f0000000100)={0x34, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) 1m55.533461817s ago: executing program 9 (id=3053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/112, 0x70}], 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000400)="b9800000c0470f019af100000035010000000f308f894095d966b822000f00d80f238a40df54cd580f20e035000004000f22e03e400f01cf66400f388157e03e420f01cf430f32", 0x47}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m55.15040369s ago: executing program 9 (id=3062): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) pselect6(0x40, &(0x7f0000000040)={0xffffffffffffffff, 0x10000, 0x3, 0x7, 0x4, 0x800, 0xf, 0xe11d}, 0x0, &(0x7f00000001c0)={0x8, 0x6, 0x2, 0x100000001, 0x5, 0x100000000, 0x4, 0x262}, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) chroot(&(0x7f0000000140)='./file1\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "a9d2bef95a4d26c618abe6c962b582cf72b7b4e665b9f2e35a455c315dc31664a7f666e087997bbc7c595538e71494ebf8926f58ae3e07675b41af9fe1b3a7bec8"}}]}, 0x17c}}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="734d0000000000003ee3", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 1m54.291910192s ago: executing program 9 (id=3066): r0 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0xda2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x12a2089, &(0x7f0000000140)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x39, 0x30, 0x30, 0x2c, 0x33, 0x39, 0x2d, 0x39, 0x39]}}}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000580)='./file0\x00', 0x0) (async) memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0xda2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x12a2089, &(0x7f0000000140)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x39, 0x30, 0x30, 0x2c, 0x33, 0x39, 0x2d, 0x39, 0x39]}}}}]}) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) (async) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') (async) 1m48.691920968s ago: executing program 8 (id=3139): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x99}], 0x2}, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x4010, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@fscache}, {@loose}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x0, 0x6, 0x9, 0x7}, {0x100, 0x4, 0x1, 0x9}, {0x3, 0x7f, 0x4, 0x8}]}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x7, 0x7, 0x1, 0x6}, {0x1, 0x4, 0x1, 0x7}, {0x2380, 0x5, 0x4, 0x5}, {0xea9, 0x6, 0x8}, {0x843, 0x90, 0x9, 0x8}, {0xa, 0x1, 0x6, 0x1}, {0x3, 0xff, 0x6, 0xfffffffe}]}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000280)={0x4, 0x14, [0xf, 0x4, 0x400, 0x8, 0x7fffffff]}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000000)={0x20, 0x1, 0xfffc, 0x1fff, 0x0, 0x0, 0x0}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x668401, 0x10c) getdents64(r8, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 1m48.571884254s ago: executing program 8 (id=3140): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000080)=0x7, 0x4) (async) syz_emit_ethernet(0x3e, &(0x7f0000002640)={@local, @random="fad1e0480100", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@multicast2, 0x2}, {@local, 0x200}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xb}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e}, 0x20) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x2}}}, 0x24}}, 0x0) 1m47.701653555s ago: executing program 8 (id=3149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100039042bbd7000e2ffffff000003e4a895cdda84abee8ecc34f837b731ab253de93f80790c1eb78c1a016205b108242a0c07a037595e3c187392c2f5529d6e", @ANYRES32=0x0, @ANYBLOB="43020000cb1d07001c001280080001006772650010000280040012000600030084000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) 1m47.701248877s ago: executing program 8 (id=3150): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000d80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TCSETSF2(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={0x0, 0x4, 0x10008, 0x0, 0xf, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x4b}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x3fffffff, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c2, 0xc598, 0x7, 0x5, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_GET_LAPIC(r6, 0x8400ae8e, &(0x7f0000000840)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x60c0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB="616e733d66642c0400646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=loose,version=9p2000,mmap,euid<', @ANYRESDEC=r8, @ANYBLOB=',euid=', @ANYRESDEC=r9, @ANYBLOB=',\x00']) r10 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m47.629438506s ago: executing program 8 (id=3152): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x80, 0x40100000, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m47.509871412s ago: executing program 8 (id=3156): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r3}, 0x10) r4 = dup(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/cpu_byteorder', 0x200000, 0x1ac) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1m38.696491032s ago: executing program 38 (id=3066): r0 = creat(&(0x7f0000000580)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0xda2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x12a2089, &(0x7f0000000140)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x39, 0x30, 0x30, 0x2c, 0x33, 0x39, 0x2d, 0x39, 0x39]}}}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000580)='./file0\x00', 0x0) (async) memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) epoll_wait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0xda2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x12a2089, &(0x7f0000000140)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x39, 0x30, 0x30, 0x2c, 0x33, 0x39, 0x2d, 0x39, 0x39]}}}}]}) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) (async) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00') (async) 1m32.308564375s ago: executing program 39 (id=3156): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r3}, 0x10) r4 = dup(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/cpu_byteorder', 0x200000, 0x1ac) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 53.418984292s ago: executing program 0 (id=3737): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, 0x25, 0x2, 0x70bd1e, 0xffbffffc, {0xa}, [@generic="013d8eae5567cd0e20c23b8a9c30ecf9052b29644567f99915074115a2a807a9fb640862e712911b0ae70d3b6f1581c055b1df9afef1fb36f865a5e1e9"]}, 0x54}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 53.28094844s ago: executing program 0 (id=3738): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x2, @thr={0x0, &(0x7f00000002c0)}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) listen(0xffffffffffffffff, 0x1) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x106, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="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", 0x0, 0x10, 0x0, 0x8000, 0x0}) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000300)={0xe, @win={{0x7, 0x6, 0x7, 0x4}, 0x1, 0x8, 0x0, 0x2, &(0x7f0000000180)="a9bb", 0x1}}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8350, 0x2, 0x2, 0x8, 0x4}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000402, r6, &(0x7f00000002c0)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x689a525c4bb363e3) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 52.949632995s ago: executing program 0 (id=3739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000810526bd70009600000000000000", @ANYRES32=0x0, @ANYBLOB="02200000200000001c0012800b00010062726964676500000c0002800600270001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601036c0000000e77000000000000050005000a000000050001000600000205000400000000000900020073797a320000000013000300686173683a6e65742c6966616365000014000780080006400000000008000840"], 0x60}}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) (async) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (rerun: 64) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x48, r4, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x400, 0x71}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x339}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) (async, rerun: 64) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000000180)={r7, 0x2, 0x8, 0x1, &(0x7f0000000140)=[{0x2, 0x7, 0x3, 0xb30}]}) mremap(&(0x7f0000e86000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) (async) mremap(&(0x7f0000787000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 52.595676562s ago: executing program 0 (id=3741): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0x9a090a, 0x937}) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 52.595484131s ago: executing program 0 (id=3742): r0 = socket$netlink(0x10, 0x3, 0x0) setreuid(0x0, 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x78}, 0x1, 0x0, 0x0, 0x4c800}, 0x56dd49f89a20edf7) 52.319006869s ago: executing program 0 (id=3743): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="2600000014004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r4, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500200600fe80000000000000e69b22d99ca4a987d55c3f2755b9ea00000000000000aafe80000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e0c10000000000000000000"], 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[], 0xbfb3) (async) ioctl$TCSETS(r6, 0x40045431, 0x0) splice(r0, 0x0, r1, 0x0, 0x7c1c, 0x8) 52.219362663s ago: executing program 40 (id=3743): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="2600000014004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r4, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500200600fe80000000000000e69b22d99ca4a987d55c3f2755b9ea00000000000000aafe80000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20000907800001e0c10000000000000000000"], 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f0000000440)=ANY=[], 0xbfb3) (async) ioctl$TCSETS(r6, 0x40045431, 0x0) splice(r0, 0x0, r1, 0x0, 0x7c1c, 0x8) 38.386307958s ago: executing program 1 (id=3980): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x2b6c03) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1ff, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x400]}}) 38.38438946s ago: executing program 1 (id=3982): syz_io_uring_setup(0x83, &(0x7f0000000140)={0x0, 0xe7b7, 0x13500, 0x0, 0x15b}, 0x0, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x16a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) r3 = io_uring_setup(0x669, &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(r5, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x10, 0x2007, @fd=r3, 0x2, 0x0, 0x0, 0xd, 0x0, {0x2, r4}}) io_uring_enter(r0, 0x48e9, 0xf2bb, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x919009, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee00, 0x100) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r7, &(0x7f0000002c00)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.279436868s ago: executing program 1 (id=3983): r0 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r4, 0x82000000) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r5 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) write$binfmt_aout(r10, 0x0, 0xffffffdb) r11 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000400)={@local, @empty, @val={@val={0x88a8, 0x4, 0x1, 0x2}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "050004", 0x24, 0x6, 0x0, @remote, @local, {[@hopopts={0x2f, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7a2a2f8d}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r12 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r12, 0xc4c03d12, &(0x7f0000000380)={0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffc8, 0x0, 0x2}}) ioctl(r13, 0x8b1b, &(0x7f0000000040)) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r11], 0x1}) r14 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r14, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x2, {0x1, @pix_mp={0xcf6, 0x101c00, 0x3432564e, 0x5, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xffffffff}, {0x6, 0x5}, {0xe, 0x8}, {0x8, 0x10000}], 0x7f, 0x6, 0x2, 0x1}}, 0x82}) 38.277038246s ago: executing program 1 (id=3984): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7837, 0x7, 0x1, 0x7, {{0xc, 0x4, 0x1, 0x3f, 0x30, 0x68, 0x0, 0x5, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, {[@rr={0x7, 0xb, 0x68, [@loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, @generic={0x89, 0xe, "9d54eec626c8e2ae87e2af35"}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xb10a}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xe4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x20, 0x80, 0x4, 0x0, 0x2, 0xff, 0x0, 0xa00}}, 0x1c}}, 0x0) 38.192880707s ago: executing program 1 (id=3986): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10"], 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r1}, 0x10) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r4}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x806, 0x13, 0x14e, &(0x7f0000000200)="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"}) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) 38.190915304s ago: executing program 1 (id=3988): socket$nl_netfilter(0x10, 0x3, 0xc) 22.137570974s ago: executing program 41 (id=3988): socket$nl_netfilter(0x10, 0x3, 0xc) 2.126742158s ago: executing program 3 (id=4466): semop(0x0, &(0x7f0000000080)=[{0x0, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f00000001c0)=[{0x3, 0x3, 0x1400}, {0x1, 0xbbdd, 0x1000}], 0x2) 1.208095075s ago: executing program 3 (id=4502): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x5, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) 1.12104231s ago: executing program 3 (id=4504): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0x1002, 0x12) 1.120828523s ago: executing program 3 (id=4506): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1.058246912s ago: executing program 5 (id=4508): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x0, 0x8}, &(0x7f0000000140)=0xc) 1.058030665s ago: executing program 5 (id=4509): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60044004) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x67b, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x1000000003, 0x97, 0x0, 0x0, 0x3, 0x140000000000000, 0xfffffffffffffffe], 0xeeee8000, 0x400}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xa, 0xa0002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 951.649363ms ago: executing program 5 (id=4511): syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x7}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @private1}}}}}}, 0x0) 951.437894ms ago: executing program 5 (id=4512): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffffa, 0xfffffff8, 0x6e6b, 0x1, 0x53, "0c4192cb366b0000001b08000000000400", 0x4, 0x3}) pselect6(0x40, &(0x7f0000000100)={0x2, 0x4, 0xffffffffffffeff8, 0x0, 0x1, 0x10, 0x0, 0x200000}, 0x0, &(0x7f0000000240)={0x1f, 0x4000000000c, 0x615, 0x8000000000000000, 0x0, 0x6, 0x800, 0xa0000}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 855.832511ms ago: executing program 3 (id=4513): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioperm(0x1, 0x100b, 0xfffffffffffffff8) msgctl$MSG_STAT(0x0, 0xb, 0x0) 855.53842ms ago: executing program 3 (id=4515): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, 0x0, 0x70) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5, 0xa0300f10, 0x9, 0x8, 0x8, 0xd9, 0x0, 0x0, 0x10, 0xf}}, 0x50) read$FUSE(r1, 0x0, 0x0) 384.493833ms ago: executing program 2 (id=4536): socket(0x11, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x17}}, 0x3e) close(0x4) 384.37936ms ago: executing program 2 (id=4537): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x4000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 331.301388ms ago: executing program 2 (id=4538): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto(0xffffffffffffffff, 0x0, 0x0, 0xf1cf98fc23580374, 0x0, 0x0) 331.189068ms ago: executing program 4 (id=4539): r0 = eventfd(0x1) getgroups(0x0, &(0x7f0000000300)) fsetxattr$system_posix_acl(r0, &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {0x4, 0x7}, [], {0x10, 0x4}, {0x20, 0x2}}, 0x24, 0x2) 331.053862ms ago: executing program 4 (id=4540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003900000003"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/50}, 0x20) 331.009549ms ago: executing program 2 (id=4541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2b, 0x4, {0x2}}, 0x1c}}, 0x20000080) 278.12276ms ago: executing program 4 (id=4542): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b7, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f725616b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633b72fad6265a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329dffafc3612e325c1eb4a3ab2e156a97444800", "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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 277.927887ms ago: executing program 2 (id=4543): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x20882, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) 277.853403ms ago: executing program 4 (id=4544): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x1d, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000080000000000000000000852000007068010095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 266.453844ms ago: executing program 2 (id=4545): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet(0x2, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 213.146232ms ago: executing program 4 (id=4546): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8050000000007a100010000000007010000f8ffffffb702000008000000b703000000100000850000003b00000095"], &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 212.935442ms ago: executing program 4 (id=4547): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 169.083µs ago: executing program 5 (id=4548): semop(0x0, &(0x7f0000000080)=[{0x0, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f00000001c0)=[{0x3, 0x3, 0x1400}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) 0s ago: executing program 5 (id=4549): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x64}, 0x20) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) kernel console output (not intermixed with test programs): w: device registration error -23 [ 299.681901][ T40] audit: type=1400 audit(1765088908.864:100227): avc: denied { sqpoll } for pid=17870 comm="syz.4.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 299.732251][ T40] audit: type=1400 audit(1765088908.911:100228): avc: denied { map } for pid=17873 comm="syz.2.3445" path="pipe:[82187]" dev="pipefs" ino=82187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 299.744932][ T40] audit: type=1400 audit(1765088908.911:100229): avc: denied { execute } for pid=17873 comm="syz.2.3445" path="pipe:[82187]" dev="pipefs" ino=82187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 299.972891][ T8306] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.978436][ T8306] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.073114][ T8306] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.077558][ T8306] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.199769][ T8306] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.203008][ T8306] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.297084][ T8306] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.300755][ T8306] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.432035][ T8306] bridge_slave_0: left allmulticast mode [ 300.434178][ T8306] bridge_slave_0: left promiscuous mode [ 300.436388][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.972704][ T8306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.977166][ T8306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.981303][ T8306] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 300.984702][ T8306] tipc: Resetting bearer [ 300.990801][ T8306] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 300.995651][ T8306] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 301.003940][ T8306] tipc: Resetting bearer [ 301.006494][ T8306] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 301.010554][ T8306] bond0 (unregistering): Released all slaves [ 301.096426][T17897] ieee802154 phy1 wpan1: encryption failed: -22 [ 301.117872][T17897] xt_hashlimit: invalid interval [ 301.139814][ T8306] bond1 (unregistering): Released all slaves [ 301.228862][ T40] audit: type=1400 audit(1765088910.304:100230): avc: denied { ioctl } for pid=17898 comm="syz.0.3451" path="socket:[82986]" dev="sockfs" ino=82986 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 301.243607][ T8306] tipc: Disabling bearer [ 301.251922][ T8306] tipc: Left network mode [ 301.630476][ T8306] hsr_slave_0: left promiscuous mode [ 301.633533][ T8306] hsr_slave_1: left promiscuous mode [ 301.636474][ T8306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.639824][ T8306] batadv0: mtu less than device minimum [ 301.643477][ T8306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.649298][ T8306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.654480][ T8306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.659991][ T8306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.665276][ T8306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.670608][ T8306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.676306][ T8306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 301.696053][ T8306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.700690][ T8306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.723513][ T8306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.727483][ T8306] batman_adv: batadv0: Interface deactivated: dummy0 [ 301.730377][ T8306] batman_adv: batadv0: Removing interface: dummy0 [ 301.751811][ T8306] veth1_macvtap: left promiscuous mode [ 301.754458][ T8306] veth1_vlan: left promiscuous mode [ 301.759076][ T8306] veth0_vlan: left promiscuous mode [ 302.076109][ T5941] Bluetooth: hci2: command 0x0406 tx timeout [ 302.082665][T17875] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 302.304724][ T8306] team0 (unregistering): Port device team_slave_1 removed [ 302.349744][ T8306] team0 (unregistering): Port device team_slave_0 removed [ 302.941518][T17875] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 302.956345][T17875] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 302.958610][T17875] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 302.963057][T17875] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 302.969951][T17875] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.972525][T17875] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 302.976121][T17875] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 302.979635][T17875] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 302.983064][T17875] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 302.987136][T17875] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 303.072160][T17911] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 303.115359][T17903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.147350][T17920] netlink: 'syz.4.3458': attribute type 10 has an invalid length. [ 303.150005][T17920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3458'. [ 303.157488][T17920] team0: Port device geneve0 added [ 303.159718][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.163596][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.167962][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.171160][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.249678][T17903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.341777][T17903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.421857][T17903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.525539][ T1261] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.537383][ T1261] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.552142][ T1261] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.565489][ T1261] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.670500][T17930] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3460'. [ 303.682672][ T40] audit: type=1400 audit(1765088912.605:100231): avc: denied { setattr } for pid=17929 comm="syz.0.3460" name="file0" dev="9p" ino=73924687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 304.015489][T17934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3462'. [ 304.120477][T17946] autofs4:pid:17946:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 304.124721][T17946] autofs4:pid:17946:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 304.129376][T17946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26640 sclass=netlink_route_socket pid=17946 comm=syz.4.3467 [ 304.168766][T17951] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3469'. [ 304.170666][T17949] ptrace attach of "/syz-executor exec"[17952] was attempted by "/syz-executor exec"[17949] [ 304.208324][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3470'. [ 304.211318][T17958] netlink: 'syz.4.3470': attribute type 5 has an invalid length. [ 304.300226][ T5941] Bluetooth: hci2: command 0x0406 tx timeout [ 304.358535][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'. [ 304.361501][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'. [ 304.380267][ T40] audit: type=1400 audit(1765088913.259:100232): avc: denied { unmount } for pid=16982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 304.409075][T17984] vlan2: entered promiscuous mode [ 304.410880][T17984] bridge0: entered promiscuous mode [ 304.434460][T17986] netlink: 'syz.4.3479': attribute type 1 has an invalid length. [ 304.478169][ T40] audit: type=1400 audit(1765088913.344:100233): avc: denied { map } for pid=17990 comm="syz.2.3482" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 304.668709][ T6021] IPVS: starting estimator thread 0... [ 304.682916][ T40] audit: type=1400 audit(1765088913.540:100234): avc: denied { connect } for pid=18008 comm="syz.3.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 304.720295][T18016] netlink: 'syz.2.3489': attribute type 3 has an invalid length. [ 304.723355][T18016] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3489'. [ 304.760266][T18007] IPVS: using max 23 ests per chain, 55200 per kthread [ 304.765035][T18013] SELinux: ebitmap start bit (792985660) is not a multiple of the map unit size (64) [ 304.781397][T18013] SELinux: failed to load policy [ 305.059469][ T6020] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 305.130564][ T40] audit: type=1400 audit(1765088913.961:100235): avc: denied { accept } for pid=18042 comm="syz.4.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 305.137756][ T40] audit: type=1400 audit(1765088913.961:100236): avc: denied { write } for pid=18042 comm="syz.4.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 305.155441][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout [ 305.157953][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 305.159371][ T5947] Bluetooth: hci5: command 0x0c1a tx timeout [ 305.232990][ T6020] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 305.236584][ T6020] usb 7-1: config 0 interface 0 has no altsetting 0 [ 305.241389][ T6020] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 305.245146][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 305.248626][ T6020] usb 7-1: Product: syz [ 305.250714][ T6020] usb 7-1: Manufacturer: syz [ 305.252970][ T6020] usb 7-1: SerialNumber: syz [ 305.258139][ T6020] usb 7-1: config 0 descriptor?? [ 305.265190][ T6020] usb 7-1: selecting invalid altsetting 0 [ 305.476071][T18027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.478985][T18027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.482065][T18027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.484942][T18027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.488237][T18027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.491242][T18027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.494609][T18027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.498014][T18027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.501073][T18027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.503863][T18027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.515642][ T9801] usb 7-1: USB disconnect, device number 5 [ 306.152783][ T40] audit: type=1400 audit(1765088914.915:100237): avc: denied { ioctl } for pid=18056 comm="syz.2.3501" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 307.379811][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 307.379889][ T5941] Bluetooth: hci5: command 0x0c1a tx timeout [ 307.390043][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.636479][ T12] wlan0: Trigger new scan to find an IBSS to join [ 308.202112][T18076] Bluetooth: hci0: unsupported parameter 255 [ 308.204769][T18076] Bluetooth: hci0: unsupported parameter 255 [ 308.212855][T18076] netlink: 'syz.2.3508': attribute type 1 has an invalid length. [ 308.215840][T18076] netlink: 'syz.2.3508': attribute type 1 has an invalid length. [ 309.077830][ T40] audit: type=1400 audit(1765088917.646:100238): avc: denied { mount } for pid=18083 comm="syz.2.3511" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 309.086899][ T40] audit: type=1400 audit(1765088917.655:100239): avc: denied { watch } for pid=18083 comm="syz.2.3511" path="/94/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 309.179654][ T40] audit: type=1400 audit(1765088917.749:100240): avc: denied { unmount } for pid=16982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 309.260596][T18097] netlink: 'syz.3.3515': attribute type 1 has an invalid length. [ 309.263579][T18097] netlink: 'syz.3.3515': attribute type 4 has an invalid length. [ 309.266168][T18097] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3515'. [ 309.404633][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3517'. [ 309.445852][T18095] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 309.448633][T18095] SELinux: failed to load policy [ 309.581362][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3522'. [ 309.603648][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 309.603669][ T5947] Bluetooth: hci5: command 0x0c1a tx timeout [ 309.614513][ T5947] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.202901][ T40] audit: type=1400 audit(1765088918.702:100241): avc: denied { bind } for pid=18154 comm="syz.3.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.451384][T18162] kvm_intel: kvm [18161]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x801 [ 310.471987][T18173] netlink: 'syz.3.3539': attribute type 1 has an invalid length. [ 310.484667][T18173] bond2: entered promiscuous mode [ 310.486640][T18173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.502693][T18173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.507669][T18173] bond2: (slave bond3): making interface the new active one [ 310.510082][T18173] bond3: entered promiscuous mode [ 310.512311][T18173] bond2: (slave bond3): Enslaving as an active interface with an up link [ 310.516921][T18173] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3539'. [ 310.523020][T18162] syzkaller1: entered promiscuous mode [ 310.524760][T18162] syzkaller1: entered allmulticast mode [ 310.835310][ T40] audit: type=1400 audit(1765088919.301:100242): avc: denied { ioctl } for pid=18192 comm="syz.3.3544" path="/dev/usbmon3" dev="devtmpfs" ino=746 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 310.867013][T18195] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 310.886592][ T8292] wlan0: Trigger new scan to find an IBSS to join [ 311.497599][T18218] netlink: 'syz.0.3555': attribute type 10 has an invalid length. [ 311.508006][T18218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.513700][T18218] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 311.526045][T18220] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3556'. [ 311.593422][T18223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3557'. [ 311.703987][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3559'. [ 311.709381][T18229] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 311.723918][T18230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3559'. [ 311.805016][ T40] audit: type=1400 audit(1765088920.199:100243): avc: denied { setopt } for pid=18238 comm="syz.2.3562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 311.809723][T18239] ipvlan2: entered allmulticast mode [ 311.813775][T18239] team0: entered allmulticast mode [ 311.815513][T18239] team_slave_0: entered allmulticast mode [ 311.817500][T18239] team_slave_1: entered allmulticast mode [ 311.820356][T18239] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 311.890808][T18242] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3561'. [ 311.896661][T18242] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3561'. [ 312.169637][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 312.340628][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 312.343955][ T9] usb 7-1: config 7 has an invalid interface number: 210 but max is 3 [ 312.346522][ T9] usb 7-1: config 7 has an invalid interface number: 122 but max is 3 [ 312.349181][ T9] usb 7-1: config 7 has an invalid interface number: 72 but max is 3 [ 312.351815][ T9] usb 7-1: config 7 has an invalid interface number: 172 but max is 3 [ 312.354333][ T9] usb 7-1: config 7 has an invalid descriptor of length 127, skipping remainder of the config [ 312.357610][ T9] usb 7-1: config 7 has 5 interfaces, different from the descriptor's value: 4 [ 312.360457][ T9] usb 7-1: config 7 has no interface number 1 [ 312.362427][ T9] usb 7-1: config 7 has no interface number 2 [ 312.364335][ T9] usb 7-1: config 7 has no interface number 3 [ 312.366236][ T9] usb 7-1: config 7 has no interface number 4 [ 312.369495][ T9] usb 7-1: config 7 interface 0 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 312.372928][ T9] usb 7-1: config 7 interface 0 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 312.376226][ T9] usb 7-1: config 7 interface 0 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 312.379544][ T9] usb 7-1: config 7 interface 0 altsetting 4 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 312.382980][ T9] usb 7-1: config 7 interface 0 altsetting 4 bulk endpoint 0xA has invalid maxpacket 1023 [ 312.386650][ T9] usb 7-1: config 7 interface 0 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 312.390646][ T9] usb 7-1: config 7 interface 210 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 312.394746][ T9] usb 7-1: config 7 interface 210 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 312.398100][ T9] usb 7-1: config 7 interface 210 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 312.401569][ T9] usb 7-1: config 7 interface 210 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 312.405023][ T9] usb 7-1: config 7 interface 210 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 312.408322][ T9] usb 7-1: config 7 interface 210 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 312.411619][ T9] usb 7-1: config 7 interface 210 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 312.415460][ T9] usb 7-1: config 7 interface 210 altsetting 1 endpoint 0xB has an invalid bInterval 30, changing to 8 [ 312.418864][ T9] usb 7-1: config 7 interface 210 altsetting 1 has an endpoint descriptor with address 0x5B, changing to 0xB [ 312.422425][ T9] usb 7-1: config 7 interface 210 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 312.425802][ T9] usb 7-1: config 7 interface 210 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 312.429172][ T9] usb 7-1: config 7 interface 210 altsetting 1 has 12 endpoint descriptors, different from the interface descriptor's value: 13 [ 312.433264][ T9] usb 7-1: too many endpoints for config 7 interface 122 altsetting 196: 130, using maximum allowed: 30 [ 312.436924][ T9] usb 7-1: config 7 interface 122 altsetting 196 has a duplicate endpoint with address 0x3, skipping [ 312.440328][ T9] usb 7-1: config 7 interface 122 altsetting 196 has a duplicate endpoint with address 0x4, skipping [ 312.443641][ T9] usb 7-1: config 7 interface 122 altsetting 196 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 312.447885][ T9] usb 7-1: config 7 interface 72 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 312.451185][ T9] usb 7-1: config 7 interface 172 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.455274][ T9] usb 7-1: config 7 interface 0 has no altsetting 0 [ 312.457393][ T9] usb 7-1: config 7 interface 210 has no altsetting 0 [ 312.459579][ T9] usb 7-1: config 7 interface 122 has no altsetting 0 [ 312.461762][ T9] usb 7-1: config 7 interface 72 has no altsetting 0 [ 312.463870][ T9] usb 7-1: config 7 interface 172 has no altsetting 0 [ 312.467915][ T9] usb 7-1: Dual-Role OTG device on HNP port [ 312.471547][ T9] usb 7-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=f0.e8 [ 312.474310][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.476762][ T9] usb 7-1: Product: 䉶윹藽鈟紤瓉ꠣᅘ캃௩睩첚翔⽛艆俍⼘ü懺竞綱칩䒃靋哝錐蟖땺鍜䩝偁杘ᇿ퍙ቤ捡毹붂ꥇ럳ṧ簨弔諻뵩쫗塞뚿ꋮ⡏ꞕ㨐饹煌⥍ꓼ铠铸辳漋᜔ᇘ셨腈䵽쓋㝀┯♍焨颴熯৸ᤗ뷪⧲尝윰⮪篰쯇삾⧎졁࣏魞肮鞽ꖰ織椎漺虺煵䍽דּ铳䷸꣼뤖缼㷈ꤐ웼緋䜱 [ 312.487301][ T9] usb 7-1: Manufacturer: Ф [ 312.488783][ T9] usb 7-1: SerialNumber: 槙執쎀隙쏀궺툗膍夦୑奯ᦣ魳ꢔԽ㭞窣⮭쨃쾂㊲瘈跜豓⹲蝋⅜슏뎳ח䕡괪퐧價魯㞡鿆睟齗ꛋ▱෿⪡๎槎⩱㪊ꦌ緿疂䬩臠⅙ㆿ㋜ [ 312.497232][T18250] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 312.929910][T18250] netlink: 'syz.2.3564': attribute type 39 has an invalid length. [ 312.987867][ T5941] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 313.524759][ T9] usb 7-1: USB disconnect, device number 6 [ 314.137409][ T8303] wlan0: Trigger new scan to find an IBSS to join [ 314.147678][ T5941] Bluetooth: hci4: command 0x0c1a tx timeout [ 314.350757][T18287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18287 comm=syz.4.3573 [ 314.374256][T18290] netlink: 'syz.3.3574': attribute type 21 has an invalid length. [ 314.499096][T18299] CIFS mount error: No usable UNC path provided in device string! [ 314.499096][T18299] [ 314.505538][T18299] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 314.509131][T18299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18299 comm=syz.3.3578 [ 314.517170][ T40] audit: type=1326 audit(1765088922.743:100244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.525336][ T40] audit: type=1326 audit(1765088922.743:100245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.533962][ T40] audit: type=1326 audit(1765088922.743:100246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.542986][ T40] audit: type=1326 audit(1765088922.743:100247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.553973][ T40] audit: type=1326 audit(1765088922.743:100248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.563100][ T40] audit: type=1326 audit(1765088922.743:100249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.584894][ T40] audit: type=1326 audit(1765088922.743:100250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.593952][ T40] audit: type=1326 audit(1765088922.743:100251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.602865][ T40] audit: type=1326 audit(1765088922.743:100252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.611701][ T40] audit: type=1326 audit(1765088922.743:100253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.3.3578" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 314.699383][T18311] xt_TCPMSS: Only works on TCP SYN packets [ 314.877580][T18327] __nla_validate_parse: 4 callbacks suppressed [ 314.877593][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'. [ 314.930253][T18338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3592'. [ 314.943675][T18340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3593'. [ 315.165881][ T8306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.170749][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3596'. [ 315.206797][T18357] net_ratelimit: 34 callbacks suppressed [ 315.206817][T18357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.376746][T18376] bad cache= option: nonw [ 315.376746][T18376] [ 315.377045][T18377] bad cache= option: nonw [ 315.377045][T18377] [ 315.381043][T18376] CIFS: VFS: bad cache= option: nonw [ 315.382022][T18377] CIFS: VFS: bad cache= option: nonw [ 315.424663][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3606'. [ 315.428337][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3606'. [ 316.404355][T18403] kvm: user requested TSC rate below hardware speed [ 316.442626][T18403] kvm: kvm [18402]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 316.447689][T18403] kvm: kvm [18402]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 316.504545][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3613'. [ 316.510354][T18409] xfrm1: entered promiscuous mode [ 316.512303][T18409] xfrm1: entered allmulticast mode [ 316.612974][T18413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.616029][T18413] IPv6: NLM_F_CREATE should be set when creating new route [ 316.618701][T18413] IPv6: NLM_F_CREATE should be set when creating new route [ 316.621702][T18413] IPv6: NLM_F_CREATE should be set when creating new route [ 316.624992][T18414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.666989][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 317.678317][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 317.682028][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 318.200090][ T9801] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 318.272895][T18453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 318.381896][ T9801] usb 5-1: Using ep0 maxpacket: 8 [ 318.385877][ T9801] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.390079][ T9801] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 318.395751][ T9801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.401196][ T9801] usb 5-1: config 0 descriptor?? [ 318.607328][T18475] Bluetooth: MGMT ver 1.23 [ 318.621183][ T9801] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 318.834625][ T6020] usb 5-1: USB disconnect, device number 2 [ 319.272507][T18513] FAULT_INJECTION: forcing a failure. [ 319.272507][T18513] name failslab, interval 1, probability 0, space 0, times 0 [ 319.276591][T18513] CPU: 0 UID: 0 PID: 18513 Comm: syz.4.3644 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.276609][T18513] Tainted: [L]=SOFTLOCKUP [ 319.276614][T18513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.276621][T18513] Call Trace: [ 319.276625][T18513] [ 319.276630][T18513] dump_stack_lvl+0x16c/0x1f0 [ 319.276668][T18513] should_fail_ex+0x512/0x640 [ 319.276684][T18513] ? fs_reclaim_acquire+0xae/0x150 [ 319.276702][T18513] should_failslab+0xc2/0x120 [ 319.276717][T18513] __kmalloc_noprof+0xeb/0x910 [ 319.276734][T18513] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 319.276748][T18513] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 319.276758][T18513] tomoyo_realpath_from_path+0xc2/0x6e0 [ 319.276770][T18513] ? tomoyo_profile+0x47/0x60 [ 319.276786][T18513] tomoyo_path_number_perm+0x245/0x580 [ 319.276802][T18513] ? tomoyo_path_number_perm+0x237/0x580 [ 319.276819][T18513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 319.276835][T18513] ? find_held_lock+0x2b/0x80 [ 319.276864][T18513] ? find_held_lock+0x2b/0x80 [ 319.276880][T18513] ? hook_file_ioctl_common+0x144/0x410 [ 319.276896][T18513] ? __fget_files+0x20e/0x3c0 [ 319.276914][T18513] security_file_ioctl+0x9b/0x240 [ 319.276933][T18513] __x64_sys_ioctl+0xb7/0x210 [ 319.276947][T18513] do_syscall_64+0xcd/0xf80 [ 319.276963][T18513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.276974][T18513] RIP: 0033:0x7fe432f8f7c9 [ 319.276984][T18513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.276995][T18513] RSP: 002b:00007fe433dcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.277006][T18513] RAX: ffffffffffffffda RBX: 00007fe4331e6090 RCX: 00007fe432f8f7c9 [ 319.277013][T18513] RDX: 0000000000000000 RSI: 0000000000004141 RDI: 0000000000000005 [ 319.277019][T18513] RBP: 00007fe433dcc090 R08: 0000000000000000 R09: 0000000000000000 [ 319.277026][T18513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.277032][T18513] R13: 00007fe4331e6128 R14: 00007fe4331e6090 R15: 00007ffc5064dc38 [ 319.277047][T18513] [ 319.277051][T18513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.380033][T18515] fuse: Bad value for 'user_id' [ 319.382252][T18515] fuse: Bad value for 'user_id' [ 319.492239][T18521] kvm: user requested TSC rate below hardware speed [ 319.499249][T18521] kvm: user requested TSC rate below hardware speed [ 319.879925][T18537] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 319.937843][ T40] kauditd_printk_skb: 662 callbacks suppressed [ 319.937854][ T40] audit: type=1400 audit(1765088927.812:100916): avc: denied { create } for pid=18542 comm="syz.2.3654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 320.030296][T18551] netlink: 'syz.0.3657': attribute type 126 has an invalid length. [ 320.033829][T18552] netlink: 'syz.0.3657': attribute type 126 has an invalid length. [ 320.158053][T18560] FAULT_INJECTION: forcing a failure. [ 320.158053][T18560] name failslab, interval 1, probability 0, space 0, times 0 [ 320.163348][T18560] CPU: 2 UID: 0 PID: 18560 Comm: syz.3.3655 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.163378][T18560] Tainted: [L]=SOFTLOCKUP [ 320.163385][T18560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.163396][T18560] Call Trace: [ 320.163403][T18560] [ 320.163411][T18560] dump_stack_lvl+0x16c/0x1f0 [ 320.163440][T18560] should_fail_ex+0x512/0x640 [ 320.163461][T18560] ? fs_reclaim_acquire+0xae/0x150 [ 320.163489][T18560] should_failslab+0xc2/0x120 [ 320.163513][T18560] __kmalloc_noprof+0xeb/0x910 [ 320.163563][T18560] ? tomoyo_encode2+0x100/0x3e0 [ 320.163585][T18560] ? tomoyo_encode2+0x100/0x3e0 [ 320.163600][T18560] tomoyo_encode2+0x100/0x3e0 [ 320.163621][T18560] tomoyo_encode+0x29/0x50 [ 320.163636][T18560] tomoyo_realpath_from_path+0x18f/0x6e0 [ 320.163662][T18560] tomoyo_path_number_perm+0x245/0x580 [ 320.163686][T18560] ? tomoyo_path_number_perm+0x237/0x580 [ 320.163713][T18560] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.163740][T18560] ? find_held_lock+0x2b/0x80 [ 320.163797][T18560] ? find_held_lock+0x2b/0x80 [ 320.163823][T18560] ? hook_file_ioctl_common+0x144/0x410 [ 320.163850][T18560] ? __fget_files+0x20e/0x3c0 [ 320.163881][T18560] security_file_ioctl+0x9b/0x240 [ 320.163912][T18560] __x64_sys_ioctl+0xb7/0x210 [ 320.163937][T18560] do_syscall_64+0xcd/0xf80 [ 320.163963][T18560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.163981][T18560] RIP: 0033:0x7f8f3858f7c9 [ 320.163997][T18560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.164014][T18560] RSP: 002b:00007f8f393f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.164033][T18560] RAX: ffffffffffffffda RBX: 00007f8f387e6090 RCX: 00007f8f3858f7c9 [ 320.164045][T18560] RDX: 0000000000000000 RSI: 0000000000004141 RDI: 0000000000000005 [ 320.164056][T18560] RBP: 00007f8f393f2090 R08: 0000000000000000 R09: 0000000000000000 [ 320.164067][T18560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.164078][T18560] R13: 00007f8f387e6128 R14: 00007f8f387e6090 R15: 00007ffda06ca7c8 [ 320.164104][T18560] [ 320.164122][T18560] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.197183][T18562] nbd: socks must be embedded in a SOCK_ITEM attr [ 320.492361][T18583] netlink: 'syz.4.3665': attribute type 64 has an invalid length. [ 320.495464][T18583] netlink: 'syz.4.3665': attribute type 4 has an invalid length. [ 320.498227][T18583] __nla_validate_parse: 4 callbacks suppressed [ 320.498237][T18583] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3665'. [ 320.571308][T18591] FAULT_INJECTION: forcing a failure. [ 320.571308][T18591] name failslab, interval 1, probability 0, space 0, times 0 [ 320.578208][T18591] CPU: 3 UID: 0 PID: 18591 Comm: syz.4.3668 Tainted: G L syzkaller #0 PREEMPT(full) [ 320.578237][T18591] Tainted: [L]=SOFTLOCKUP [ 320.578244][T18591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 320.578254][T18591] Call Trace: [ 320.578260][T18591] [ 320.578267][T18591] dump_stack_lvl+0x16c/0x1f0 [ 320.578294][T18591] should_fail_ex+0x512/0x640 [ 320.578313][T18591] ? fs_reclaim_acquire+0xae/0x150 [ 320.578337][T18591] should_failslab+0xc2/0x120 [ 320.578360][T18591] __kmalloc_noprof+0xeb/0x910 [ 320.578385][T18591] ? tomoyo_encode2+0x100/0x3e0 [ 320.578404][T18591] ? tomoyo_encode2+0x100/0x3e0 [ 320.578419][T18591] tomoyo_encode2+0x100/0x3e0 [ 320.578437][T18591] tomoyo_encode+0x29/0x50 [ 320.578452][T18591] tomoyo_realpath_from_path+0x18f/0x6e0 [ 320.578474][T18591] tomoyo_path_number_perm+0x245/0x580 [ 320.578496][T18591] ? tomoyo_path_number_perm+0x237/0x580 [ 320.578521][T18591] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.578546][T18591] ? find_held_lock+0x2b/0x80 [ 320.578591][T18591] ? find_held_lock+0x2b/0x80 [ 320.578614][T18591] ? hook_file_ioctl_common+0x144/0x410 [ 320.578635][T18591] ? __fget_files+0x20e/0x3c0 [ 320.578664][T18591] security_file_ioctl+0x9b/0x240 [ 320.578691][T18591] __x64_sys_ioctl+0xb7/0x210 [ 320.578711][T18591] do_syscall_64+0xcd/0xf80 [ 320.578734][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.578751][T18591] RIP: 0033:0x7fe432f8f7c9 [ 320.578765][T18591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.578781][T18591] RSP: 002b:00007fe433ded038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.578797][T18591] RAX: ffffffffffffffda RBX: 00007fe4331e5fa0 RCX: 00007fe432f8f7c9 [ 320.578808][T18591] RDX: 0000000000000000 RSI: 0000000000004141 RDI: 0000000000000004 [ 320.578818][T18591] RBP: 00007fe433ded090 R08: 0000000000000000 R09: 0000000000000000 [ 320.578828][T18591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.578837][T18591] R13: 00007fe4331e6038 R14: 00007fe4331e5fa0 R15: 00007ffc5064dc38 [ 320.578869][T18591] [ 320.578884][T18591] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.588617][ T40] audit: type=1400 audit(1765088928.420:100917): avc: denied { mounton } for pid=18586 comm="syz.3.3666" path="/262/file0/file0" dev="9p" ino=73924687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 320.682960][T18598] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 320.694279][T18598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.702243][T18595] gfs2: not a GFS2 filesystem [ 320.702402][T18598] vhci_hcd vhci_hcd.0: Device attached [ 320.759481][T18599] vhci_hcd: cannot find a urb of seqnum 226 max seqnum 0 [ 320.761967][ T96] vhci_hcd: stop threads [ 320.764031][ T96] vhci_hcd: release socket [ 320.766078][ T96] vhci_hcd: disconnect device [ 320.914685][T18611] mkiss: ax0: crc mode is auto. [ 321.021370][T18620] veth0_to_bridge: entered promiscuous mode [ 321.043000][T18618] veth0_to_bridge: left promiscuous mode [ 321.051589][T18611] ubi31: attaching mtd0 [ 321.057715][T18611] ubi31: scanning is finished [ 321.060118][T18611] ubi31: empty MTD device detected [ 321.136026][T18627] FAULT_INJECTION: forcing a failure. [ 321.136026][T18627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.144685][T18627] CPU: 3 UID: 0 PID: 18627 Comm: syz.3.3680 Tainted: G L syzkaller #0 PREEMPT(full) [ 321.144715][T18627] Tainted: [L]=SOFTLOCKUP [ 321.144721][T18627] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 321.144731][T18627] Call Trace: [ 321.144738][T18627] [ 321.144746][T18627] dump_stack_lvl+0x16c/0x1f0 [ 321.144777][T18627] should_fail_ex+0x512/0x640 [ 321.144800][T18627] _copy_from_user+0x2e/0xd0 [ 321.144823][T18627] kstrtouint_from_user+0xd6/0x1d0 [ 321.144854][T18627] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 321.144877][T18627] ? __lock_acquire+0x436/0x2890 [ 321.144903][T18627] ? lock_acquire+0x179/0x330 [ 321.144931][T18627] proc_fail_nth_write+0x83/0x220 [ 321.144951][T18627] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 321.144977][T18627] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 321.144997][T18627] vfs_write+0x2a0/0x11d0 [ 321.145021][T18627] ? __pfx___mutex_lock+0x10/0x10 [ 321.145049][T18627] ? __pfx_vfs_write+0x10/0x10 [ 321.145079][T18627] ? __fget_files+0x20e/0x3c0 [ 321.145113][T18627] ksys_write+0x12a/0x250 [ 321.145135][T18627] ? __pfx_ksys_write+0x10/0x10 [ 321.145160][T18627] ? fput+0x70/0xf0 [ 321.145192][T18627] do_syscall_64+0xcd/0xf80 [ 321.145219][T18627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.145237][T18627] RIP: 0033:0x7f8f3858e27f [ 321.145252][T18627] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 321.145270][T18627] RSP: 002b:00007f8f39413030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 321.145288][T18627] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f3858e27f [ 321.145301][T18627] RDX: 0000000000000001 RSI: 00007f8f394130a0 RDI: 0000000000000005 [ 321.145312][T18627] RBP: 00007f8f39413090 R08: 0000000000000000 R09: 0000000000000000 [ 321.145324][T18627] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 321.145336][T18627] R13: 00007f8f387e6038 R14: 00007f8f387e5fa0 R15: 00007ffda06ca7c8 [ 321.145364][T18627] [ 321.314904][ T40] audit: type=1400 audit(1765088929.102:100918): avc: denied { getopt } for pid=18633 comm="syz.0.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.317021][T18611] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 321.327610][T18611] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 321.330729][T18611] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 321.335393][T18611] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 321.339767][T18611] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 321.342678][T18611] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 321.346418][T18611] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4064742942 [ 321.350911][T18611] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 321.360257][T18640] ubi31: background thread "ubi_bgt31d" started, PID 18640 [ 321.559153][T18674] batman_adv: batadv0: Adding interface: gretap2 [ 321.561671][T18674] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.573395][T18674] batman_adv: batadv0: Interface activated: gretap2 [ 321.697484][T18687] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 321.755923][T18697] program syz.4.3700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.833334][T18705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3704'. [ 321.853128][T18708] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3704'. [ 321.928846][T18714] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3706'. [ 322.046450][T18727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3708'. [ 322.108697][T18731] binder_alloc: 18728: binder_alloc_buf, no vma [ 322.111386][ T40] audit: type=1400 audit(1765088929.841:100919): avc: denied { setopt } for pid=18728 comm="syz.3.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 322.114778][T18728] delete_channel: no stack [ 322.118852][ T40] audit: type=1400 audit(1765088929.851:100920): avc: denied { listen } for pid=18730 comm="syz.0.3711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 322.127358][ T40] audit: type=1400 audit(1765088929.851:100921): avc: denied { remount } for pid=18729 comm="syz.2.3710" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.141489][ T40] audit: type=1400 audit(1765088929.869:100922): avc: denied { unmount } for pid=16982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 322.177638][ T40] audit: type=1400 audit(1765088929.897:100923): avc: denied { ioctl } for pid=18741 comm="syz.2.3712" path="cgroup:[4026534606]" dev="nsfs" ino=4026534606 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 322.389106][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3718'. [ 322.430034][T18771] hsr_slave_0 (unregistering): left promiscuous mode [ 322.444740][T18775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3718'. [ 322.571463][ T40] audit: type=1400 audit(1765088930.271:100924): avc: denied { map } for pid=18779 comm="syz.3.3722" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 323.492308][ T40] audit: type=1326 audit(1765088931.132:100925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18794 comm="syz.2.3728" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19d9b8f7c9 code=0x0 [ 323.568422][T18802] binder: 18801:18802 ioctl ae41 0 returned -22 [ 323.778474][T18809] orangefs: client-core tried to read wrong size [ 323.843424][T18812] netlink: 'syz.2.3732': attribute type 11 has an invalid length. [ 324.146740][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.150654][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.281728][T18823] netlink: 'syz.2.3735': attribute type 4 has an invalid length. [ 324.292309][T18823] netlink: 'syz.2.3735': attribute type 4 has an invalid length. [ 324.840376][T18831] xt_TCPMSS: Only works on TCP SYN packets [ 324.884136][T18831] 8021q: VLANs not supported on ip_vti0 [ 325.554339][ T46] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.690304][ T46] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.748332][ T46] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.765800][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.771982][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.776978][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.781069][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.784638][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.817737][ T46] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.991271][T18866] set match dimension is over the limit! [ 326.005751][ T46] bridge_slave_1: left allmulticast mode [ 326.008195][ T46] bridge_slave_1: left promiscuous mode [ 326.010687][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.022948][ T46] bridge_slave_0: left allmulticast mode [ 326.025356][ T46] bridge_slave_0: left promiscuous mode [ 326.030033][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.422106][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.429132][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.435385][ T46] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 326.440894][ T46] bond0 (unregistering): Released all slaves [ 326.534279][T18854] chnl_net:caif_netlink_parms(): no params data found [ 326.629676][T18854] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.632894][T18854] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.636116][T18854] bridge_slave_0: entered allmulticast mode [ 326.640337][T18854] bridge_slave_0: entered promiscuous mode [ 326.660453][T18854] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.663523][T18854] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.666661][T18854] bridge_slave_1: entered allmulticast mode [ 326.670981][T18854] bridge_slave_1: entered promiscuous mode [ 326.737411][T18854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.749909][T18854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.771049][T18903] netlink: 'syz.4.3755': attribute type 10 has an invalid length. [ 326.781623][T18903] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.784569][T18903] team0: entered promiscuous mode [ 326.787926][T18903] team_slave_0: entered promiscuous mode [ 326.789853][T18903] team_slave_1: entered promiscuous mode [ 326.791729][T18903] geneve0: entered promiscuous mode [ 326.793776][T18903] bond0: (slave team0): Enslaving as an active interface with an up link [ 326.799914][T18854] team0: Port device team_slave_0 added [ 326.812143][T18854] team0: Port device team_slave_1 added [ 326.848108][T18909] netlink: 'syz.4.3756': attribute type 3 has an invalid length. [ 326.851669][T18909] netlink: 'syz.4.3756': attribute type 1 has an invalid length. [ 326.854223][T18909] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3756'. [ 326.870351][T18909] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 326.873397][T18854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.875840][T18854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.886263][ T1261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.903710][T18854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.908301][T18854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.910397][T18854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.919877][T18854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.923075][T18913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3758'. [ 326.926988][T18913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18913 comm=syz.4.3758 [ 326.931009][T18913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2571 sclass=netlink_tcpdiag_socket pid=18913 comm=syz.4.3758 [ 326.934834][T18913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2569 sclass=netlink_tcpdiag_socket pid=18913 comm=syz.4.3758 [ 326.939265][T18913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=18913 comm=syz.4.3758 [ 326.943275][ T46] hsr_slave_0: left promiscuous mode [ 326.945781][ T46] hsr_slave_1: left promiscuous mode [ 326.948067][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.950507][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.953839][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.956207][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.965172][T18917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3760'. [ 326.968771][ T46] batman_adv: batadv0: Removing interface: vlan2 [ 326.984629][ T46] veth1_macvtap: left promiscuous mode [ 326.986446][ T46] veth0_macvtap: left promiscuous mode [ 326.988242][ T46] veth1_vlan: left promiscuous mode [ 326.991032][ T46] veth0_vlan: left promiscuous mode [ 327.432193][ T46] team0 (unregistering): Port device team_slave_1 removed [ 327.468483][ T46] team0 (unregistering): Port device team_slave_0 removed [ 327.860712][T18854] hsr_slave_0: entered promiscuous mode [ 327.864092][T18854] hsr_slave_1: entered promiscuous mode [ 327.878332][ T6020] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 327.904294][T18934] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 327.945888][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 327.947086][T18939] vivid-003: disconnect [ 327.951344][T18936] tipc: Enabled bearer , priority 0 [ 327.953283][T18937] vivid-003: reconnect [ 327.959707][T18936] syzkaller0: entered promiscuous mode [ 327.961663][T18936] syzkaller0: entered allmulticast mode [ 327.988407][T18936] tipc: Resetting bearer [ 328.005158][ T5947] Bluetooth: hci4: command tx timeout [ 328.067737][T18935] tipc: Resetting bearer [ 328.078094][T18935] tipc: Disabling bearer [ 328.080195][ T6020] usb 7-1: Using ep0 maxpacket: 32 [ 328.092028][ T6020] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 328.097416][ T6020] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 328.100738][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 328.105161][ T6020] usb 7-1: Product: syz [ 328.106525][ T6020] usb 7-1: Manufacturer: syz [ 328.106874][ T46] IPVS: stop unused estimator thread 0... [ 328.108071][ T6020] usb 7-1: SerialNumber: syz [ 328.110421][ T6020] usb 7-1: config 0 descriptor?? [ 328.115093][T18925] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 328.342623][ T6020] usb 7-1: USB disconnect, device number 7 [ 328.370803][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 328.370820][ T40] audit: type=1400 audit(1765088935.696:100927): avc: denied { mount } for pid=18964 comm="syz.3.3773" name="/" dev="rpc_pipefs" ino=88571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 328.412871][ T40] audit: type=1400 audit(1765088935.696:100928): avc: denied { mounton } for pid=18964 comm="syz.3.3773" path="/292/file0" dev="rpc_pipefs" ino=88571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 328.507522][T18981] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3775'. [ 328.563798][ T40] audit: type=1400 audit(1765088935.883:100929): avc: denied { unmount } for pid=14753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 328.565619][T18988] tipc: Trying to set illegal importance in message [ 328.647644][ T40] audit: type=1400 audit(1765088935.958:100930): avc: denied { watch watch_reads } for pid=18993 comm="syz.3.3777" path="pipe:[86739]" dev="pipefs" ino=86739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 328.650735][T18854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.667749][T18854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.677783][T18854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.700063][T18854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.731489][ T40] audit: type=1326 audit(1765088936.033:100931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19005 comm="syz.4.3779" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe432f8f7c9 code=0x7f7f0000 [ 328.755005][T19008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3780'. [ 328.771748][T18854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.787506][T18854] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.792745][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.795562][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.817619][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.819956][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.001335][T18854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.044326][ T40] audit: type=1400 audit(1765088936.332:100932): avc: denied { write } for pid=19029 comm="syz.2.3783" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 329.088549][T18854] veth0_vlan: entered promiscuous mode [ 329.098777][T18854] veth1_vlan: entered promiscuous mode [ 329.123017][T18854] veth0_macvtap: entered promiscuous mode [ 329.130192][T18854] veth1_macvtap: entered promiscuous mode [ 329.145642][T18854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.152297][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'. [ 329.155496][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3786'. [ 329.158780][T18854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.168881][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.200434][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.204975][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.209991][ T1147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.279392][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.282092][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.297557][ T8304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.300431][ T8304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.321421][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3786'. [ 329.324778][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3786'. [ 329.339694][T19054] loop4: detected capacity change from 0 to 2560 [ 329.347312][T19054] buffer_io_error: 5455 callbacks suppressed [ 329.347328][T19054] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 329.352649][T19054] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 329.496464][T19066] netlink: 'syz.3.3790': attribute type 10 has an invalid length. [ 329.509394][T19066] team0: Port device dummy0 added [ 329.626391][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.690092][T19084] netlink: 'syz.3.3794': attribute type 1 has an invalid length. [ 329.727220][T19084] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.728927][T19088] overlayfs: conflicting options: nfs_export=on,index=off [ 329.741751][T19084] bond5: (slave erspan1): making interface the new active one [ 329.746222][T19084] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 329.747748][T19089] usb usb9: usbfs: process 19089 (syz.2.3795) did not claim interface 47 before use [ 329.846013][T19095] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19095 comm=syz.3.3797 [ 329.927964][ T40] audit: type=1400 audit(1765088937.145:100933): avc: denied { bind } for pid=19109 comm="syz.4.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 329.956357][ T40] audit: type=1400 audit(1765088937.183:100934): avc: denied { transfer } for pid=19096 comm="syz.2.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 330.106066][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.152767][T19128] bond0 (unregistering): left promiscuous mode [ 330.156028][T19128] bond_slave_0: left promiscuous mode [ 330.158075][T19128] bond_slave_1: left promiscuous mode [ 330.160079][T19128] batadv0: left promiscuous mode [ 330.161858][T19128] team0: left promiscuous mode [ 330.163513][T19128] team_slave_0: left promiscuous mode [ 330.166767][T19128] team_slave_1: left promiscuous mode [ 330.168721][T19128] geneve0: left promiscuous mode [ 330.171816][T19128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.175822][T19128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.179996][T19128] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 330.184337][T19128] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 330.190901][T19128] bond0 (unregistering): (slave team0): Releasing backup interface [ 330.196386][T19128] bond0 (unregistering): Released all slaves [ 330.218571][ T5947] Bluetooth: hci4: command tx timeout [ 330.304928][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.692611][T19154] afs: Unknown parameter 'Xn' [ 330.758647][T19157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.763766][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.825884][T19165] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 330.927167][T19174] overlayfs: failed to resolve './file1/file0': -2 [ 330.932456][ T40] audit: type=1326 audit(1765088938.090:100935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19173 comm="syz.2.3819" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19d9b8f7c9 code=0x0 [ 331.008121][ T1147] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.011631][T19185] binder: Unknown parameter 'st' [ 331.011642][ T40] audit: type=1400 audit(1765088938.165:100936): avc: denied { remount } for pid=19175 comm="syz.1.3820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 331.012957][ T1147] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.028018][ T1147] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.032204][ T1147] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.192074][T19197] siw: device registration error -23 [ 331.520629][T19208] vlan2: entered allmulticast mode [ 331.520648][T19208] veth0_to_bond: entered allmulticast mode [ 331.920234][T19224] random: crng reseeded on system resumption [ 331.989267][T19227] usb usb8: check_ctrlrecip: process 19227 (syz.1.3834) requesting ep 01 but needs 81 [ 331.989298][T19227] usb usb8: usbfs: process 19227 (syz.1.3834) did not claim interface 0 before use [ 331.990005][T19227] netlink: 'syz.1.3834': attribute type 1 has an invalid length. [ 332.008054][T19226] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 332.008382][T19226] block device autoloading is deprecated and will be removed. [ 332.014497][T19224] hpfs: Bad magic ... probably not HPFS [ 332.018234][T19224] hpfs: Bad magic ... probably not HPFS [ 332.046078][T19228] block nbd1: Unsupported socket: should be TCP or UNIX. [ 332.051310][T19228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19228 comm=syz.1.3834 [ 332.067870][T19230] Bluetooth: MGMT ver 1.23 [ 332.111214][T19049] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 332.277319][T19049] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 332.277338][T19049] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.277349][T19049] usb 7-1: Product: syz [ 332.277356][T19049] usb 7-1: Manufacturer: syz [ 332.277364][T19049] usb 7-1: SerialNumber: syz [ 332.284857][T19049] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 332.300891][ T8554] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 332.320517][T19244] pimreg: entered allmulticast mode [ 332.442592][ T5947] Bluetooth: hci4: command tx timeout [ 332.511502][T19250] __nla_validate_parse: 10 callbacks suppressed [ 332.511516][T19250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3842'. [ 332.518137][T19250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3842'. [ 332.520583][T19049] usb 7-1: USB disconnect, device number 8 [ 332.738696][T19221] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 332.739969][T19221] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 332.775156][T19221] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 332.893946][T19281] bond0 (unregistering): Released all slaves [ 333.041567][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.394067][ T8554] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 333.396940][ T8554] ath9k_htc: Failed to initialize the device [ 333.399384][T19049] usb 7-1: ath9k_htc: USB layer deinitialized [ 333.695374][T19336] cgroup: name respecified [ 333.709878][T19336] netlink: 'syz.2.3867': attribute type 5 has an invalid length. [ 333.785601][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 333.785617][ T40] audit: type=1326 audit(1765088940.755:100956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 333.798465][ T40] audit: type=1326 audit(1765088940.755:100957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 333.808503][ T40] audit: type=1326 audit(1765088940.755:100958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 333.818437][ T40] audit: type=1326 audit(1765088940.755:100959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 333.827986][ T40] audit: type=1326 audit(1765088940.755:100960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 333.837424][ T40] audit: type=1326 audit(1765088940.755:100961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 333.844793][ T40] audit: type=1326 audit(1765088940.755:100962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 333.852329][ T40] audit: type=1326 audit(1765088940.755:100963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 333.864597][ T40] audit: type=1326 audit(1765088940.755:100964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 333.873262][ T40] audit: type=1326 audit(1765088940.755:100965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19341 comm="syz.3.3870" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 334.009898][T19358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.013005][T19358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.016271][T19358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.019034][T19360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.019178][T19358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.019218][T19360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.056995][T19363] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20003 [ 334.147741][T19374] sit0: entered promiscuous mode [ 334.155533][T19374] netlink: 'syz.2.3879': attribute type 1 has an invalid length. [ 334.163920][T19374] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3879'. [ 334.208086][T19380] SELinux: Context is not valid (left unmapped). [ 334.667011][ T5947] Bluetooth: hci4: command tx timeout [ 334.738322][T19395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.797310][T19395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.857844][T19395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.270866][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3892'. [ 335.307976][ T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 335.451141][T19437] fuse: Unknown parameter 'f܈\0Bd55' [ 335.468359][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 335.476396][ T54] usb 6-1: config 0 interface 0 has no altsetting 0 [ 335.478756][ T54] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 335.484031][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.490688][ T54] usb 6-1: config 0 descriptor?? [ 335.571977][T19442] pim6reg: entered allmulticast mode [ 335.577045][T19442] pim6reg: left allmulticast mode [ 335.704891][T19444] syz.4.3898 (19444): drop_caches: 0 [ 335.778801][ T8310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.879565][T19456] mkiss: ax0: crc mode is auto. [ 335.967116][ T54] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 335.982162][T19456] sp0: Synchronizing with TNC [ 336.210262][ T9] usb 6-1: USB disconnect, device number 2 [ 336.296176][T19475] sctp: [Deprecated]: syz.2.3906 (pid 19475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.296176][T19475] Use struct sctp_sack_info instead [ 336.532912][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3908'. [ 336.541427][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3908'. [ 337.009877][T19522] netlink: 'syz.4.3921': attribute type 2 has an invalid length. [ 337.143606][T19544] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3928'. [ 337.197883][T19550] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 337.209742][T19541] Invalid source name [ 337.214449][T19541] UBIFS error (pid: 19541): cannot open "/dev/sg0", error -22 [ 337.279769][T19556] comedi: No check for data length of config insn id -2 is implemented [ 337.286908][T19556] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 337.290901][T19556] comedi: Assuming n=15 is correct [ 337.352148][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3931'. [ 337.355554][T19561] dns_resolver: Unsupported server list version (0) [ 337.598706][T19573] netlink: 'syz.2.3936': attribute type 1 has an invalid length. [ 337.837829][T19662] program syz.1.3942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.853483][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3943'. [ 337.982738][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3946'. [ 337.993962][T19677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19677 comm=syz.4.3946 [ 337.994011][T19678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19678 comm=syz.4.3946 [ 338.262161][T19698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3950'. [ 338.396999][T19707] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 338.400682][T19707] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 338.403817][T19707] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 338.406301][T19707] UDF-fs: Scanning with blocksize 512 failed [ 338.407461][T19709] tmpfs: Bad value for 'mpol' [ 338.412510][T19709] openvswitch: netlink: Key type 11782 is out of range max 32 [ 338.413384][T19707] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 338.418843][T19707] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 338.421990][T19707] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 338.424528][T19707] UDF-fs: Scanning with blocksize 1024 failed [ 338.426952][T19707] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 338.430533][T19707] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 338.435031][T19707] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 338.437645][T19707] UDF-fs: Scanning with blocksize 2048 failed [ 338.441666][T19707] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 338.445233][T19707] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 338.448922][T19707] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 338.452139][T19707] UDF-fs: Scanning with blocksize 4096 failed [ 338.454286][T19707] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 338.454679][T19718] No source specified [ 338.460896][T19719] No source specified [ 338.523390][T19729] No such timeout policy "syz1" [ 338.524313][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3960'. [ 338.531710][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3960'. [ 338.585692][T19734] tmpfs: Cannot disable swap on remount [ 338.768520][T19745] nbd: must specify an index to disconnect [ 338.874116][T19751] i2c i2c-1: Invalid block write size 34 [ 338.878766][T19751] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3967'. [ 338.934158][T19759] 9pnet_virtio: no channels available for device syz [ 338.988810][T19763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3970'. [ 339.200398][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.292911][T19783] netlink: 'syz.3.3977': attribute type 6 has an invalid length. [ 339.376419][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3976'. [ 339.486644][T19791] xt_connbytes: Forcing CT accounting to be enabled [ 339.489253][T19791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.637888][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 339.637906][ T40] audit: type=1400 audit(1765088946.227:101032): avc: denied { name_connect } for pid=19802 comm="syz.1.3984" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 339.708375][ T40] audit: type=1400 audit(1765088946.301:101033): avc: denied { setattr } for pid=18854 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.721166][T19811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3987'. [ 339.725029][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3987'. [ 339.779673][T19811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3987'. [ 340.060487][T19820] fuse: Bad value for 'user_id' [ 340.062531][T19820] fuse: Bad value for 'user_id' [ 340.064650][ T40] audit: type=1400 audit(1765088946.629:101034): avc: denied { getopt } for pid=19821 comm="syz.2.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 340.064845][T19822] overlay: ./bus is not a directory [ 340.073556][T19820] netlink: 'syz.3.3991': attribute type 4 has an invalid length. [ 340.081630][T19822] /dev/sg0: Can't lookup blockdev [ 340.156310][ T40] audit: type=1400 audit(1765088946.722:101035): avc: denied { map } for pid=19827 comm="syz.3.3995" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 340.216915][T19831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.240863][T19831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.284815][T19831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.297619][T19831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.303746][T19831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.315883][T19831] netlink: 'syz.3.3996': attribute type 7 has an invalid length. [ 340.336918][T19830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.396955][ T40] audit: type=1400 audit(1765088946.937:101036): avc: denied { mount } for pid=19835 comm="syz.3.3998" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 340.412444][ T40] audit: type=1400 audit(1765088946.956:101037): avc: denied { remount } for pid=19835 comm="syz.3.3998" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 340.420879][ T40] audit: type=1400 audit(1765088946.956:101038): avc: denied { nlmsg_write } for pid=19835 comm="syz.3.3998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 340.449726][ T40] audit: type=1400 audit(1765088946.994:101039): avc: denied { unmount } for pid=14753 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 340.479746][T19839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.519255][T19841] vivid-001: ================= START STATUS ================= [ 340.522531][T19841] vivid-001: Interlaced VBI Format: false [ 340.525590][T19841] vivid-001: ================== END STATUS ================== [ 341.029465][T19863] netlink: 'syz.3.4007': attribute type 10 has an invalid length. [ 341.041847][T19863] batman_adv: batadv0: Adding interface: team0 [ 341.044341][T19863] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.054859][T19863] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 341.113053][ T40] audit: type=1400 audit(1765088947.611:101040): avc: denied { map } for pid=19868 comm="syz.2.4010" path="socket:[92095]" dev="sockfs" ino=92095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.123799][ T40] audit: type=1400 audit(1765088947.629:101041): avc: denied { setattr } for pid=19868 comm="syz.2.4010" path="socket:[92095]" dev="sockfs" ino=92095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.357810][T19877] hugetlbfs: Unknown parameter 'W)>' [ 341.559734][T19882] binder: BINDER_SET_CONTEXT_MGR already set [ 341.561662][T19882] binder: 19881:19882 ioctl 4018620d 200000000000 returned -16 [ 341.567203][T19882] binder: BINDER_SET_CONTEXT_MGR already set [ 341.569877][T19882] binder: 19881:19882 ioctl 4018620d 200000000040 returned -16 [ 341.615809][T19885] kvm: user requested TSC rate below hardware speed [ 341.800225][T19891] program syz.2.4017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.939118][ T46] net_ratelimit: 5 callbacks suppressed [ 341.939130][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.978565][T19910] vivid-000: ================= START STATUS ================= [ 341.983792][T19910] vivid-000: Test Pattern: 100% Blue [ 341.985545][T19910] vivid-000: Fill Percentage of Frame: 100 [ 341.987552][T19910] vivid-000: Horizontal Movement: No Movement [ 341.989529][T19910] vivid-000: Vertical Movement: No Movement [ 341.991647][T19910] vivid-000: OSD Text Mode: All [ 341.993249][T19910] vivid-000: Show Border: false [ 341.994839][T19910] vivid-000: Show Square: false [ 341.996442][T19910] vivid-000: Sensor Flipped Horizontally: false [ 341.998554][T19910] vivid-000: Sensor Flipped Vertically: false [ 342.000543][T19910] vivid-000: Insert SAV Code in Image: false [ 342.005847][T19910] vivid-000: Insert EAV Code in Image: true [ 342.008845][T19910] vivid-000: Insert Video Guard Band: false [ 342.011137][T19910] vivid-000: Reduced Framerate: false [ 342.013519][T19910] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 342.016019][T19910] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 023-0 [ 342.018453][T19910] vivid-000: Enable Capture Cropping: true [ 342.020325][T19910] vivid-000: Enable Capture Composing: true [ 342.022282][T19910] vivid-000: Enable Capture Scaler: true [ 342.024166][T19910] vivid-000: Timestamp Source: End of Frame [ 342.026571][T19910] vivid-000: Colorspace: sRGB [ 342.028135][T19910] vivid-000: Transfer Function: sRGB [ 342.030361][T19910] vivid-000: Y'CbCr Encoding: Default [ 342.032233][T19910] vivid-000: HSV Encoding: Hue 0-179 [ 342.035208][T19910] vivid-000: Quantization: Default [ 342.037480][T19910] vivid-000: Apply Alpha To Red Only: true [ 342.039855][T19910] vivid-000: Standard Aspect Ratio: 4x3 [ 342.045310][T19910] vivid-000: DV Timings Signal Mode: Cycle Through All DV Timings inactive [ 342.048309][T19910] vivid-000: DV Timings: 4096x2160p60 inactive [ 342.050445][T19910] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 342.052960][T19910] vivid-000: Maximum EDID Blocks: 2 [ 342.054747][T19910] vivid-000: Limited RGB Range (16-235): false [ 342.056871][T19910] vivid-000: Rx RGB Quantization Range: Automatic [ 342.059059][T19910] vivid-000: Power Present: 0x00000001 [ 342.060966][T19910] tpg source WxH: 640x360 (Y'CbCr) [ 342.062719][T19910] tpg field: 1 [ 342.064480][T19910] tpg crop: (0,0)/640x360 [ 342.065973][T19910] tpg compose: (0,0)/640x360 [ 342.067509][T19910] tpg colorspace: 12 [ 342.068764][T19910] tpg transfer function: 1/2 [ 342.070323][T19910] tpg Y'CbCr encoding: 0/1 [ 342.071751][T19910] tpg quantization: 2/1 [ 342.073069][T19910] tpg RGB range: 0/2 [ 342.074305][T19910] vivid-000: ================== END STATUS ================== [ 342.144023][T19920] syzkaller0: entered promiscuous mode [ 342.146092][T19920] syzkaller0: entered allmulticast mode [ 342.196246][T19922] tmpfs: Bad value for 'mpol' [ 342.403772][T19945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19945 comm=syz.3.4035 [ 342.528843][T19949] vcan0: tx address claim with different name [ 342.533406][T19949] vcan0: tx address claim with different name [ 342.536280][T19949] vcan0: tx address claim with different name [ 342.538959][T19952] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 343.558610][T19970] block nbd4: NBD_DISCONNECT [ 343.614941][T19972] Cannot find del_set index 4 as target [ 343.724563][T19974] __nla_validate_parse: 11 callbacks suppressed [ 343.724595][T19974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 343.779118][T19977] tmpfs: Bad value for 'mpol' [ 344.422882][T19991] fuse: Unknown parameter '000000000000000000000030x0000000000000003' [ 344.426385][T19991] netlink: 'syz.3.4053': attribute type 1 has an invalid length. [ 344.453310][T19991] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.463948][T19991] bond6: (slave ip6erspan0): making interface the new active one [ 344.467318][T19991] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 344.490936][T19993] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 344.494969][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4052'. [ 344.677216][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.706968][T20002] binder: BINDER_SET_CONTEXT_MGR already set [ 344.709631][T20002] binder: 20001:20002 ioctl 4018620d 2000000002c0 returned -16 [ 344.977872][T20024] netlink: 'syz.3.4064': attribute type 5 has an invalid length. [ 345.030047][T20026] netlink: 'syz.2.4065': attribute type 2 has an invalid length. [ 345.033199][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 345.128033][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 345.128044][ T40] audit: type=1400 audit(1765088951.370:101048): avc: denied { write } for pid=20035 comm="syz.2.4067" name="/" dev="9p" ino=73924685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.591152][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'. [ 345.682776][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'. [ 346.405703][T20081] tc_dump_action: action bad kind [ 346.552123][T20087] siw: device registration error -23 [ 346.646954][ T40] audit: type=1400 audit(1765088952.792:101049): avc: denied { create } for pid=20094 comm="syz.3.4085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 346.721412][T20101] syzkaller1: entered promiscuous mode [ 346.724006][T20101] syzkaller1: entered allmulticast mode [ 346.752004][T20103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4088'. [ 346.847245][T20114] bridge0: entered allmulticast mode [ 347.420109][T20144] syzkaller0: entered promiscuous mode [ 347.422916][T20144] syzkaller0: entered allmulticast mode [ 347.860562][T20146] xt_HMARK: spi-set and port-set can't be combined [ 348.096701][T19424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.461183][T20150] [U] zͻi[27| [ 348.462891][T20150] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 348.467469][T20150] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 348.469643][T20150] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E [ 348.472251][T20150] [U] Tqtvb|@D DE/Quٝ32yrr|l;6D%jKƷ2A[ ikuC덁-T1xTv3l<3ΑKÌ5I.>81(FW [ 348.478101][T20150] [U] 8)X)YvxRĻbmbN@ox;JD, [ 348.480136][T20150] [U] *Cn3v7KEXgt_3 [ 348.482132][T20150] [U] D/QazҬEHgE1$_ks=R@ [ 348.484007][T20150] [U] ϼcEv @ [ 348.485245][T20150] [U] a% [ 348.486296][T20150] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 348.492327][T20150] [U] f1p3 [ 348.493480][T20150] [U] N0[L;a_l&kMC [ 348.495045][T20150] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 348.498088][T20149] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 initial count (48 ns). Using initial count to start timer. [ 353.215019][ T40] audit: type=1326 audit(1765088958.927:101052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20322 comm="syz.3.4159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 353.225526][ T40] audit: type=1326 audit(1765088958.937:101053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20322 comm="syz.3.4159" exe="/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 353.236710][ T40] audit: type=1326 audit(1765088958.937:101054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20322 comm="syz.3.4159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 353.250222][ T40] audit: type=1326 audit(1765088958.955:101055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20322 comm="syz.3.4159" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 353.259992][ T40] audit: type=1326 audit(1765088958.965:101056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20322 comm="syz.3.4159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 353.269510][ T40] audit: type=1326 audit(1765088958.965:101057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20322 comm="syz.3.4159" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 353.278585][ T40] audit: type=1326 audit(1765088958.965:101058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20322 comm="syz.3.4159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 353.287582][ T40] audit: type=1326 audit(1765088958.965:101059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20322 comm="syz.3.4159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 353.296876][ T40] audit: type=1326 audit(1765088958.965:101060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20322 comm="syz.3.4159" exe="/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f8f3858f7c9 code=0x7ffc0000 [ 353.484021][T20333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.488539][T20333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.153965][T20349] netlink: 'syz.2.4166': attribute type 1 has an invalid length. [ 354.157369][T20349] netlink: 'syz.2.4166': attribute type 4 has an invalid length. [ 354.162991][T20349] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4166'. [ 354.167344][T20349] netlink: 'syz.2.4166': attribute type 1 has an invalid length. [ 354.171761][T20349] netlink: 'syz.2.4166': attribute type 4 has an invalid length. [ 354.175873][T20349] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4166'. [ 354.253052][T20357] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 354.267386][ T62] net_ratelimit: 10 callbacks suppressed [ 354.267403][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.985033][T20380] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 354.987800][T20380] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 354.991245][T20380] vhci_hcd vhci_hcd.0: Device attached [ 355.047812][T20385] vhci_hcd: connection closed [ 355.048046][ T96] vhci_hcd: stop threads [ 355.050890][ T96] vhci_hcd: release socket [ 355.052320][ T96] vhci_hcd: disconnect device [ 355.311572][ T9705] IPVS: starting estimator thread 0... [ 355.341631][T20409] netlink: 'syz.3.4184': attribute type 8 has an invalid length. [ 355.385974][T20411] netlink: 'syz.3.4185': attribute type 11 has an invalid length. [ 355.431593][T20407] IPVS: using max 27 ests per chain, 64800 per kthread [ 355.509572][T20422] fuse: Bad value for 'group_id' [ 355.511372][T20422] fuse: Bad value for 'group_id' [ 355.627418][T20425] overlayfs: regular lower layers cannot follow data lower layers [ 355.790389][T20442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.849364][ T5941] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.854499][ T5941] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.861220][ T5941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.867591][ T5941] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.871018][ T5941] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.923119][ T9705] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 356.083451][ T9705] usb 7-1: Using ep0 maxpacket: 8 [ 356.087645][ T9705] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 356.090760][ T9705] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 356.094746][ T9705] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.098202][ T9705] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.102215][ T9705] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.105659][ T9705] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.109580][ T9705] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 356.115026][ T9705] usb 7-1: config 168 interface 0 has no altsetting 0 [ 356.118219][ T9705] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 356.121123][ T9705] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 356.124495][ T9705] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.128201][ T9705] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.133831][ T9705] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.138358][ T9705] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.142119][ T9705] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 356.146490][ T9705] usb 7-1: config 168 interface 0 has no altsetting 0 [ 356.150544][ T9705] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 356.153062][ T9705] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 356.154656][T20445] chnl_net:caif_netlink_parms(): no params data found [ 356.156556][ T9705] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 356.162903][ T9705] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.166478][ T9705] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 356.170106][ T9705] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 356.174391][ T9705] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 356.178493][ T9705] usb 7-1: config 168 interface 0 has no altsetting 0 [ 356.184759][ T9705] usb 7-1: string descriptor 0 read error: -22 [ 356.186705][ T9705] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 356.189497][ T9705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.195772][ T9705] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 356.215294][T19424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.220174][T19424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.267860][T20453] tipc: Started in network mode [ 356.270076][T20453] tipc: Node identity 7e0278f88d8d, cluster identity 4711 [ 356.272724][T20453] tipc: Enabled bearer , priority 0 [ 356.279906][T20453] syzkaller0: entered promiscuous mode [ 356.281624][T20453] syzkaller0: entered allmulticast mode [ 356.308259][ T8302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.317981][T20453] tipc: Resetting bearer [ 356.334331][T19424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.337457][T19424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.344210][T20445] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.346504][T20445] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.348786][T20445] bridge_slave_0: entered allmulticast mode [ 356.351634][T20445] bridge_slave_0: entered promiscuous mode [ 356.354564][T20452] tipc: Resetting bearer [ 356.366286][T20452] tipc: Disabling bearer [ 356.370215][T20445] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.373389][T20445] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.375737][T20445] bridge_slave_1: entered allmulticast mode [ 356.378791][T20445] bridge_slave_1: entered promiscuous mode [ 356.394329][T20445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.398915][T20445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.418224][ T60] usb 7-1: USB disconnect, device number 9 [ 356.431757][T19424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.434994][T19424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.457398][T20445] team0: Port device team_slave_0 added [ 356.460947][T20445] team0: Port device team_slave_1 added [ 356.474500][T20445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.476731][T20445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.486602][T20445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.491147][T20445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.493335][T20445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.501344][T20445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.530179][T19424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.534327][T19424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.557680][T20445] hsr_slave_0: entered promiscuous mode [ 356.560054][T20445] hsr_slave_1: entered promiscuous mode [ 356.562157][T20445] debugfs: 'hsr0' already exists in 'hsr' [ 356.564088][T20445] Cannot create hsr debugfs directory [ 356.693292][T19424] bridge_slave_1: left allmulticast mode [ 356.695123][T19424] bridge_slave_1: left promiscuous mode [ 356.697024][T19424] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.701260][T19424] bridge_slave_0: left allmulticast mode [ 356.703104][T19424] bridge_slave_0: left promiscuous mode [ 356.705191][T19424] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.799686][T20469] kvm: kvm [20468]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 356.804684][T20469] kvm: kvm [20468]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 357.001629][T20472] netlink: 'syz.4.4204': attribute type 1 has an invalid length. [ 357.007550][T20472] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4204'. [ 357.025996][T19424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.033116][T19424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.039458][T19424] bond0 (unregistering): Released all slaves [ 357.501238][T19424] hsr_slave_0: left promiscuous mode [ 357.503749][T19424] hsr_slave_1: left promiscuous mode [ 357.506032][T19424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.508539][T19424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.511236][T19424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.513625][T19424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.527657][T19424] veth1_macvtap: left promiscuous mode [ 357.528507][T20493] fuse: Bad value for 'user_id' [ 357.529473][T19424] veth0_macvtap: left promiscuous mode [ 357.531664][T20493] fuse: Bad value for 'user_id' [ 357.533494][T19424] veth1_vlan: left promiscuous mode [ 357.539981][T20493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.544658][T19424] veth0_vlan: left promiscuous mode [ 357.641019][T19424] pimreg (unregistering): left allmulticast mode [ 358.001427][T19424] team0 (unregistering): Port device team_slave_1 removed [ 358.048600][T19424] team0 (unregistering): Port device team_slave_0 removed [ 358.104414][ T5947] Bluetooth: hci6: command tx timeout [ 359.110615][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 359.110631][ T40] audit: type=1400 audit(1765088964.445:101095): avc: denied { watch_mount } for pid=20502 comm="syz.3.4208" path="/456" dev="tmpfs" ino=2491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 359.303416][T20513] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 359.364121][T20445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 359.366710][T20445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 359.368727][T20445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 359.387229][T20445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 359.453312][T20445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.464143][T20445] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.467103][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.467234][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.471667][T19424] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.471755][T19424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.509123][T20521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.509342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.639828][T20445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.645053][ T8302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.799077][T20445] veth0_vlan: entered promiscuous mode [ 359.812178][T20445] veth1_vlan: entered promiscuous mode [ 359.831699][T20445] veth0_macvtap: entered promiscuous mode [ 359.837687][T20445] veth1_macvtap: entered promiscuous mode [ 359.851735][T20445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.861485][T20445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.873016][ T8292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.876606][ T8292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.885280][ T8292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.888404][ T8292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.940943][ T8292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.944227][ T8292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.971115][T19424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.974540][T19424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.328522][ T5947] Bluetooth: hci6: command tx timeout [ 360.495282][ T5947] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 360.496599][ T5947] Bluetooth: hci5: SCO packet for unknown connection handle 1 [ 360.500506][ T5947] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 360.551547][ T5947] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 360.775128][T20593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4217'. [ 360.940913][T20600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4218'. [ 361.063578][T20613] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4222'. [ 361.204239][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4226'. [ 361.207606][T20629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4226'. [ 361.456467][T20628] virtio-fs: tag not found [ 361.456467][T20631] virtio-fs: tag not found [ 361.650105][T20637] overlayfs: invalid origin (0000) [ 361.689466][T20639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4230'. [ 361.771011][ T40] audit: type=1400 audit(1765088966.933:101096): avc: denied { setattr } for pid=20645 comm="syz.4.4232" name="L2TP/IPv6" dev="sockfs" ino=98637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 362.081587][T20653] SELinux: failed to load policy [ 362.133840][T20655] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4235'. [ 362.368882][T20664] could not allocate digest TFM handle cbcmac(aes-asm) [ 362.425864][T20673] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4239'. [ 362.431334][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4239'. [ 362.436090][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4239'. [ 362.486202][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.493279][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.496516][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.502775][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.505931][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.509150][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.512811][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.515938][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.519112][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.522495][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.525698][ T9801] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 362.533567][ T9801] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [sy] on syz0 [ 362.544981][T20677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4241'. [ 362.548615][T20677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4241'. [ 362.552400][ T5947] Bluetooth: hci6: command tx timeout [ 362.603296][ T40] audit: type=1804 audit(1765088967.709:101097): pid=20681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.4241" name="/newroot/511/file0" dev="tmpfs" ino=2840 res=1 errno=0 [ 362.637217][T20683] erspan0: entered promiscuous mode [ 362.684865][T20679] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 362.761032][T20693] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 362.763018][T20691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=511 sclass=netlink_route_socket pid=20691 comm=syz.2.4245 [ 362.763912][T20693] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 363.046418][T20716] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4250'. [ 363.049927][T20716] tipc: Invalid UDP bearer configuration [ 363.049966][T20716] tipc: Enabling of bearer rejected, failed to enable media [ 363.173808][T20721] netlink: 'syz.2.4253': attribute type 4 has an invalid length. [ 363.536703][ T40] audit: type=1400 audit(1765088968.588:101098): avc: denied { ioctl } for pid=20742 comm="syz.2.4259" path="socket:[97112]" dev="sockfs" ino=97112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.587860][T20747] loop2: detected capacity change from 0 to 7 [ 363.593009][T20747] Dev loop2: unable to read RDB block 7 [ 363.595435][T20747] loop2: AHDI p1 p2 p3 [ 363.597251][T20747] loop2: partition table partially beyond EOD, truncated [ 363.600408][T20747] loop2: p1 start 1601398130 is beyond EOD, truncated [ 363.603419][T20747] loop2: p2 start 1702059890 is beyond EOD, truncated [ 363.811658][T20766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4268'. [ 363.835742][ T40] audit: type=1804 audit(1765088968.859:101099): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.4266" name="/newroot/14/file0" dev="tmpfs" ino=89 res=1 errno=0 [ 363.859556][ T40] audit: type=1800 audit(1765088968.869:101100): pid=20763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4266" name="file0" dev="tmpfs" ino=89 res=0 errno=0 [ 363.946358][T20778] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4271'. [ 363.950734][T20779] tmpfs: Unknown parameter 'hash' [ 363.952653][T20779] tmpfs: Unknown parameter 'hash' [ 363.977474][T20791] usb usb8: usbfs: process 20791 (syz.3.4274) did not claim interface 0 before use [ 363.977610][T20788] netlink: 'syz.2.4275': attribute type 1 has an invalid length. [ 364.004589][T20788] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4275'. [ 364.020318][T20788] bond1: (slave bridge6): making interface the new active one [ 364.024032][T20788] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 364.043005][T20788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4275'. [ 364.067827][T20798] netlink: 'syz.5.4277': attribute type 3 has an invalid length. [ 364.083599][T20801] netlink: 'syz.2.4278': attribute type 21 has an invalid length. [ 364.134734][T20803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20803 comm=syz.5.4279 [ 364.183560][T20814] netlink: 'syz.2.4283': attribute type 10 has an invalid length. [ 364.224524][T20822] random: crng reseeded on system resumption [ 364.362216][ T40] audit: type=1400 audit(1765088969.327:101101): avc: denied { write } for pid=20826 comm="syz.2.4288" name="/" dev="configfs" ino=1086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 364.378972][ T40] audit: type=1400 audit(1765088969.327:101102): avc: denied { cmd } for pid=20826 comm="syz.2.4288" path="socket:[97178]" dev="sockfs" ino=97178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 364.392808][ T40] audit: type=1400 audit(1765088969.392:101103): avc: denied { unmount } for pid=16982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 364.458527][ T40] audit: type=1400 audit(1765088969.449:101104): avc: denied { setattr } for pid=20832 comm="syz.2.4290" name="seq" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 364.506298][T20834] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 364.515851][T20834] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 364.522186][T20834] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 364.531836][T20834] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 364.615782][T20842] netlink: 'syz.2.4292': attribute type 8 has an invalid length. [ 364.777300][ T5947] Bluetooth: hci6: command tx timeout [ 364.899652][T20854] CUSE: unknown device info "" [ 364.901330][T20854] CUSE: zero length info key specified [ 364.933532][T20856] netlink: 'syz.4.4297': attribute type 2 has an invalid length. [ 365.226065][T19424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.347233][T20866] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 365.349810][T20866] macsec1: entered allmulticast mode [ 365.355468][T20866] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 365.368491][T20866] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 365.372057][T20866] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 365.494357][T20871] syzkaller0: entered promiscuous mode [ 365.496694][T20871] syzkaller0: entered allmulticast mode [ 365.769833][ T40] audit: type=1400 audit(1765088970.664:101105): avc: denied { connect } for pid=20880 comm="syz.3.4303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 365.836045][T20886] nfs4: Bad value for 'source' [ 366.772803][T20853] Set syz1 is full, maxelem 65536 reached [ 367.805510][T20887] __nla_validate_parse: 7 callbacks suppressed [ 367.805523][T20887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4304'. [ 367.824160][ T9971] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 367.827458][ T9971] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 367.845437][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 367.935818][T20897] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 368.023081][T20929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4312'. [ 368.031292][T20909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4309'. [ 368.035944][T20909] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4309'. [ 368.061261][T20905] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 368.074372][T20933] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4313'. [ 368.081066][T20933] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4313'. [ 368.091425][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4313'. [ 368.144377][T20936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4314'. [ 368.628299][ T143] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.631299][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.722042][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 368.797211][ T143] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.860992][ T34] usb 7-1: device descriptor read/64, error -71 [ 369.117716][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 369.256632][ T34] usb 7-1: device descriptor read/64, error -71 [ 369.374653][ T34] usb usb7-port1: attempt power cycle [ 369.759281][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 369.781481][ T34] usb 7-1: device descriptor read/8, error -71 [ 370.037168][ T34] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 370.059000][ T34] usb 7-1: device descriptor read/8, error -71 [ 370.176941][ T34] usb usb7-port1: unable to enumerate USB device [ 370.594583][T21016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.708100][ T40] audit: type=1400 audit(1765088975.284:101106): avc: denied { search } for pid=21035 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 370.715336][ T40] audit: type=1400 audit(1765088975.303:101107): avc: denied { read write } for pid=21035 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 370.723046][ T40] audit: type=1400 audit(1765088975.303:101108): avc: denied { open } for pid=21035 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 370.730206][ T40] audit: type=1400 audit(1765088975.303:101109): avc: denied { lock } for pid=21035 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 370.737671][ T40] audit: type=1400 audit(1765088975.303:101110): avc: denied { read } for pid=21035 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 371.419504][ T40] audit: type=1326 audit(1765088975.958:101111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21042 comm="syz.4.4333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.429421][ T40] audit: type=1326 audit(1765088975.958:101112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21042 comm="syz.4.4333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.438793][ T40] audit: type=1326 audit(1765088975.958:101113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21042 comm="syz.4.4333" exe="/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.446448][ T40] audit: type=1326 audit(1765088975.958:101114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21042 comm="syz.4.4333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.454440][ T40] audit: type=1326 audit(1765088975.958:101115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21042 comm="syz.4.4333" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.519651][ T40] audit: type=1326 audit(1765088976.051:101116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21048 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.527097][ T40] audit: type=1326 audit(1765088976.051:101117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21048 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.536956][ T40] audit: type=1326 audit(1765088976.051:101118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21048 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.546557][ T40] audit: type=1326 audit(1765088976.051:101119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21048 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.556138][ T40] audit: type=1326 audit(1765088976.051:101120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21048 comm="syz.4.4336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe432f8f7c9 code=0x7ffc0000 [ 371.677815][T21056] syz_tun: left promiscuous mode [ 371.683182][T21056] veth0_macvtap: left allmulticast mode [ 371.713912][T21056] hsr1: left promiscuous mode [ 371.728450][T19421] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.731311][T19421] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.734533][T19421] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.738228][T19421] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.742392][T19421] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.745575][T19421] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.748598][T19421] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.752259][T19421] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.337609][ T10] kernel read not supported for file /newroot/478 (pid: 10 comm: kworker/0:1) [ 372.472680][T21100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.477559][T21100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.480786][T21100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.483923][T21100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.489408][T21100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.493086][T21100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.500399][T21099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.560744][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.308196][T21170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.311686][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.965692][T21219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21219 comm=syz.2.4405 [ 375.054348][T21276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4429'. [ 375.057801][T21276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4429'. [ 375.398150][T21301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21301 comm=syz.2.4440 [ 375.725849][T21352] bond1: option tlb_dynamic_lb: invalid value (156) [ 375.729666][T21352] bond1 (unregistering): Released all slaves [ 375.776352][T21361] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4465'. [ 375.780256][T21361] netlink: 'syz.4.4465': attribute type 1 has an invalid length. [ 376.838136][T21002] net_ratelimit: 4 callbacks suppressed [ 376.838152][T21002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.948144][T21466] syzkaller0: entered promiscuous mode [ 376.950483][T21466] syzkaller0: entered allmulticast mode [ 377.287416][T21506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.908361][T21553] ------------[ cut here ]------------ [ 377.910805][T21553] WARNING: fs/exec.c:118 at path_noexec+0x1ca/0x230, CPU#0: syz.5.4549/21553 [ 377.913794][T21553] Modules linked in: [ 377.915746][T21553] CPU: 0 UID: 0 PID: 21553 Comm: syz.5.4549 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.920319][T21553] Tainted: [L]=SOFTLOCKUP [ 377.921734][T21553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 377.925192][T21553] RIP: 0010:path_noexec+0x1ca/0x230 [ 377.927059][T21553] Code: ff 83 e3 02 48 89 de e8 b4 22 81 ff 48 85 db 41 0f 95 c4 e8 d8 27 81 ff 44 89 e0 5b 5d 41 5c e9 fc 06 3c 09 e8 c7 27 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 e9 f4 ea ff e9 a8 fe ff ff e8 df f4 ea [ 377.934540][T21553] RSP: 0018:ffffc900071e7c60 EFLAGS: 00010283 [ 377.937010][T21553] RAX: 00000000000000c8 RBX: ffff88801f296560 RCX: ffffc9002b405000 [ 377.938909][ T40] kauditd_printk_skb: 42 callbacks suppressed SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 377.938925][ T40] audit: type=1400 audit(1765088982.046:101163): avc: denied { write } for pid=5920 comm="syz-executor" path="pipe:[2905]" dev="pipefs" ino=2905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 377.940242][T21553] RDX: 0000000000080000 RSI: ffffffff823dbca9 RDI: 0000000000000007 [ 377.952840][T21553] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 377.955435][T21553] R10: 0000000000000000 R11: ffff888023162ff0 R12: 0000200000000000 [ 377.958074][T21553] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 377.960671][T21553] FS: 00007fa00e9a76c0(0000) GS:ffff8880d690d000(0000) knlGS:0000000000000000 [ 377.963526][T21553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.965819][T21553] CR2: 000000110c29eb7c CR3: 000000002e52e000 CR4: 0000000000352ef0 [ 377.968446][T21553] Call Trace: [ 377.969773][T21553] [ 377.970792][T21553] do_mmap+0xd23/0x1210 [ 377.972276][T21553] ? __pfx_do_mmap+0x10/0x10 [ 377.973857][T21553] ? __pfx_down_write_killable+0x10/0x10 [ 377.975740][T21553] ? __might_fault+0xe3/0x190 [ 377.977806][T21553] vm_mmap_pgoff+0x29e/0x470 [ 377.979854][T21553] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 377.982111][T21553] ? __fget_files+0x20e/0x3c0 [ 377.983839][T21553] ksys_mmap_pgoff+0x32c/0x5c0 [ 377.985416][T21553] __x64_sys_mmap+0x125/0x190 [ 377.987078][T21553] do_syscall_64+0xcd/0xf80 [ 377.988913][T21553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.991504][T21553] RIP: 0033:0x7fa00db8f7c9 [ 377.993341][T21553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.000405][T21553] RSP: 002b:00007fa00e9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 378.003737][T21553] RAX: ffffffffffffffda RBX: 00007fa00dde5fa0 RCX: 00007fa00db8f7c9 [ 378.006631][T21553] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 378.009308][T21553] RBP: 00007fa00dc13f91 R08: 0000000000000005 R09: 0000000000000000 [ 378.012110][T21553] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 378.014893][T21553] R13: 00007fa00dde6038 R14: 00007fa00dde5fa0 R15: 00007ffcb8897428 [ 378.017544][T21553] [ 378.018580][T21553] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 378.020948][T21553] CPU: 0 UID: 0 PID: 21553 Comm: syz.5.4549 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.024497][T21553] Tainted: [L]=SOFTLOCKUP [ 378.025917][T21553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 378.029401][T21553] Call Trace: [ 378.030516][T21553] [ 378.031555][T21553] dump_stack_lvl+0x3d/0x1f0 [ 378.033097][T21553] vpanic+0x640/0x6f0 [ 378.034421][T21553] ? path_noexec+0x1ca/0x230 [ 378.035959][T21553] panic+0xca/0xd0 [ 378.037235][T21553] ? __pfx_panic+0x10/0x10 [ 378.038722][T21553] check_panic_on_warn+0xab/0xb0 [ 378.040362][T21553] __warn+0x108/0x3c0 [ 378.041687][T21553] __report_bug+0x2a0/0x520 [ 378.043190][T21553] ? path_noexec+0x1ca/0x230 [ 378.044717][T21553] ? __pfx___report_bug+0x10/0x10 [ 378.046440][T21553] ? arch_get_unmapped_area_topdown+0x60b/0xa00 [ 378.048565][T21553] ? path_noexec+0x1ca/0x230 [ 378.050103][T21553] report_bug+0xb2/0x220 [ 378.051523][T21553] ? path_noexec+0x1ca/0x230 [ 378.053054][T21553] handle_bug+0x127/0x260 [ 378.054479][T21553] exc_invalid_op+0x17/0x50 [ 378.055999][T21553] asm_exc_invalid_op+0x1a/0x20 [ 378.057605][T21553] RIP: 0010:path_noexec+0x1ca/0x230 [ 378.059318][T21553] Code: ff 83 e3 02 48 89 de e8 b4 22 81 ff 48 85 db 41 0f 95 c4 e8 d8 27 81 ff 44 89 e0 5b 5d 41 5c e9 fc 06 3c 09 e8 c7 27 81 ff 90 <0f> 0b 90 e9 47 ff ff ff e8 e9 f4 ea ff e9 a8 fe ff ff e8 df f4 ea [ 378.065462][T21553] RSP: 0018:ffffc900071e7c60 EFLAGS: 00010283 [ 378.067482][T21553] RAX: 00000000000000c8 RBX: ffff88801f296560 RCX: ffffc9002b405000 [ 378.070031][T21553] RDX: 0000000000080000 RSI: ffffffff823dbca9 RDI: 0000000000000007 [ 378.072609][T21553] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 378.075180][T21553] R10: 0000000000000000 R11: ffff888023162ff0 R12: 0000200000000000 [ 378.077756][T21553] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 378.080325][T21553] ? path_noexec+0x1c9/0x230 [ 378.081853][T21553] do_mmap+0xd23/0x1210 [ 378.083240][T21553] ? __pfx_do_mmap+0x10/0x10 [ 378.084762][T21553] ? __pfx_down_write_killable+0x10/0x10 [ 378.086593][T21553] ? __might_fault+0xe3/0x190 [ 378.088156][T21553] vm_mmap_pgoff+0x29e/0x470 [ 378.089690][T21553] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 378.091394][T21553] ? __fget_files+0x20e/0x3c0 [ 378.092950][T21553] ksys_mmap_pgoff+0x32c/0x5c0 [ 378.094531][T21553] __x64_sys_mmap+0x125/0x190 [ 378.096085][T21553] do_syscall_64+0xcd/0xf80 [ 378.097599][T21553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.099524][T21553] RIP: 0033:0x7fa00db8f7c9 [ 378.100991][T21553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.107257][T21553] RSP: 002b:00007fa00e9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 378.109953][T21553] RAX: ffffffffffffffda RBX: 00007fa00dde5fa0 RCX: 00007fa00db8f7c9 [ 378.112529][T21553] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 378.115089][T21553] RBP: 00007fa00dc13f91 R08: 0000000000000005 R09: 0000000000000000 [ 378.117685][T21553] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 378.120252][T21553] R13: 00007fa00dde6038 R14: 00007fa00dde5fa0 R15: 00007ffcb8897428 [ 378.122814][T21553] [ 378.124515][T21553] Kernel Offset: disabled [ 378.125931][T21553] Rebooting in 86400 seconds..